lazaretto
io.github.jamesdfinance-dev/lazaretto
Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
Description as published in the official MCP registry.
Answers the MCP handshake; tool list not available without sign-in. Checked 2026-10-04.
What we measured
| Endpoint | https://lazaretto.dev/mcp | registry |
|---|---|---|
| Handshake | Answers the MCP handshake; tool list not available without sign-in (11,057 ms) | our check, 2026-10-04 |
| Protocol version | 2025-06-18 | our check, 2026-10-04 |
| GitHub stars | 0 | github.com/jamesdfinance-dev/lazaretto-mcp |
| Last push | 2026-09-22 | GitHub API |
| Licence | MIT | GitHub API |
| Registry version | 1.3.0 · active · updated 2026-09-22 | registry |
| Package | npm: lazaretto-mcp | registry |
Signed reports
No signed reports yet. A report carries a signed decision record from the reporter's gate, so it shows a real call went through, not just an opinion. How to file one.
Connect
claude mcp add --transport http lazaretto https://lazaretto.dev/mcpnpx -y lazaretto-mcpCommands are built from the registry entry. Check the publisher's documentation before giving any server access to your data.
Badge for your README
Shows the result of our latest check and links back to this page.
[](https://openforallofus.com/tools/io.github.jamesdfinance-dev/lazaretto)Agents can read this page as data: MCP endpoint https://openforallofus.com/api/mcp, tool get_tool with name io.github.jamesdfinance-dev/lazaretto.