VirusTotal has integrated its threat intelligence database directly into ChatGPT, allowing security researchers and analysts to query files, URLs, domains, and IP addresses without leaving the conversation interface.
The announcement, made on October 14, introduces access through VirusTotal AI (VTAI) using the Model Context Protocol. Configuration takes place in ChatGPT developer mode with OAuth authorization via a Google account, eliminating the need for an API key.
Once connected, existing analysis reports appear inside the chat, showing the original source, analysis date, detection coverage, and detailed explanations of each engine result. For authorized file attachments, the connector first calculates the hash locally and only submits the sample if it is unknown to the database.
With explicit permission, the integration can also submit URLs and request fresh analyses of domains and IP addresses. All usage stays within free quotas: report lookups consume standard quota, while unknown file submissions count against a separate contribution limit. Permissions and quotas are linked to the connected account rather than individual conversations.
VirusTotal stresses that an absent report does not prove a file is safe, and access to results should not be treated as a final verdict. Privacy considerations remain important, as standard submissions share content with the VirusTotal community and partners, while full URLs may expose query parameters and fragments.

