A side-by-side look at the MCP Virustotal and PII & Secret Redactor MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.
Verdict: choose MCP Virustotal for security work as a local process; choose PII & Secret Redactor for security. You can also run both side by side in one mcpServers block.
VIRUSTOTAL_API_KEY, MCP_TRANSPORT, MCP_PORT, MCP_ENDPOINT.get_url_report, url, get_file_report.detect_pii, redact_text, restore_text.Rows where the two servers differ are marked.
| Spec | P PII & Secret Redactor | |
|---|---|---|
| Category | Security | Security |
| Quality signal | 64/100 · Good | 45/100 · Fair |
| Install command | Confirmed | Not confirmed yet |
| Transport | Local subprocess (stdio) | — |
| Auth | API key required | Not declared |
| Pricing | BYOK (pay the provider) | Freemium |
| Required env vars | VIRUSTOTAL_API_KEYMCP_TRANSPORTMCP_PORTMCP_ENDPOINT | None listed |
| Verified owner | Community listing | Community listing |
| GitHub stars | 150 | 0 |
| Directory activity | 3 views 0 installs 0 upvotes | 0 views 0 installs 0 upvotes |
| Tools | 24 | 4 |
| Full listing | View MCP Virustotal | View PII & Secret Redactor |
get_url_reporturlget_file_reporthashget_ip_reportipget_domain_reportdomainrelationshipsget_url_relationshiprelationshiplimitdetect_piifindings with type, position and a masked preview. Never echoes full values.redact_textplaceholder (stable tokens like `<EMAIL_1>`, same value gives the same token), mask, salted hash, or remove.restore_textswap placeholders back to the originals in the model's response, using the mapping you keep.list_detectorsexactly what is and is not covered.Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.
{
"mcpServers": {
"burtthecoder-mcp-virustotal": {
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-virustotal"
],
"env": {
"VIRUSTOTAL_API_KEY": "YOUR_VIRUSTOTAL_API_KEY_HERE",
"MCP_TRANSPORT": "YOUR_MCP_TRANSPORT_HERE",
"MCP_PORT": "YOUR_MCP_PORT_HERE",
"MCP_ENDPOINT": "YOUR_MCP_ENDPOINT_HERE"
}
}
}
}
No confirmed install command for PII & Secret Redactor yet — follow the setup steps linked from its listing page rather than a guessed package name.