VirusTotal

VirusTotal's own server connects agents to VTAI for reports on files, URLs, domains and IP addresses, and can submit unknown files and URLs for analysis. It signs in with OAuth to a free VTAI account, so no personal API key is needed. Submissions are shared with the security community and are not confidential — VirusTotal's README says to ask before submitting your own documents, internal code or personal data, and URL lookups disclose the full URL.

Configuration

claude plugin marketplace add VirusTotal/virustotal-mcp
claude plugin install virustotal@virustotal

Run in a terminal. Copied verbatim from the upstream README.