VirusTotal website screenshot

VirusTotal

VirusTotal — the Google-owned (since 2012) threat intelligence platform that aggregates anti-malware engines and URL scanners to analyse files, URLs, IP addresses, and domains. The v3 API surfaces seven major areas: Access Control, IoC Feeds, IoC Investigation, Private Scanning, Threat Graphs, Threat Landscape & Vulnerability Intelligence, and YARA Hunting (Livehunt, Retrohunt, IoC Stream). Now also branded "Google Threat Intelligence" (GTI) for Enterprise customers, integrating Mandiant intelligence, Digital Threat Monitoring (DTM), and Attack Surface Management (ASM).

VirusTotal publishes 33 APIs on the APIs.io network, including Access Control - Group Management API, Access Control - Quota Management API, Access Control - Service Account Management API, and 30 more. Tagged areas include Anti-Malware, Threat Intelligence, Security, File Analysis, and URL Analysis.

The VirusTotal catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

VirusTotal’s developer surface includes authentication, documentation, API reference, engineering blog, CLI, tooling, and 30 more developer resources.

🌐 Visit website 📡 Source on GitHub
55.4/100 developing ▬ flat Agent 44/100 agent ready Full breakdown ↓
scored 2026-08-05 · rubric v0.9.1
AccessFreemiumSelf serve⚡ Free to try
35 APIs
Anti-MalwareThreat IntelligenceSecurityFile AnalysisURL AnalysisYARAIoCSandboxMITRE ATT&CKGoogle Cloud

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-05 · rubric v0.9.1
Composite quality — 55.4/100 · developing
Contract Quality 18.8 / 25
Developer Ergonomics 10.0 / 20
Commercial Clarity 7.9 / 20
Operational Transparency 4.8 / 13
Governance 8.3 / 12
Discoverability 5.7 / 10
Agent readiness — 44/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 7 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/virustotal: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 35

Individual APIs this provider publishes, each with its own machine-readable definition.

Google Threat Intelligence - Attack Surface Management (ASM)

Enterprise add-on (formerly Mandiant Advantage ASM). Discovers and monitors an organisation's external attack surface, scoring exposures and prioritising remediation.

Google Threat Intelligence - Digital Threat Monitoring (DTM)

Enterprise add-on (formerly Mandiant Advantage DTM). Monitors the open, deep, and dark web for credential leaks, brand abuse, and adversary chatter referencing the customer.

VirusTotal Access Control - Group Management API

Access Control - Group Management

VirusTotal Access Control - Quota Management API

Access Control - Quota Management

VirusTotal Access Control - Service Account Management API

Access Control - Service Account Management

VirusTotal Access Control - User Management API

Access Control - User Management

VirusTotal IoC Feeds - Domain intelligence feed API

IoC Feeds - Domain intelligence feed

VirusTotal IoC Feeds - File intelligence feed API

IoC Feeds - File intelligence feed

VirusTotal IoC Feeds - IP intelligence feed API

IoC Feeds - IP intelligence feed

VirusTotal IoC Feeds - Sandbox analyses feed API

IoC Feeds - Sandbox analyses feed

VirusTotal IoC Feeds - URL intelligence feed API

IoC Feeds - URL intelligence feed

VirusTotal IoC Investigation - Analyses, Submissions & Operations API

IoC Investigation - Analyses, Submissions & Operations

VirusTotal IoC Investigation - Attack Tactics API

IoC Investigation - Attack Tactics

VirusTotal IoC Investigation - Attack Techniques API

IoC Investigation - Attack Techniques

VirusTotal IoC Investigation - Comments API

IoC Investigation - Comments

VirusTotal IoC Investigation - Domains & Resolutions API

IoC Investigation - Domains & Resolutions

VirusTotal IoC Investigation - Files API

IoC Investigation - Files

VirusTotal IoC Investigation - Files Behaviours API

IoC Investigation - Files Behaviours

VirusTotal IoC Investigation - IP addresses API

IoC Investigation - IP addresses

VirusTotal IoC Investigation - Popular Threat Categories API

IoC Investigation - Popular Threat Categories

VirusTotal IoC Investigation - Search & Metadata API

IoC Investigation - Search & Metadata

VirusTotal IoC Investigation - URLs API

IoC Investigation - URLs

VirusTotal IoC Investigation - Zipping files API

IoC Investigation - Zipping files

VirusTotal Private Scanning - Analyses API

Private Scanning - Analyses

VirusTotal Private Scanning - Files API

Private Scanning - Files

VirusTotal Private Scanning - Files Behaviours API

Private Scanning - Files Behaviours

VirusTotal Private Scanning - URLs API

Private Scanning - URLs

VirusTotal Private Scanning - Zipping files API

Private Scanning - Zipping files

VirusTotal Threat Graphs API

Threat Graphs

VirusTotal Threat Graphs Permissions & ACL API

Threat Graphs Permissions & ACL

VirusTotal Threat Landscape & Vulnerability Intelligence & Reports & Analysis API

Threat Landscape & Vulnerability Intelligence & Reports & Analysis

VirusTotal YARA Hunting - IoC Stream API

YARA Hunting - IoC Stream

VirusTotal YARA Hunting - Livehunt API

YARA Hunting - Livehunt

VirusTotal YARA Hunting - Retrohunt API

YARA Hunting - Retrohunt

VirusTotal YARA Hunting - Rules API

YARA Hunting - Rules

Scroll for all 35

Open Collections 7

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

VirusTotal API v3 - Access Control

OPEN COLLECTION

VirusTotal API v3 - IoC Feeds

OPEN COLLECTION

VirusTotal API v3 - IoC Investigation

OPEN COLLECTION

VirusTotal API v3 - Private Scanning

OPEN COLLECTION

VirusTotal API v3 - Threat Graphs

OPEN COLLECTION

VirusTotal API v3 - Threat Landscape and Vulnerability Intelligence

OPEN COLLECTION

VirusTotal API v3 - YARA Hunting (Livehunt, Retrohunt, IoC Stream)

OPEN COLLECTION

Scroll for all 7

Pricing Plans 1

Published pricing tiers and plan structures.

Virustotal Plans Pricing

3 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Virustotal Rate Limits

10 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Virustotal Finops

FINOPS

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Virustotal Context

30 classes · 156 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

VirusTotal API Rules

5 rules · 4 warnings 1 info

SPECTRAL

VirusTotal API Rules

40 rules · 15 errors 19 warnings 6 info

SPECTRAL

JSON Schema 19

Standalone JSON Schema definitions for this provider's data models.

AnalysisObject

5 properties

JSON SCHEMA

AttackTacticObject

5 properties

JSON SCHEMA

AttackTechniqueObject

5 properties

JSON SCHEMA

CollectionObject

5 properties

JSON SCHEMA

CommentObject

5 properties

JSON SCHEMA

DomainObject

5 properties

JSON SCHEMA

FileBehaviourObject

5 properties

JSON SCHEMA

FileObject

5 properties

JSON SCHEMA

GraphObject

5 properties

JSON SCHEMA

GroupObject

5 properties

JSON SCHEMA

IocStreamNotificationObject

5 properties

JSON SCHEMA

IpAddressObject

5 properties

JSON SCHEMA

LivehuntRulesetObject

5 properties

JSON SCHEMA

PopularThreatCategoryObject

5 properties

JSON SCHEMA

RetrohuntJobObject

5 properties

JSON SCHEMA

UrlObject

5 properties

JSON SCHEMA

UserObject

5 properties

JSON SCHEMA

VoteObject

5 properties

JSON SCHEMA

YaraRuleObject

5 properties

JSON SCHEMA

Scroll for all 19

JSON Structure 19

JSON Structure definitions describing this provider's data shapes.

Virustotal Analysis Object Structure

5 properties

JSON STRUCTURE

Virustotal Attack Tactic Object Structure

5 properties

JSON STRUCTURE

Virustotal Attack Technique Object Structure

5 properties

JSON STRUCTURE

Virustotal Collection Object Structure

5 properties

JSON STRUCTURE

Virustotal Comment Object Structure

5 properties

JSON STRUCTURE

Virustotal Domain Object Structure

5 properties

JSON STRUCTURE

Virustotal File Behaviour Object Structure

5 properties

JSON STRUCTURE

Virustotal File Object Structure

5 properties

JSON STRUCTURE

Virustotal Graph Object Structure

5 properties

JSON STRUCTURE

Virustotal Group Object Structure

5 properties

JSON STRUCTURE

Virustotal Ioc Stream Notification Object Structure

5 properties

JSON STRUCTURE

Virustotal Ip Address Object Structure

5 properties

JSON STRUCTURE

Virustotal Livehunt Ruleset Object Structure

5 properties

JSON STRUCTURE

Virustotal Popular Threat Category Object Structure

5 properties

JSON STRUCTURE

Virustotal Retrohunt Job Object Structure

5 properties

JSON STRUCTURE

Virustotal Url Object Structure

5 properties

JSON STRUCTURE

Virustotal User Object Structure

5 properties

JSON STRUCTURE

Virustotal Vote Object Structure

5 properties

JSON STRUCTURE

Virustotal Yara Rule Object Structure

5 properties

JSON STRUCTURE

Scroll for all 19

Examples 19

Example request and response payloads for these APIs.

Virustotal Analysis Object Example

5 fields

EXAMPLE

Virustotal Attack Tactic Object Example

5 fields

EXAMPLE

Virustotal Attack Technique Object Example

5 fields

EXAMPLE

Virustotal Collection Object Example

5 fields

EXAMPLE

Virustotal Comment Object Example

5 fields

EXAMPLE

Virustotal Domain Object Example

5 fields

EXAMPLE

Virustotal File Behaviour Object Example

5 fields

EXAMPLE

Virustotal File Object Example

5 fields

EXAMPLE

Virustotal Graph Object Example

5 fields

EXAMPLE

Virustotal Group Object Example

5 fields

EXAMPLE

Virustotal Ioc Stream Notification Object Example

5 fields

EXAMPLE

Virustotal Ip Address Object Example

5 fields

EXAMPLE

Virustotal Livehunt Ruleset Object Example

5 fields

EXAMPLE

Virustotal Popular Threat Category Object Example

5 fields

EXAMPLE

Virustotal Retrohunt Job Object Example

5 fields

EXAMPLE

Virustotal Url Object Example

5 fields

EXAMPLE

Virustotal User Object Example

5 fields

EXAMPLE

Virustotal Vote Object Example

5 fields

EXAMPLE

Virustotal Yara Rule Object Example

5 fields

EXAMPLE

Scroll for all 19

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Virustotal Authentication

apiKey · 1 scheme

SECURITY

Virustotal Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Virustotal Agentic Access

206 operations · 56 acting · 11 human-in-the-loop

206 operations · 56 acting

AGENTIC

Resources

Documentation 5

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference
 GTI API v3 — Full Spec (official, upstream)
OpenAPI
 GTI ASM — Attack Surface Management
OpenAPI
 GTI DTM — Digital Threat Monitoring
OpenAPI

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess

Design & Contract 3

Pagination, idempotency, versioning, errors, and events

SpectralRuleset
SpectralRuleset
 Vocabulary
Vocabulary
 JSONLDContext
JSONLDContext

Build 18

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization
 Python SDK (vt-py)
SDKs
 Go SDK (vt-go)
SDKs
 Graph API Python (vt-graph-api)
SDKs
 vt-cli — Official VirusTotal Command Line Interface (Go)
CLI
 MCP Server (BurtTheCoder/mcp-virustotal — community)
Tools
 MCP Server (alephnan/MCP-VirusTotal — community)
Tools
 MCP Server (barvhaim/virustotal-mcp-server — community, Python)
Tools
 YARA (the pattern matching swiss knife)
Tools
 YARA-X (Rust rewrite of YARA)
Tools
 yara-python (Python interface for YARA)
Tools
 yara-x-benchmarks
Tools
 go-yara (Go bindings for YARA)
Tools
 protoc-gen-yara (YARA modules from protobufs)
Tools
 CAPEv2 (Malware Configuration And Payload Extraction)
Tools
 vt-ida-plugin (Official VirusTotal plugin for IDA Pro)
Tools
 vt-windows-event-stream
Tools
 qt-virustotal-uploader (Qt desktop uploader)
Tools

Scroll for all 18

Access & Security 2

Authentication, authorization, and security posture

DomainSecurity
DomainSecurity
 Authentication
Authentication

Learn 1

Tutorials, courses, talks, and written guidance

GTI Developer Kit (example integration code)
Tutorials

Operate 1

Status, limits, changes, and where to get help

RateLimits
RateLimits

Commercial 2

Pricing, plans, and the legal terms of use

Plans
Plans
 FinOps
FinOps

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Other 1

Properties that don't map to a standard resource type

PublicAPIsListing
PublicAPIsListing

Source (apis.yml)

apis.yml Raw ↑ 
aid: virustotal
name: VirusTotal
description: 'VirusTotal — the Google-owned (since 2012) threat intelligence platform that aggregates anti-malware engines
  and URL scanners to analyse files, URLs, IP addresses, and domains. The v3 API surfaces seven major areas: Access Control,
  IoC Feeds, IoC Investigation, Private Scanning, Threat Graphs, Threat Landscape & Vulnerability Intelligence, and YARA Hunting
  (Livehunt, Retrohunt, IoC Stream). Now also branded "Google Threat Intelligence" (GTI) for Enterprise customers, integrating
  Mandiant intelligence, Digital Threat Monitoring (DTM), and Attack Surface Management (ASM).'
url: https://docs.virustotal.com/reference/overview
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://www.virustotal.com/gui/images/vt-logo.svg
specificationVersion: '0.20'
created: '2026-05-28'
modified: '2026-05-29'
x-source: public-apis/public-apis
x-category: Anti-Malware
x-type: company
x-tier: 1
tags:
- Anti-Malware
- Threat Intelligence
- Security
- File Analysis
- URL Analysis
- YARA
- IoC
- Sandbox
- MITRE ATT&CK
- Google Cloud
apis:
- name: Google Threat Intelligence - Attack Surface Management (ASM)
  description: Enterprise add-on (formerly Mandiant Advantage ASM). Discovers and monitors an organisation's external attack
    surface, scoring exposures and prioritising remediation.
  humanURL: https://gtidocs.virustotal.com/reference/openapi-specs
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - Attack Surface Management
  - Enterprise
  - GTI
  properties:
  - type: APIReference
    url: https://gtidocs.virustotal.com/openapi/asm-attack-surface-management.json
  - type: ProductPage
    url: https://cloud.google.com/security/products/threat-intelligence
- name: Google Threat Intelligence - Digital Threat Monitoring (DTM)
  description: Enterprise add-on (formerly Mandiant Advantage DTM). Monitors the open, deep, and dark web for credential leaks,
    brand abuse, and adversary chatter referencing the customer.
  humanURL: https://gtidocs.virustotal.com/reference/openapi-specs
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - Digital Threat Monitoring
  - Dark Web
  - Brand Protection
  - Enterprise
  - GTI
  properties:
  - type: APIReference
    url: https://gtidocs.virustotal.com/openapi/dtm-digital-threat-monitoring.json
  - type: ProductPage
    url: https://cloud.google.com/security/products/threat-intelligence
- aid: virustotal:virustotal-access-control-group-management-api
  name: VirusTotal Access Control - Group Management API
  description: Access Control - Group Management
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - Access Control - Group Management
  properties:
  - type: OpenAPI
    url: openapi/virustotal-access-control-group-management-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-access-control-quota-management-api
  name: VirusTotal Access Control - Quota Management API
  description: Access Control - Quota Management
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - Access Control - Quota Management
  properties:
  - type: OpenAPI
    url: openapi/virustotal-access-control-quota-management-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-access-control-service-account-management-api
  name: VirusTotal Access Control - Service Account Management API
  description: Access Control - Service Account Management
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - Access Control - Service Account Management
  properties:
  - type: OpenAPI
    url: openapi/virustotal-access-control-service-account-management-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-access-control-user-management-api
  name: VirusTotal Access Control - User Management API
  description: Access Control - User Management
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - Access Control - User Management
  properties:
  - type: OpenAPI
    url: openapi/virustotal-access-control-user-management-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-feeds-domain-intelligence-feed-api
  name: VirusTotal IoC Feeds - Domain intelligence feed API
  description: IoC Feeds - Domain intelligence feed
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Feeds - Domain intelligence feed
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-feeds-domain-intelligence-feed-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-feeds-file-intelligence-feed-api
  name: VirusTotal IoC Feeds - File intelligence feed API
  description: IoC Feeds - File intelligence feed
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Feeds - File intelligence feed
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-feeds-file-intelligence-feed-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-feeds-ip-intelligence-feed-api
  name: VirusTotal IoC Feeds - IP intelligence feed API
  description: IoC Feeds - IP intelligence feed
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Feeds - IP intelligence feed
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-feeds-ip-intelligence-feed-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-feeds-sandbox-analyses-feed-api
  name: VirusTotal IoC Feeds - Sandbox analyses feed API
  description: IoC Feeds - Sandbox analyses feed
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Feeds - Sandbox analyses feed
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-feeds-sandbox-analyses-feed-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-feeds-url-intelligence-feed-api
  name: VirusTotal IoC Feeds - URL intelligence feed API
  description: IoC Feeds - URL intelligence feed
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Feeds - URL intelligence feed
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-feeds-url-intelligence-feed-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-investigation-analyses-submissions-operations-api
  name: VirusTotal IoC Investigation - Analyses, Submissions & Operations API
  description: IoC Investigation - Analyses, Submissions & Operations
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Investigation - Analyses, Submissions & Operations
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-investigation-analyses-submissions-operations-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-investigation-attack-tactics-api
  name: VirusTotal IoC Investigation - Attack Tactics API
  description: IoC Investigation - Attack Tactics
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Investigation - Attack Tactics
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-investigation-attack-tactics-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-investigation-attack-techniques-api
  name: VirusTotal IoC Investigation - Attack Techniques API
  description: IoC Investigation - Attack Techniques
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Investigation - Attack Techniques
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-investigation-attack-techniques-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-investigation-comments-api
  name: VirusTotal IoC Investigation - Comments API
  description: IoC Investigation - Comments
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Investigation - Comments
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-investigation-comments-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-investigation-domains-resolutions-api
  name: VirusTotal IoC Investigation - Domains & Resolutions API
  description: IoC Investigation - Domains & Resolutions
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Investigation - Domains & Resolutions
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-investigation-domains-resolutions-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-investigation-files-api
  name: VirusTotal IoC Investigation - Files API
  description: IoC Investigation - Files
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Investigation - Files
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-investigation-files-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-investigation-files-behaviours-api
  name: VirusTotal IoC Investigation - Files Behaviours API
  description: IoC Investigation - Files Behaviours
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Investigation - Files Behaviours
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-investigation-files-behaviours-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-investigation-ip-addresses-api
  name: VirusTotal IoC Investigation - IP addresses API
  description: IoC Investigation - IP addresses
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Investigation - IP addresses
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-investigation-ip-addresses-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-investigation-popular-threat-categories-api
  name: VirusTotal IoC Investigation - Popular Threat Categories API
  description: IoC Investigation - Popular Threat Categories
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Investigation - Popular Threat Categories
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-investigation-popular-threat-categories-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-investigation-search-metadata-api
  name: VirusTotal IoC Investigation - Search & Metadata API
  description: IoC Investigation - Search & Metadata
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Investigation - Search & Metadata
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-investigation-search-metadata-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-investigation-urls-api
  name: VirusTotal IoC Investigation - URLs API
  description: IoC Investigation - URLs
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Investigation - URLs
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-investigation-urls-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-ioc-investigation-zipping-files-api
  name: VirusTotal IoC Investigation - Zipping files API
  description: IoC Investigation - Zipping files
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - IoC Investigation - Zipping files
  properties:
  - type: OpenAPI
    url: openapi/virustotal-ioc-investigation-zipping-files-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-private-scanning-analyses-api
  name: VirusTotal Private Scanning - Analyses API
  description: Private Scanning - Analyses
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - Private Scanning - Analyses
  properties:
  - type: OpenAPI
    url: openapi/virustotal-private-scanning-analyses-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-private-scanning-files-api
  name: VirusTotal Private Scanning - Files API
  description: Private Scanning - Files
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - Private Scanning - Files
  properties:
  - type: OpenAPI
    url: openapi/virustotal-private-scanning-files-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-private-scanning-files-behaviours-api
  name: VirusTotal Private Scanning - Files Behaviours API
  description: Private Scanning - Files Behaviours
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - Private Scanning - Files Behaviours
  properties:
  - type: OpenAPI
    url: openapi/virustotal-private-scanning-files-behaviours-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-private-scanning-urls-api
  name: VirusTotal Private Scanning - URLs API
  description: Private Scanning - URLs
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - Private Scanning - URLs
  properties:
  - type: OpenAPI
    url: openapi/virustotal-private-scanning-urls-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-private-scanning-zipping-files-api
  name: VirusTotal Private Scanning - Zipping files API
  description: Private Scanning - Zipping files
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - Private Scanning - Zipping files
  properties:
  - type: OpenAPI
    url: openapi/virustotal-private-scanning-zipping-files-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-threat-graphs-api
  name: VirusTotal Threat Graphs API
  description: Threat Graphs
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - Threat Graphs
  properties:
  - type: OpenAPI
    url: openapi/virustotal-threat-graphs-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-threat-graphs-permissions-acl-api
  name: VirusTotal Threat Graphs Permissions & ACL API
  description: Threat Graphs Permissions & ACL
  humanURL: https://docs.virustotal.com/reference/overview
  baseURL: https://www.virustotal.com/api/v3
  tags:
  - Threat Graphs Permissions & ACL
  properties:
  - type: OpenAPI
    url: openapi/virustotal-threat-graphs-permissions-acl-api-openapi.yml
  - type: Documentation
    url: https://docs.virustotal.com/reference/overview
  - type: APIReference
    url: https://gtidocs.virustotal.com/reference/overview
  - type: Documentation
    url: https://docs.virustotal.com/reference/feeds
  - type: Documentation
    url: https://docs.virustotal.com/reference/files
  - type: Documentation
    url: https://docs.virustotal.com/reference/private-scanning
  - type: Documentation
    url: https://docs.virustotal.com/reference/graphs
  - type: Documentation
    url: https://docs.virustotal.com/reference/collections
  - type: Documentation
    url: https://docs.virustotal.com/reference/livehunt
- aid: virustotal:virustotal-threat-landscape-vulnerability-intelligence-reports-analysis-api
  name: VirusT

# --- truncated at 32 KB (45 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/virustotal/refs/heads/main/apis.yml