MCP server

Lazaretto

io.github.jamesdfinance-dev/lazaretto

Checked 25 Oct 2026, 20:29 UTC · Connected to it and listed its tools

Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.

Website Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Working at last check

Tools

9

Token cost

About 2,964 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

25 Oct 2026, 20:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http lazaretto https://lazaretto.dev/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.lazaretto]
url = "https://lazaretto.dev/mcp"

Gemini CLI

{"mcpServers":{"lazaretto":{"httpUrl":"https://lazaretto.dev/mcp"}}}

Cursor

{"mcpServers":{"lazaretto":{"url":"https://lazaretto.dev/mcp"}}}

VS Code

{"servers":{"lazaretto":{"type":"http","url":"https://lazaretto.dev/mcp"}}}

Antigravity

agy mcp add lazaretto https://lazaretto.dev/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"lazaretto","server_url":"https://lazaretto.dev/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"lazaretto","server_url":"https://lazaretto.dev/mcp"}

Tools

• check_lockfile ~506 tokens
  Check EXACTLY-PINNED npm dependencies against published malicious-package advisories (OSV/OpenSSF). Free, anonymous, one call for the whole set. Give EITHER `lockfile`, the full text of a package-lock.json, yarn.lock or pnpm-lock.yaml, OR `packages`, a list of "name@version" strings, which is the on
• check_mcp_tools ~306 tokens
  Check tool definitions you ALREADY HOLD, with no network call to anyone. Most MCP servers run locally over stdio and have no endpoint that can be reached, so this is the only way to check them, and your client already read their tool list at startup. Paste that JSON: a whole tools/list response, a {
• find_attestation ~402 tokens
  Ask whether anyone has already attested an artifact, BEFORE you install it or pay to scan it. Free and anonymous. Give a package identity like "chalk@5.6.1", an MCP server endpoint URL, or a sha256 content hash. Returns the signed verdict if one exists, which you can verify offline against https://l
• get_free_key ~205 tokens
  Get a free developer key for the metered tools on this server, without leaving this session. No payment, no account, no card. The key holds a small daily allowance that refills every day, and one credit is consumed per verdict, nothing on an error. Present it as the X-API-Key header on this MCP conn
• known_bad_lookup ~128 tokens
  Check a SHA-256 against Lazaretto's known-bad indicator set (refreshed daily from abuse.ch). Free and anonymous. A miss only means this exact hash is not in the indicator set; it is not a clean verdict on the artifact.
• scan_artifact ~467 tokens
  Deterministically analyze a package, repo, skill, or file for malicious behavior (credential theft, data exfiltration, obfuscation, prompt injection aimed at the agent, install scripts) and return a verdict (malicious, flagged, clear, error) with the exact evidence and a hash of what was scanned. Me
• scan_lockfile_deep ~419 tokens
  Behaviorally scan the exactly-pinned dependencies in a lockfile, not just their identities: reads the code of each package and screens for credential theft, exfiltration, obfuscation, prompt injection and install-time droppers. Each result carries a verdict, a risk level, the ids of the rules that f
• scan_mcp_server ~325 tokens
  Check an MCP server BEFORE you connect to it. Asks the server to introduce itself and list its tools, then analyzes the text it hands an agent: tool names, descriptions, parameter schemas and server instructions. Catches tool poisoning (hidden directives that point the agent at private keys or at an
• verify_attestation ~206 tokens
  Verify a Lazaretto scan attestation that another agent (or a README, or a lockfile) handed you, WITHOUT re-scanning or paying. Free and anonymous. Returns whether the signature is valid and Lazaretto's, the attested claims (verdict, risk, and the subject the verdict is about), and a `contradicted` f

Browse

• GitHub tools
• Payments
• GitHub and code hosting
• Security scanning

Related MCP servers

• DepScout
  Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
• Ai Vdb
  Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.
• Dominionobservatory Observatory
  Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools.
• YourAITools MCP Hub
  All 22 YourAITools agent APIs in one MCP server. Most tools free; pay with credits or x402.
• PkgGuard
  Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker
• ScanMalware.com URL Scanner
  MCP server for ScanMalware.com URL scanning, malware detection, and analysis.
• AI Website Security
  Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.
• BorealHost
  Agent-native web hosting — deploy sites, manage DNS, register domains, scale infrastructure

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.jamesdfinance-dev/lazaretto.svg)](https://aptlynx.net/servers/io.github.jamesdfinance-dev/lazaretto)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents