Set up VirusTotal MCP in Claude Code
Malware detection, file and URL analysis, IP and domain reputation checks, and threat relationship mapping via the VirusTotal API.
1
Locate the config file
Claude Code reads MCP server configuration from the following file:
~/.claude.jsonCreate this file if it does not already exist.
2
Add the configuration
You can configure VirusTotal MCP using the CLI command or by editing the config file directly.
Option A: CLI command
bash
claude mcp add virustotal-mcp -e VIRUSTOTAL_API_KEY=YOUR_VIRUSTOTAL_API_KEY -- npx -y @burtthecoder/mcp-virustotalOption B: Config file
json
{
"mcpServers": {
"virustotal-mcp": {
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-virustotal"
],
"env": {
"VIRUSTOTAL_API_KEY": "YOUR_VIRUSTOTAL_API_KEY"
}
}
}
}3
Set up environment variables
VirusTotal MCP requires the following environment variables:
VIRUSTOTAL_API_KEYRequiredVirusTotal API key
4
Verify it works
Restart Claude Code. VirusTotal MCP should appear in your MCP server list with 8 tools available.
This server adds approximately 4,000 tokens to your context window for tool definitions.