VirusTotal

API

Scans files and URLs with 70+ antivirus engines and reports on domains and IPs

Price: Free public API; premium via sales
Access: API key (x-apikey header)

About

Threat intelligence service that analyses files and URLs with 70+ antivirus products and sandboxes and keeps reports on domains and IP addresses. The free public API allows 4 requests a minute and 500 a day, and must not be used in commercial products.

What you can do with it

Submit a URL or file for scanning and read the per-engine verdicts
Look up a file hash, domain or IP address report before trusting it
Give AI agents malware and link checks through the VTAI MCP server

Get started

Sign up for VirusTotal Community
Copy your API key from your personal settings

Example

# Submit a URL; the response contains an analysis id
curl -X POST https://www.virustotal.com/api/v3/urls \
  -H "x-apikey: $VT_API_KEY" \
  --data-urlencode "url=https://example.com"

# Read the analysis result
curl "https://www.virustotal.com/api/v3/analyses/$VT_ANALYSIS_ID" \
  -H "x-apikey: $VT_API_KEY"

Details

Hosting: Hosted service
Available in: Worldwide
Official SDKs: Python, Go
MCP server: Remote