lazaretto

Name: lazaretto
Author: jamesdfinance-dev

MCP serverMCP

Checks npm packages, lockfiles, agent skills and MCP servers for malware before you install them. Free lockfile check and known-bad lookup; full behavioral scans with file-and-line evidence.

by jamesdfinance-devrepository ↗homepage ↗v1.2.6MIT

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability58/58 checks ok

when	check	result	http	latency	detail
45 min ago	mcp initialize	ok	200	171 ms	server lazaretto 1.0.0 · protocol 2025-06-18 · 8 tools
2 h ago	mcp initialize	ok	200	128 ms	server lazaretto 1.0.0 · protocol 2025-06-18 · 8 tools
3 h ago	mcp initialize	ok	200	125 ms	server lazaretto 1.0.0 · protocol 2025-06-18 · 8 tools
10 h ago	mcp initialize	ok	200	131 ms	server lazaretto 1.0.0 · protocol 2025-06-18 · 8 tools
16 h ago	mcp initialize	ok	200	234 ms	server lazaretto 1.0.0 · protocol 2025-06-18 · 8 tools
24 h ago	mcp initialize	ok	200	259 ms	server lazaretto 1.0.0 · protocol 2025-06-18 · 8 tools
31 h ago	mcp initialize	ok	200	127 ms	server lazaretto 1.0.0 · protocol 2025-06-18 · 8 tools
2 d ago	mcp initialize	ok	200	234 ms	server lazaretto 1.0.0 · protocol 2025-06-18 · 8 tools
2 d ago	mcp initialize	ok	200	268 ms	server lazaretto 1.0.0 · protocol 2025-06-18 · 8 tools
2 d ago	mcp initialize	ok	200	130 ms	server lazaretto 1.0.0 · protocol 2025-06-18 · 8 tools

Tools observed via MCP handshake

known_bad_lookup — Check a SHA-256 against Lazaretto's known-bad indicator set (refreshed daily from abuse.ch). Free and anonymous. A miss only means this exact hash is not in the
check_lockfile — Check every EXACTLY-PINNED dependency in a lockfile against published malicious-package advisories (OSV/OpenSSF). Free, anonymous, one call for the whole tree.
scan_artifact — Deterministically analyze a package, repo, skill, or file for malicious behavior (credential theft, data exfiltration, obfuscation, prompt injection aimed at th
scan_lockfile_deep — Behaviorally scan EVERY exactly-pinned dependency in a lockfile, not just their identities: reads the code of each package and reports credential theft, exfiltr
scan_mcp_server — Check an MCP server BEFORE you connect to it. Asks the server to introduce itself and list its tools, then analyzes the text it hands an agent: tool names, desc
check_mcp_tools — Check tool definitions you ALREADY HOLD, with no network call to anyone. Most MCP servers run locally over stdio and have no endpoint that can be reached, so th
find_attestation — Ask whether anyone has already attested an artifact, BEFORE you install it or pay to scan it. Free and anonymous. Give a package identity like "chalk@5.6.1", an
verify_attestation — Verify a Lazaretto scan attestation that another agent (or a README, or a lockfile) handed you, WITHOUT re-scanning or paying. Free and anonymous. Returns wheth

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.

securitysupply-chainmalwaremalware-detectionnpmlockfilepnpmyarndependency-scanningmcp-securityprompt-injectionagent-skillsmcpmodelcontextprotocolskillverifyagentx402dependenciesosvattestation

Pricingfreemium from 0.0156 USD

kind Verified owner

name Verified owner

license npm registry

pricing Verified owner

repoUrl Official MCP Registry

summary Verified owner

version Official MCP Registry

description Verified owner

homepageUrl Verified owner

publisherName Official MCP Registry

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registryio.github.jamesdfinance-dev/lazaretto

first seen 16 d ago · fetched 21 h agoopen ↗

Verified ownerag_4v5r9vf9sysj

first seen 3 h ago · fetched 3 h ago

npm registrylazaretto-mcp

first seen 8 d ago · fetched 4 d agoopen ↗

Field history (12 recent events)

3 h ago · declared · pricing → {"from":0.0156,"model":"freemium","currency":"USD"}
3 h ago · declared · summary → "Checks npm packages, lockfiles, agent skills and MCP servers for malware before you install them. Free lockfile check a
3 h ago · declared · pricing → {"from":0.0156,"model":"usage","currency":"USD"}
3 h ago · declared · pricing → {"from":0.0156,"model":"freemium","currency":"USD"}
3 h ago · declared · pricing → {"from":0,"model":"usage","currency":"USD"}
3 h ago · claimed · ownership → {"method":"github_owner","target":"jamesdfinance-dev"}
8 d ago · declared · license → "MIT"
8 d ago · observed · packageFacts → {"name":"lazaretto-mcp","registry":"npm","publishedAt":"2026-08-31T23:32:31.003Z","latestVersion":"0.5.0","weeklyDownloa
16 d ago · declared · description → "Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools."
16 d ago · declared · protocols → ["mcp"]
16 d ago · declared · version → "1.2.6"
16 d ago · declared · repoUrl → "https://github.com/jamesdfinance-dev/lazaretto-mcp"

Evidence

What the publisher says

Capabilities

Where this record came from