{"uid":"cap_VB9iAShCg82vD_jrVSBvo","slug":"virustotal-search-via-locus-x402-45c7faf4","name":"VirusTotal Search via Locus x402","description":"Threat intelligence platform — scan files by hash, URLs, domains, and IPs against 70+ antivirus engines and security tools.","url":"https://virustotal.x402.paywithlocus.com/virustotal/search","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"limit":{"type":"number"},"query":{"type":"string"},"descriptors_only":{"type":"boolean"}}},"responseSchema":{"type":"json","example":{"data":{},"payment":{"scheme":"exact","settledUsdc":"0.001000","authorizedMaxUsdc":"0.001000"},"request":{"id":"00000000-0000-4000-8000-000000000000","statusUrl":"/requests/00000000-0000-4000-8000-000000000000"},"success":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.085","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.085/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.085","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.085","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_3N0lD-y39vw3Bc0skIqSv","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.085","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Search VirusTotal's threat intelligence database by domain, hash, URL, or IP against 70+ antivirus engines using x402 micropayment authentication","exampleAgentPrompt":"Can you check VirusTotal to see if the file hash 44d88612fea8a8f36de82e1278abb02f is flagged as malicious by any antivirus engines, and return up to 5 results?","exampleUseCases":[{"title":"Malware hash verification for incident response","prompt":"I found a suspicious executable on our server — can you check VirusTotal to see if the hash 3395856ce81f2b7382dee72602f798b642f14d0 is flagged by any antivirus engines? Give me up to 10 results."},{"title":"Domain reputation check before allowing traffic","prompt":"Before we whitelist this domain in our firewall, can you search VirusTotal for 'malware-suspect-domain.ru' and tell me how many security vendors have flagged it?"},{"title":"IP address threat intelligence lookup","prompt":"Can you look up 185.220.101.34 on VirusTotal to see if this IP address is known to be associated with malicious activity or flagged by security tools? Return up to 10 results."}],"resultDescription":"Returns a JSON object with a 'data' field containing VirusTotal search results — including threat verdicts, detection ratios, and security metadata from 70+ antivirus engines — plus payment confirmation details (settled USDC amount) and a request tracking ID.","failureModes":["Invalid or unrecognized query format returns empty or error data","Malformed hash (wrong length or character set) may return no matches","Rate limiting or payment failure results in non-200 response","Rare or very new hashes/domains may have no VirusTotal data yet","Network timeout if VirusTotal backend is slow to respond"],"whenToPreferThis":"Use this endpoint when you need to programmatically check file hashes, domains, IPs, or URLs against VirusTotal's database of 70+ antivirus engines via x402 micropayment — ideal for security automation pipelines, incident response workflows, or threat intelligence enrichment where per-query pay-as-you-go pricing is preferable to a subscription API key.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T06:40:12.320Z","isFirstParty":false}