VirusTotal
Explain VirusTotal domain reports and submit URLs for analysis while keeping submission and results separate.
VirusTotal aggregates security-engine reports for files, URLs, domains, and IP addresses. Its integration exposes reports, relationships, community signals, and analysis submission operations.
What your agent can do in VirusTotal
Actions grouped by task. Each group lists the actions it calls.
Review a Domain Report
Retrieve the latest VirusTotal report for a domain.
- Get Domain Report
Submit a URL for Analysis
Submit a URL to VirusTotal for analysis.
- Scan Url
Tasks to hand your agent
Fill in the brackets, and connect any second app a task names.
Review a Domain Report
Explain a domain’s returned analysis statistics as security evidence.
Get the VirusTotal report for domain [domain] and summarize the returned analysis statistics.
Submit a URL for Analysis
Submit a URL and retain the analysis ID for later result retrieval.
Submit [url] to VirusTotal and return the analysis ID for later status checks.
Actions16
Every action the VirusTotal connector offers, by name and id.
- Search
searchSearch files, URLs, domains, IPs, and other objects in VirusTotal. - Get Metadata
get_metadataRetrieve VirusTotal metadata, including available privileges, engines, and relationship names. - Get Analysis
get_analysisRetrieve a VirusTotal analysis object by analysis ID. - Get File Report
get_file_reportRetrieve the latest VirusTotal report for a file identifier. - Upload File
upload_fileUpload a file to VirusTotal for analysis, automatically using the large-file upload URL when needed. - Rescan File
rescan_fileRequest a fresh VirusTotal analysis for a previously submitted file. - Scan Url
scan_urlSubmit a URL to VirusTotal for analysis. - Get Url Report
get_url_reportRetrieve the latest VirusTotal report for a URL using either a raw URL or a VirusTotal URL identifier. - Get Domain Report
get_domain_reportRetrieve the latest VirusTotal report for a domain. - Get Domain Relationships
get_domain_relationshipsRetrieve related VirusTotal objects for a domain, with an option to request descriptors only. - Get Ip Address Report
get_ip_address_reportRetrieve the latest VirusTotal report for an IP address. - Get Ip Address Relationships
get_ip_address_relationshipsRetrieve related VirusTotal objects for an IP address, with an option to request descriptors only. - Get Comments
get_commentsRetrieve community comments for a file, URL, domain, or IP address in VirusTotal. - Add Comment
add_commentAdd a community comment to a file, URL, domain, or IP address in VirusTotal. - Get Votes
get_votesRetrieve community votes for a file, URL, domain, or IP address in VirusTotal. - Add Vote
add_voteSubmit a harmless or malicious vote for a VirusTotal file, URL, domain, or IP.
How VirusTotal signs in
- Sign-in method
- API keyConnect with your VirusTotal API Key.
- You need
- A URL or domain to investigate and a VirusTotal plan allowing the selected endpoint.
- Notes
- URL submission starts analysis; query the returned analysis ID for results. Reports are security signals rather than proof of safety.