Skip to main content

The official Python client library for VirusTotal Graph API

Project description


VirusTotal Graph API

VirusTotal Graph API allows you programatically interact with VirusTotal dataset.

Installing the API

Install VirusTotal Graph Python API.

git clone
cd vt_graph_api
pip install . --user

Verifying the installation

>>> import vt_graph_api
>>> vt_graph_api.__version__


For more information about how to use vt_graph_api visit the documentation page.

You may also want to take a look at some of our example scripts, which besides doing useful work for you can be used as a guidance on how to use vt_graph_api.

In addition, you can find the documentation for the VirusTotal Graph REST API at the API reference

Test it!

Use tox to test:

>>> tox



  • Support for setting Graph representation.


  • Removed carbonblack_children and carbonblack_parent relationships in File entity.
  • Create a Collection from a Graph.
  • Added new entity types:
    • collection
    • reference
    • whois
    • ssl_cert
  • Added new relationships:
    • Files: dropped_files, collections, email_attachments, itw_ips, overlay_children, pe_resource_children, references, urls_for_embedded_js
    • Domains: historical_ssl_certificates, historical_whois, caa_records, cname_records, mx_records, ns_records, soa_records, collections, references.
    • IP Addresses: historical_ssl_certificates, historical_whois, collections, references.
    • Urls: contacted_domains, contacted_ips, redirects_to, urls_related_by_tracker_id, communicating_files, referrer_files, embedded_js_files, collections, references
    • Collections: files, domains, ip_addresses, urls, references.
    • Whois: network_location.


  • Bug fixing.


  • Bug fixing.


  • Bug fixing.
  • Fixing documentation.


  • Added download graph screenshot from VirusTotal.


  • Fixing documentation.


  • Added autosearch algorithm to find links between graph's nodes.
  • Accept MD5 and SHA1 as valid ID for nodes with file type.
  • Added VTIntelligence search for nodes without any information.
  • Accept custom node types.
  • Added load graph from VirusTotal.
  • Added clone graph from VirusTotal.

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

vt_graph_api-2.1.0.tar.gz (33.7 kB view hashes)

Uploaded source

Built Distribution

vt_graph_api-2.1.0-py3-none-any.whl (39.3 kB view hashes)

Uploaded py3

Supported by

AWS AWS Cloud computing Datadog Datadog Monitoring Facebook / Instagram Facebook / Instagram PSF Sponsor Fastly Fastly CDN Google Google Object Storage and Download Analytics Huawei Huawei PSF Sponsor Microsoft Microsoft PSF Sponsor NVIDIA NVIDIA PSF Sponsor Pingdom Pingdom Monitoring Salesforce Salesforce PSF Sponsor Sentry Sentry Error logging StatusPage StatusPage Status page