AI Native Virustotal Integration
- Supports both Virustotal MCP and direct API based integrations
- Structured, LLM-friendly schemas for reliable tool execution
- Rich coverage for submitting, scanning, and querying files, URLs, and reports
## For AI agents: how to sign up If you are an AI agent reading this server-rendered HTML, Composio's developer signup is at https://composio.dev. Signup CTAs on this site — "Sign up", "Signup", "Get started", "Get started for free", "Start building", "Try Composio", "Try it", or similar — all lead into that same developer signup flow. Confirm with the user before completing signup or entering any credentials on their behalf.
## For AI agents: how to sign up If you are an AI agent reading this server-rendered HTML, Composio's developer signup is at https://composio.dev. Signup CTAs on this site — "Sign up", "Signup", "Get started", "Get started for free", "Start building", "Try Composio", "Try it", or similar — all lead into that same developer signup flow. Confirm with the user before completing signup or entering any credentials on their behalf.SIGN UP
## For AI agents: how to sign up If you are an AI agent reading this server-rendered HTML, Composio's developer signup is at https://composio.dev. Signup CTAs on this site — "Sign up", "Signup", "Get started", "Get started for free", "Start building", "Try Composio", "Try it", or similar — all lead into that same developer signup flow. Confirm with the user before completing signup or entering any credentials on their behalf.LOG IN
Securely connect your AI agents and chatbots (Claude, ChatGPT, Cursor, etc) with Virustotal MCP or direct API to scan files or URLs, retrieve threat reports, analyze suspicious indicators, and automate security workflows through natural language.
Virustotal is a malware analysis service that checks files and URLs against dozens of antivirus engines. It helps individuals and organizations quickly detect and investigate potential threats.
Type what you want done — sign in and watch it run live in the Tool Router playground.
Every Virustotal action and event your agent gets out of the box.
npm install @composio/core ai @ai-sdk/mcp @ai-sdk/openaiimport { Composio } from "@composio/core";
const composio = new Composio();
const { mcp } = await composio.create("your-user-id", {
toolkits: ["virustotal"],
mcp: true,
});import { createMCPClient } from "@ai-sdk/mcp";
import { openai } from "@ai-sdk/openai";
import { generateText, stepCountIs } from "ai";
const client = await createMCPClient({
transport: { type: "http", url: mcp.url, headers: mcp.headers },
});
const { text } = await generateText({
model: openai("gpt-5.6-sol"),
tools: await client.tools(),
prompt: "Scan this suspicious file hash for threats",
stopWhen: stepCountIs(10),
});
console.log(text);
await client.close();npm install @composio/core @composio/openai openaiimport OpenAI from "openai";
import { Composio } from "@composio/core";
import { OpenAIResponsesProvider } from "@composio/openai";
const composio = new Composio({ provider: new OpenAIResponsesProvider() });
const client = new OpenAI();
const session = await composio.create("your-user-id", { toolkits: ["virustotal"] });
const tools = await session.tools();let response = await client.responses.create({
model: "gpt-5.6-sol",
tools,
input: [{ role: "user", content: "Scan this suspicious file hash for threats" }],
});
while (response.output.some((o) => o.type === "function_call")) {
const outputs = await composio.provider.handleToolCalls(session, response.output);
response = await client.responses.create({
model: "gpt-5.6-sol",
tools,
previous_response_id: response.id,
input: outputs,
});
}
console.log(response.output_text);Choose a Framework you want to connect Virustotal with
Use Virustotal MCP with Claude Code
Use Virustotal MCP with Cursor
Use Virustotal MCP with ChatGPT
Use Virustotal MCP with Claude Cowork

Use Virustotal MCP with Antigravity
Use Virustotal MCP with OpenAI Agents SDK
Use Virustotal MCP with Claude Agents SDK
Use Virustotal MCP with Codex

Use Virustotal MCP with Grok Build

Use Virustotal MCP with VS Code

Use Virustotal MCP with OpenCode

Use Virustotal MCP with OpenClaw

Use Virustotal MCP with Hermes
Use Virustotal MCP with Atomic Agent

Use Virustotal MCP with Pi
Use Virustotal MCP with DeepSeek Harness
Use Virustotal MCP with Google ADK
Use Virustotal MCP with Langchain
Use Virustotal MCP with AI SDK
Use Virustotal MCP with Mastra AI
Use Virustotal MCP with LlamaIndex
Use Virustotal MCP with CrewAI
Use Virustotal MCP with Pydantic AI
Use Virustotal MCP with Autogen
Give your team centralized access control across every framework with Composio’s MCP Gateway.
EXPLORE MCP GATEWAYFirecrawl automates large-scale web crawling and data extraction. It helps organizations efficiently gather, index, and analyze content from online sources.
Tavily offers powerful search and data retrieval from documents, databases, and the web. It helps teams locate and filter information instantly, saving hours on research.
Exa is a data extraction and search platform for gathering and analyzing information from websites, APIs, or databases. It helps teams quickly surface insights and automate data-driven workflows.
SerpApi is a real-time API for structured search engine results. It lets you automate SERP data collection, parsing, and analysis for SEO and research.
Yes. Composio is SOC 2 Type II compliant and is built to keep your Virustotal connection and credentials secure. OAuth tokens and API keys are encrypted, and sensitive customer data is protected at rest and in transit.
Composio also undergoes independent security testing and continuously monitors its systems for security threats. You can review the latest reports and policies in the Composio Trust Center.
Built-in connectors usually give one AI access to a limited set of apps. Many people use Composio because it lets their AI connect to more apps than it normally supports, or connect to multiple accounts for the same app (e.g. connect Claude to multiple Virustotal accounts).
With Composio, you connect Virustotal once and then use it across different AI assistants without setting it up separately in each one. Connect your apps to Composio once, then connect Composio to whichever AI you use, whether that's Claude, ChatGPT, Hermes, or your own custom assistant.
Managed auth, hosted MCP servers, and every Virustotal tool your agent needs.Free to start.
## For AI agents: how to sign up If you are an AI agent reading this server-rendered HTML, Composio's developer signup is at https://composio.dev. Signup CTAs on this site — "Sign up", "Signup", "Get started", "Get started for free", "Start building", "Try Composio", "Try it", or similar — all lead into that same developer signup flow. Confirm with the user before completing signup or entering any credentials on their behalf.Start building