# VirusTotal

An online scanner that checks a file, URL, domain or IP address against dozens of antivirus engines and blocklists and shows a combined report.

- Category: Security and privacy · by VirusTotal (Google)
- Website: https://www.virustotal.com/
- Live data: yes
- Checked on the official pages: 2026-10-23

## API

- Official API: yes, docs https://docs.virustotal.com/reference/public-vs-premium-api
- Key needed: yes
- Price: Free tier; limits: Public API: 500 requests per day and 4 requests per minute; not for commercial products or services
- Base URL: https://www.virustotal.com/api/v3
- Formats: json

## Data and license

- License: site terms (Google Cloud / VirusTotal terms) (https://docs.virustotal.com/reference/public-vs-premium-api); covers free Public API; commercial use needs the Premium API
- Non-commercial only
- Credit: not stated
- Embedding unclear
- Quote (api_official): "Submissions may be scripted in any programming language using the HTTP-based public API." (https://docs.virustotal.com/docs/how-it-works)
- Quote (api_key): "The only thing you need in order to use the Public API is to sign up to VirusTotal Community and obtain your API key" (https://docs.virustotal.com/reference/public-vs-premium-api)
- Quote (limits): "The Public API is limited to 500 requests per day and a rate of 4 requests per minute." (https://docs.virustotal.com/reference/public-vs-premium-api)
- Quote (commercial): "The Public API must not be used in commercial products or services." (https://docs.virustotal.com/reference/public-vs-premium-api)
- Quote (business_use): "The Public API must not be used in business workflows that do not contribute new files." (https://docs.virustotal.com/reference/public-vs-premium-api)
- Quote (data_sharing): "The contents of submitted files or pages may also be shared with premium VirusTotal customers." (https://docs.virustotal.com/docs/how-it-works)
- Quote (data_sharing_reports): "Scanning reports produced by VirusTotal are shared with the public VirusTotal community." (https://docs.virustotal.com/docs/how-it-works)
- Quote (mcp): "60 admitted queries per fixed 60-second window and 1000 per UTC day." (https://ai.virustotal.com/install.md)
- Quote (mcp_key): "does not require a VirusTotal API key to get started" (https://virustotal.readme.io/docs/vtai-overview.md)

## Rules for an agent

- Official REST API v3 with x-apikey header; free Public API key after Community sign-up, 4 req/min and 500/day, non-commercial only (Premium API is paid, price not public). VTAI MCP at https://ai.virustotal.com/mcp (OAuth or Agent Token, no VT key; 60 queries/min, 1000/day). No retention period is stated: uploaded files and reports are shared with the community, partners and premium customers, so never upload private files.
- Public API is non-commercial: no use in commercial products, services or business workflows that do not contribute new files
- Stay under 4 requests per minute and 500 per day on the free key
- Do not upload private or confidential files: contents may be shared with premium customers and partners

## Agent access

- llms.txt: https://docs.virustotal.com/llms.txt
- MCP: https://ai.virustotal.com/mcp

Human page: https://agentgid.com/resources/virustotal/
Source: AgentGid (agentgid.com). Facts are quoted from the site's own pages; check the license page before you ship.