# Intelligence search

Search VirusTotal for files, URLs, domains or IPs matching a query.

|  |  |
| --- | --- |
| Tool id | `virustotal.search` |
| Platform | [Threat intelligence](https://www.orcarouter.ai/tools/threat-intel.md) |
| Capability | [Intel search](https://www.orcarouter.ai/tools/threat-intel/intel-search.md) |
| Price | $0.03 per call |
| Health | OK |
| p50 latency | — |
| Success (7 days) | — |
| Runs (30 days) | — |
| Idempotent | yes |
| Data class | unclassified |

## Input

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `query` | string | yes | The search query (hash, domain, IP, URL or VT query syntax). |

## Call it

```bash
curl -sS https://api.orcarouter.ai/v1/tools/virustotal.search/run \
  -H "Authorization: Bearer $ORCAROUTER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"input":{"query":"<query>"}}'
```

```python
import os, requests

resp = requests.post(
    "https://api.orcarouter.ai/v1/tools/virustotal.search/run",
    headers={"Authorization": f"Bearer {os.environ['ORCAROUTER_API_KEY']}"},
    json={"input":{"query":"<query>"}},
)
print(resp.json())
```

## FAQ

### How much does Intelligence search cost?

Intelligence search costs $0.03 per call: 1,000 calls cost $30.00.

### What does a $10 budget buy with Intelligence search?

About 333 calls at $0.03 per call.

### What inputs does Intelligence search need?

Required inputs: query.

### How do I call Intelligence search?

Send POST /v1/tools/{id}/run with your OrcaRouter API key and a JSON body {"input": {…}}, where {id} is the tool id POST /v1/tools/discover returns for it.

---

Markdown version of https://www.orcarouter.ai/tools/threat-intel/intel-search/search