mcp-virustotal
★ 152
vs
ida-pro-mcp
★ 13.1k
mcp-virustotal vs ida-pro-mcp
mcp-virustotal: A Model Context Protocol (MCP) server for querying the VirusTotal API. It provides comprehensive security analysis tools with automatic relationship data fetching and integrates seamlessly with MCP-compatible applications like Claude Desktop.; ida-pro-mcp: IDA Pro MCP is a straightforward Model Context Protocol (MCP) server that integrates IDA Pro with various MCP clients, enabling powerful LLM-assisted reverse engineering. It offers a comprehensive, type-safe API for accessing and modifying IDA Pro's internal state, streamlining automated analysis workflows.
01
TL;DR
mcp-virustotalSecurity & Safety · ★ 152
Threat intelligence queries for file hashes, URLs, or IPs
ida-pro-mcpSecurity & Safety · ★ 13.1k
When to choose:
- You use Hex-Rays IDA Pro for binary analysis and want to connect Claude or Cursor to IDA's disassembler, decompiler, and type system via MCP.
- You want to automate function renaming, pseudocode commentary, and vulnerability identification inside IDA Pro.
When to skip:
- You rely on the open-source NSA Ghidra decompiler; GhidraMCP is the dedicated bridge for Ghidra.
- You do not hold an active IDA Pro license.
02
Side-by-Side Comparison
Field
mcp-virustotalida-pro-mcpCategory
Security & Safety
Security & Safety
Stars
★ 152
★ 13.1k
License
MIT
MIT
Install Command
npm install -g @burtthecoder/mcp-virustotal
pip uninstall ida-pro-mcp && pip install https://github.com/mrexodia/ida-pro-mcp/archive/refs/heads/main.zip && ida-pro-mcp --install
Updated
2d ago
3w ago
Open Source
Yes
Yes
Tags
ai-tools, claude, cybersecurity
IDA Pro, Reverse Engineering, MCP
03
Features
mcp-virustotal01Comprehensive analysis reports with automatic relationship fetching
02URL analysis with security reports and related data
03File analysis using hashes (MD5/SHA-1/SHA-256)
04IP analysis with geolocation and reputation data
05Domain analysis with DNS, WHOIS, and SSL data
ida-pro-mcp01Type-safe API with TypedDict schemas for better IDE support and LLM structured outputs
02Batch-first design where most operations accept both single items and lists
03Consistent error handling where all batch operations return structured error information
04Cursor-based pagination for search functions to manage large results
05Performance optimization with string caching to avoid repeated build_strlist calls
04
Use Cases
mcp-virustotal↳Threat intelligence queries for file hashes, URLs, or IPs
↳Real-time security analysis integrated with Claude Desktop
↳Automated security orchestration for incident response
ida-pro-mcp↳LLM-assisted reverse engineering directly within IDA Pro
↳Automating binary analysis tasks and programmatic modification of IDA Pro's database
↳Integrating IDA Pro's rich context with various Model Context Protocol (MCP) clients
05
Best For
mcp-virustotal—
ida-pro-mcpMost PopularEssentialTrending
FAQ
FAQ
What is the difference between mcp-virustotal and ida-pro-mcp?
Both mcp-virustotal and ida-pro-mcp are in the Security & Safety category. mcp-virustotal has 152 stars, while ida-pro-mcp has 13.1k stars.
Which is better, mcp-virustotal or ida-pro-mcp?
The best choice depends on your use case. Choose mcp-virustotal if Threat intelligence queries for file hashes, URLs, or IPs, and ida-pro-mcp if LLM-assisted reverse engineering directly within IDA Pro.
Is mcp-virustotal free or open source?
Yes, mcp-virustotal is open source on GitHub (MIT).
Is ida-pro-mcp free or open source?
Yes, ida-pro-mcp is open source on GitHub (MIT).
Cloud Infrastructure
AdDeploy on DigitalOcean
Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.
→