virustotal_url_report

What virustotal_url_report does on UnClick

AI agents call virustotal_url_report to retrieve information from UnClick without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Parameters from the server's own tool schema.

Why virustotal_url_report is rated Low

This is a read-only operation that fetches existing security scan data from VirusTotal. It has no side effects, does not execute code or commands, and does not modify any data. The tool only retrieves and returns information about a URL's reputation. While the information could theoretically be misused to target malicious URLs, the tool itself is purely informational and poses minimal risk.

From the tool's definition The tool performs 'Get a VirusTotal report for a URL', which is a retrieval operation that queries security information without modifying or executing anything.

Risk signalsAccepts URL/endpoint input (url) · Handles credentials or secrets (api_key)

The rule that runs virustotal_url_report safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UnClick, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For virustotal_url_report, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "virustotal_url_report": {}
  }
}

Questions about virustotal_url_report