virustotal_lookup

MCP tool from Cve MCP Server by mukul975

Analyze file hashes, URLs, domains, or IPs against 70+ antivirus engines

How to use it

virustotal_lookup is exposed by the Cve MCP Server MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the virustotal_lookup tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

Install Cve MCP Server

$claude mcp add cve-mcp -- python -m cve_mcp.server

FULL CVE MCP SERVER LISTING

Other tools in Cve MCP Server (27)

bulk_cve_lookup

Batch-fetch details for up to 20 CVEs in a single call with parallel enrichment

calculate_risk_score

Compute composite 0–100 risk score using CVSS, EPSS, KEV status, and PoC availability

check_ip_noise

Query GreyNoise for IP scan/attack activity, classification, and associated CVEs

check_kev_status

Check whether a CVE appears in CISA's Known Exploited Vulnerabilities catalog

check_poc_availability

Determine if known proof-of-concept code exists for a CVE across multiple sources

check_ransomware

Look up ransomware payment addresses and transaction data from Ransomwhere

generate_risk_report

Generate a formatted executive security report for one or more CVEs with recommendations

get_attack_patterns

Retrieve CAPEC attack pattern details associated with a CWE or CVE

get_cve_references

Extract and categorize all reference links for a CVE (patches, advisories, exploits)

get_cvss_details

Parse and explain a CVSS v3.1 vector string with per-metric breakdown

get_cwe_info

Look up Common Weakness Enumeration details by CWE ID from embedded database

get_epss_score

Get EPSS exploitation probability (0–1) and percentile for one or more CVEs

get_mitre_techniques

Map a CVE or CWE to relevant MITRE ATT&CK techniques, tactics, and mitigations

get_trending_cves

Retrieve trending CVEs based on high EPSS scores and recent KEV additions

lookup_cve

Fetch detailed CVE record from NVD including CVSS scores, CWEs, affected products, references, and timeline

lookup_ip_reputation

Check IP address abuse history and confidence score via AbuseIPDB

passive_dns_lookup

Retrieve historical DNS resolution data for a domain from CIRCL Passive DNS

prioritize_cves

Rank a list of CVEs by composite risk score for triage prioritization

scan_dependencies

Scan package names and versions against OSV.dev for known vulnerabilities

scan_github_advisories

Search GitHub Security Advisories by ecosystem, package, or severity

search_cves

Search NVD for CVEs by keyword, product name, severity, or date range

search_exploits

Search GitHub for public proof-of-concept exploits and exploit code repositories

search_iocs

Query ThreatFox for Indicators of Compromise linked to malware families

search_malware

Search MalwareBazaar for malware samples by hash, tag, or signature

shodan_host_lookup

Get open ports, services, banners, and vulnerabilities for an IP via Shodan

triage_cve

One-call triage that fans out NVD + EPSS + CISA KEV (+ public PoC for depth != "quick") concurrently, computes the composite risk score with a KEV hard override, falls back to VulnCheck NVD++ when NIST NVD is throttled, and on depth="deep" emits the SSVC v2 gated decision

urlscan_check

Submit a URL for scanning or retrieve previous scan results from URLScan.io