Connect another MCP client

Antigravity

Merge this entry into Antigravity's MCP server configuration, then use Authenticate and approve the requested permissions. Do not add token headers. Keep one VirusTotal entry; preserve other servers.

{
  "mcpServers": {
    "virustotal": {
      "serverUrl": "https://ai.virustotal.com/mcp"
    }
  }
}

Plugin installation, browser sign-in, one domain report and revocation were verified with Agy 1.2.14/1.2.15 on 2 October 2026. This manual serverUrl entry was not tested separately. Renewal, writes and graphical IDE OAuth remain unverified. Local stdio was tested separately.

Gemini CLI extension

gemini extensions install https://github.com/VirusTotal/virustotal-mcp --ref main

Review and approve extension installation, then authenticate VirusTotal from /mcp in a Gemini CLI session. Your model-provider login is separate from VTAI access.

Gemini CLI 0.58.0 installed extension 0.9.8, discovered its skill and uninstalled it in an isolated profile on 2 October 2026. A separate session completed one domain query using a Gemini API key and supplied VTAI OAuth bearer, with extensions disabled. Native browser OAuth and token renewal remain unverified.

Installation, updates and removal.

Submit actual bytes only when the user explicitly requests the upload, under the sharing guidance above. A missing report is not permission to upload. submit_local_file(path, expected_sha256=None) accepts at most 32,000,000 bytes over stdio. It copies the file accessible to the local vt-mcp process; the optional SHA-256 must match that copy.

submit_file(sha256, content_base64) accepts at most 24,000,000 decoded bytes over HTTP or stdio. HTTP receives bytes; it cannot read a path on your machine. Base64 passes through your MCP host and may be retained by your model provider. Standard submission is not confidential: content may be accessible to the VirusTotal community and security partners.

If this client cannot transfer the file bytes for an explicitly requested upload, offer the existing VirusTotal upload page at https://www.virustotal.com/gui/home/upload under the same sharing guidance. Before uploading, manually check the file's actual hash in VirusTotal and upload only if unknown. After the user uploads the file, obtain its actual hash and look up its report. The report may not be available immediately; every repeated query consumes quota. A web upload creates no VTAI receipt. This alternative does not bypass client permissions, authentication or quota limits, and must not repeat an uncertain submission.

For submissions through this connection, keep the SHA-256. Recover an uncertain result with get_submission(sha256) using the same connection or credential, without sending the file again. exists returns an existing report; submitted supplies an analysis ID. Read it with get_analysis within a finite polling budget. A submission can remain unknown permanently; do not repeat submission to resolve it.

Only when the user explicitly requests URL submission or network reanalysis, use submit_url(url, request_id), reanalyze_domain(domain, request_id) or reanalyze_ip(ip, request_id). Generate and persist a canonical lowercase UUIDv4 request ID before calling. These operations use standard VirusTotal sharing without a per-operation confirmation from VTAI.

After an uncertain response, recover with get_submission(request_id=request_id) using the same connection. Supply exactly one of sha256 or request_id. Read the returned analysis with get_analysis(analysis_id, request_id=request_id) within a finite polling budget. Do not automatically replay the POST; an intentional later rescan uses a new request ID.

OAuth requires vt:reports:read and vt:network-analysis:write. An existing file permission does not authorize network analysis. Reconnect and approve the new permission once for that connection; Agent Tokens retain their task-authorized capabilities.

A missing report or absence of detections does not establish safety. URL lookup discloses the complete URL to VTAI and VirusTotal. Use a domain lookup when paths, query parameters or fragments contain private information. Report tools and selected-analysis reads do not submit files.

For 401 or 403, check credential validity and the client’s environment, input or file mapping without displaying its value. For 400, check malformed or conflicting authentication headers. For 429, respect Retry-After and keep the existing credential; registering another identity is not quota recovery. A service failure is not an unknown report; a missing /mcp endpoint is a connection problem.

A tool's not_found is unknown, not evidence of safety. Only when the user explicitly requests an upload, submit actual bytes with the existing file tools; a hash cannot start analysis. Network submissions and reanalysis also require the user's explicit request; retain the request ID for recovery.

X-VTAI-Error: unexpanded_credential means an x-apikey variable reference was sent literally. Load the protected token into the client environment and use its documented variable syntax. Do not paste the token into chat or register again. This specific diagnostic applies to x-apikey.

Prefer direct HTTP? Use the same token with https://ai.virustotal.com/api/v3. Read the agent API instructions or interactive API docs. Registration is POST /api/v3/agents/register; reconnecting does not require another registration.

Remove or disable the virustotal entry, restart the client and confirm the tools disappear. Other clients using the same credential retain access. Remove stored credentials only when no client needs them. Reconnect with the same credential while it remains active. VTAI history is retained.

Revoking the credential disables this agent’s access through REST and MCP in every client. Existing records remain. A query admitted before revocation may finish.

Keep your protected copy if revocation is not confirmed, so you can try again.