AgentIndex icon
AgentIndex
mcptrustchecker logo
mcptrustchecker
★ 172
vs
mcp-virustotal logo
mcp-virustotal
★ 152

mcptrustchecker vs mcp-virustotal

mcptrustchecker: MCP Trust Checker is a local-first, deterministic security scanner that evaluates the safety of Model Context Protocol (MCP) servers. It utilizes a unique Capability-Flow Trust Model to statically identify potential data exfiltration paths and other vulnerabilities before you connect servers to sensitive data.; mcp-virustotal: mcp-virustotal is an MCP server designed to provide AI agents with comprehensive access to the VirusTotal v3 API. It allows agents to retrieve detection reports and critical threat relationships for files, URLs, IPs, and domains, enhancing their threat intelligence capabilities.

01

TL;DR

mcptrustchecker logo
mcptrustcheckerSecurity & Safety · ★ 172

Scanning already installed MCP servers or local package directories for vulnerabilities.

Read mcptrustchecker full review →
mcp-virustotal logo
mcp-virustotalSecurity & Safety · ★ 152

AI agents querying threat intelligence for hashes, URLs, IPs, or domains.

Read mcp-virustotal full review →
02

Side-by-Side Comparison

Field
mcptrustchecker logomcptrustchecker
mcp-virustotal logomcp-virustotal
Category
Security & Safety
Security & Safety
Stars
★ 172
★ 152
License
MIT
MIT
Install Command
npm i -g mcptrustchecker
docker build -t mcp-virustotal . && docker run -p 127.0.0.1:3000:3000 -e VIRUSTOTAL_API_KEY=your-key -e MCP_TRANSPORT=httpStream mcp-virustotal
Updated
2mo ago
2d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
Security Scanner, Static Analysis, Trust Model
VirusTotal, API Integration, AI Agent Tool
03

Features

mcptrustchecker logomcptrustchecker
01Offline by Default: Operates without requiring an account, token, API key, or hosted service, ensuring data privacy.
02Cross-Tool Toxic-Flow Graph: Identifies lethal trifecta scenarios where untrusted input, sensitive data, and external exfiltration paths coexist across multiple tools.
03Deep-Scans Published Packages: Fetches, verifies, and analyzes the actual published source code from npm/PyPI without installation or execution.
04Auditable Trust Score: Provides a deterministic A-F grade with a transparent scoring methodology, including penalty vectors and confidence levels.
05Rug-Pull Integrity: Detects post-approval mutations of tool definitions and verifies package artifact hashes to prevent silent changes.
mcp-virustotal logomcp-virustotal
01Rich reports with related entities, optimized for API quota efficiency.
02Cache-first approach for URL reports to optimize API usage and speed.
03Advanced pivot tools including corpus search and merged sandbox behavior summaries.
04Extensive relationship paging for over 100 types across various entities.
05Supports both stdio for desktop clients and HTTP streaming for shared services.
04

Use Cases

mcptrustchecker logomcptrustchecker
↳Scanning already installed MCP servers or local package directories for vulnerabilities.
↳Auditing live HTTP/SSE or OAuth-protected remote MCP endpoints before integration.
↳Integrating into CI/CD pipelines (e.g., GitHub Actions) to enforce security gates and generate SARIF reports.
↳Embedding the scanning engine into marketplaces or platforms to verify the security of listed MCP servers.
↳Using the free hosted web API for quick, zero-install security checks of tool manifests or published packages.
mcp-virustotal logomcp-virustotal
↳AI agents querying threat intelligence for hashes, URLs, IPs, or domains.
↳Automated security analysis and incident response workflows powered by AI agents.
↳Retrieving detailed malware analysis reports and associated threat data programmatically.
↳Integrating VirusTotal data into custom AI-powered security applications and platforms.
FAQ

FAQ

What is the difference between mcptrustchecker and mcp-virustotal?
Both mcptrustchecker and mcp-virustotal are in the Security & Safety category. mcptrustchecker has 172 stars, while mcp-virustotal has 152 stars.
Which is better, mcptrustchecker or mcp-virustotal?
The best choice depends on your use case. Choose mcptrustchecker if Scanning already installed MCP servers or local package directories for vulnerabilities., and mcp-virustotal if AI agents querying threat intelligence for hashes, URLs, IPs, or domains..
Is mcptrustchecker free or open source?
Yes, mcptrustchecker is open source on GitHub (MIT).
Is mcp-virustotal free or open source?
Yes, mcp-virustotal is open source on GitHub (MIT).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to mcptrustchecker →Alternatives to mcp-virustotal →mcptrustchecker details →mcp-virustotal details →