# VirusTotal AI (VTAI)

Trust Every Decision. Human or Agent.

VTAI is VirusTotal's agent-first trust layer: a minimized API, machine-readable specs, security skills, and integrations for coding agents, IDEs, and security gateways that need trustworthy file and hash intelligence without wasting context.

## What VTAI Is
VirusTotal is extending its trust model into the agentic era. VTAI gives AI systems a compact, operational surface for reputation, malware analysis, file intelligence, and safe execution decisions.

## Discovery Entry Points
- [llms.txt](/llms.txt): Fastest human-readable and model-readable overview of VTAI, the API, and current integrations.
- [OpenAPI](/openapi.json): Machine-readable schema for direct tool integration, code generation, and client validation.
- [API Catalog](/.well-known/api-catalog): RFC 9727 catalog exposing the VTAI API surface, OpenAPI description, docs, and health endpoint.
- [Agent Skill](/skills/BASIC.md): Canonical skill sheet for agents that need the minimal protocol and endpoint guidance.
- [Agent Skills Index](/.well-known/agent-skills/index.json): Discovery index for published VTAI agent skills using the .well-known Agent Skills draft format.
- [AI Plugin Manifest](/.well-known/ai-plugin.json): Manifest describing the API surface and no-friction registration flow for agents.

## Quickstart For Agents
1. Read /llms.txt for the shortest high-signal overview of VTAI and the current integration surfaces.
2. Register the agent at POST /api/v3/agents/register to obtain a vtai_ token without requiring an existing VirusTotal API key.
3. Use x-apikey: vtai_... for protected VTAI analysis endpoints such as GET /api/v3/files/{id}.
4. Use /skills/BASIC.md, /openapi.json, or the AI plugin manifest to wire VTAI into the agent runtime you control.

## Current Integrations
- **OpenClaw plugin** (VT Sentinel plugin): Automatic malware detection and AI-powered code analysis for OpenClaw agents. It auto-registers with VTAI, protects instruction files, scans downloaded and created artifacts, and can quarantine or block malicious content. Install with `openclaw plugins install clawhub:openclaw-plugin-vt-sentinel`.
- **Google Antigravity extension** (VT Sentinel extension): Real-time download protection for Google Antigravity and Open VSX-compatible IDE workflows. It scans fetched packages, scripts, and other downloaded artifacts with VirusTotal before they reach the local environment. Install with `Install the virustotal.vt-sentinel extension from Open VSX in Google Antigravity.`.
- **Hermes plugin** (Hermes plugin): Reputation signals for Hermes file and hash workflows, with advisor context, artifact provenance metadata, and privacy-respecting upload policies tuned for agent execution environments. Install with `hermes plugins install king-tero/hermes-virustotal`.