.DkNUKaKx_ZLAT4m.webp?dpl=dpl_6g6wXhzN6kt89j7BN8bakZQZ1wP4){kind=small}
Connectors / Security and compliance · HTTP Connector
Automate VirusTotal with Tray.ai
Upload a file for scanning in VirusTotal. Connect VirusTotal to the rest of your security and compliance stack with Tray.ai.
Thanks — someone from our team will be in touch soon.
What can you do with VirusTotal on Tray.ai?
VirusTotal scans files and URLs with many antivirus engines and reports what is known about suspicious domains and IP addresses. Tray.ai connects to VirusTotal through the HTTP Connector, so your workflows can call the VirusTotal API alongside the rest of your stack.
- Connects through
- HTTP Connector
- Authentication
- An API key in a request header
- Base URL
- https://www.virustotal.com/api/v3
What the VirusTotal API covers
3 resources and 6 documented actions, each one a call the HTTP Connector can make from a Tray.ai workflow.
Files
- Upload a file for scanning
- Get a file report
URLs
- Scan a URL
- Get a URL report
Domains and IP addresses
- Get a domain report
- Get an IP address report
Checked against VirusTotal's own documentation on 2026-10-22
How Tray.ai makes this work
VirusTotal plugs into the whole Tray.ai platform
Intelligent Integration
Integrate and automate across 700+ connectors with visual workflows, error handling, and observability.
Learn more →Agent Builder
Build AI agents that read, write, and take action in VirusTotal — with guardrails, audit, and human-in-the-loop.
Learn more →Agent Gateway for MCP
Expose VirusTotal actions as governed MCP tools — observable, rate-limited, authenticated.
Learn more →More security and compliance apps on Tray.ai
Dedicated connectors and other apps Tray.ai reaches in the same category. See every security and compliance connector →
Frequently asked questions
What can a Tray.ai workflow do in VirusTotal?
+
The VirusTotal API documents 6 actions across 3 resources (Files, URLs, Domains and IP addresses). For example: Upload a file for scanning; Scan a URL; Get a domain report. A workflow can make any documented call through the HTTP Connector.
How does Tray.ai authenticate with VirusTotal?
+
The VirusTotal API uses an API key in a request header. You save it once as a Tray.ai authentication, and the HTTP Connector adds it to every request.
See VirusTotal working against your stack.
We'll walk through a tailored demo with your systems plugged in.
Thanks — someone from our team will be in touch soon.