lookup_file
ActiveTool of Virustotal
Look up a file by hash (sha256, sha1, or md5). Returns last-analysis stats (malicious / suspicious / harmless / undetected detector counts), type description, size, names seen, and tags. Useful for triaging hashes seen in alerts or logs.
Parameters schema
{
"type": "object",
"examples": [
{
"hash": "44d88612fea8a8f36de82e1278abb02f"
},
{
"hash": "9e107d9d372bb6826bd81d3542a419d6043e3a7cbeda4531da5f2d99712df4b9"
}
],
"required": [
"hash"
],
"properties": {
"hash": {
"type": "string",
"description": "SHA-256 / SHA-1 / MD5 of the file"
}
}
}No endpoints wrapped at confidence ≥ 0.70.
Parent server
Virustotal
https://github.com/pipeworx-io/mcp-virustotal
1/7 registries