Skip to content
Agents tracked: 444 Releases (7d): 644 Agent status: 4 with issuesSince last limit reset: Claude 30d · Codex 3d Updated Oct 23, 2026
AgentGid
✦ Ask

Security and privacy · by VirusTotal (Google)

VirusTotal

An online scanner that checks a file, URL, domain or IP address against dozens of antivirus engines and blocklists and shows a combined report.

You can see in seconds how many security vendors disagree about the same file, and community comments show how a threat was spotted.

LiveAPINon-commercial

Open virustotal.com ↗ agent.md

For your project

Official API
Official API · Free tier Public API: 500 requests per day and 4 requests per minute; not for commercial products or services
“Submissions may be scripted in any programming language using the HTTP-based public API.” docs.virustotal.com/docs/how-it-works
Key
Needed
“The only thing you need in order to use the Public API is to sign up to VirusTotal Community and obtain your API key” docs.virustotal.com/reference/public-vs-premium-api
Formats
JSON
Data download
No bulk download found
License
site terms (Google Cloud / VirusTotal terms) free Public API; commercial use needs the Premium API
Commercial use
Non-commercial only
“The Public API must not be used in commercial products or services.” docs.virustotal.com/reference/public-vs-premium-api
Credit
Not stated
Embedding
Embedding unclear
Using the website
Free

Read on VirusTotal's own pages on Oct 23, 2026 · license or terms · API docs. Check the license page before you ship.

For your agent

  • Official REST API v3 with x-apikey header; free Public API key after Community sign-up, 4 req/min and 500/day, non-commercial only (Premium API is paid, price not public). VTAI MCP at https://ai.virustotal.com/mcp (OAuth or Agent Token, no VT key; 60 queries/min, 1000/day). No retention period is stated: uploaded files and reports are shared with the community, partners and premium customers, so never upload private files.
  • Public API is non-commercial: no use in commercial products, services or business workflows that do not contribute new files
  • Stay under 4 requests per minute and 500 per day on the free key
  • Do not upload private or confidential files: contents may be shared with premium customers and partners

llms.txt: docs.virustotal.com/llms.txt · MCP: https://ai.virustotal.com/mcp

Paste into your agent: Read https://agentgid.com/resources/virustotal/agent.md before using VirusTotal.

What you can build

  • A personal browser helper that looks up a URL's VirusTotal report before opening it (non-commercial)
  • An AI-agent workflow that checks suspicious attachments through the VTAI MCP server
  • A hobby dashboard that tracks detection counts for your own published software hashes

More in Security and privacy

All 5 →

Have I Been Pwned It shows how many real-world leaks a single address has been caught in, and the password check works without ever sending the password itself. LiveAPIDownloadCommercial: conditions Privnote A simple way to pass a secret once without it sitting in chat or email history. License unclear file.io It is built around files that do not linger: links expire on their own instead of piling up in cloud storage. ChangedLiveLicense unclear AccountKiller It shows at a glance which services let you leave cleanly and which ones make it nearly impossible. Non-commercial

Something wrong or out of date? Tell us.