---
title: "Virustotal integration for LuumenAI"
url: "https://www.luumen.ai/integrations/virustotal/"
entity: SoftwareIntegration
category: "Identity & security"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Virustotal integration for LuumenAI

Check files, URLs, domains, and IPs against VirusTotal without leaving the terminal

## What LuumenAI can do with Virustotal

LuumenAI connects to Virustotal with an API token and exposes 16 tools (11 read-only · 5 write). For connected tools, admins configure which actions may run automatically and which require approval, within the access granted to the user.

## Key facts

- Authentication: API token
- Tools available: 16 tools (11 read-only · 5 write)
- Deployment: scoped as part of your Pilot, Platform, or Managed rollout
- Category: Identity & security

## About Virustotal with LuumenAI

Pull VirusTotal reports while you work an incident. Ask about a file hash, a URL, a domain, or an IP and get the engine verdicts, the related infrastructure, and the community notes back in the terminal. When you need a fresh verdict, Luumen can submit a URL or file for scanning as an approved step. Luumen connects with an API key.

## Example tools

Read-only (11 in total):

- `VIRUSTOTAL_GET_ANALYSIS` — Retrieve the analysis report of a file or URL submission.
- `VIRUSTOTAL_GET_COMMENTS` — Retrieve the latest comments on a VirusTotal resource.
- `VIRUSTOTAL_GET_DOMAIN_RELATIONSHIPS` — Retrieve relationship objects for a given domain.
- `VIRUSTOTAL_GET_DOMAIN_REPORT` — Retrieve the analysis report of a domain.
- `VIRUSTOTAL_GET_FILE_REPORT` — Retrieve the analysis report of a file.
- `VIRUSTOTAL_GET_IP_ADDRESS_RELATIONSHIPS` — Retrieve objects related to a specific IP address by relationship type.
- `VIRUSTOTAL_GET_IP_ADDRESS_REPORT` — Retrieve the analysis report of an IP address.
- `VIRUSTOTAL_GET_METADATA` — Retrieve VirusTotal metadata.

Write and destructive (5 in total, subject to configured approval policy):

- `VIRUSTOTAL_ADD_COMMENT` — Add a comment to a VirusTotal resource (file, URL, domain, or IP address).
- `VIRUSTOTAL_ADD_VOTE` — Add a vote (harmless/malicious) to a VirusTotal resource.
- `VIRUSTOTAL_RESCAN_FILE` — Re-analyze a previously submitted file.
- `VIRUSTOTAL_SCAN_URL` — Submit a URL for scanning.
- `VIRUSTOTAL_UPLOAD_FILE` — Upload a file for scanning.

## Frequently asked questions

### How does LuumenAI connect to Virustotal?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Virustotal on its own?

For connected tools, admins configure which actions may run automatically and which require approval, within the access granted to the user.

### Is there an audit trail?

Every call to Virustotal — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/virustotal/