mcpbeat

Lazaretto MCP Server

io.github.jamesdfinance-dev/lazaretto
answering

Lazaretto is answering right now. Last checked 15 min ago. It exposes 3 tools. Last commit 23 Jul 2026.

Verify a skill, tool, or package for malicious behavior before your agent installs it. Hosted.

Uptime history 39 hours of history
39 hours agonow
100.0%
Uptime 24h
91 of 91 checks
3
Tools
read from the server
361 ms
Response time
average over 24h
0
Stars
last commit 23 Jul 2026

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 15 min ago.

run in your terminal
claude mcp add lazaretto --transport http https://lazaretto.dev/mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "lazaretto": {
      "url": "https://lazaretto.dev/mcp"
    }
  }
}
~/.codex/config.toml
[mcp_servers.lazaretto]
url = "https://lazaretto.dev/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "lazaretto": {
      "url": "https://lazaretto.dev/mcp"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "lazaretto": {
      "url": "https://lazaretto.dev/mcp"
    }
  }
}

Available tools 3

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

known
known_bad_lookup
Check a SHA-256 against Lazaretto's known-bad indicator set (refreshed daily from abuse.ch). Free and anonymous. A miss only means this exact hash is not in the indicator set; it is not a clean verdict on the artifact.
lockfile
check_lockfile
Check every EXACTLY-PINNED dependency in a lockfile against published malicious-package advisories (OSV/OpenSSF). Free, anonymous, one call for the whole tree. Accepts the contents of a package-lock.json, yarn.lock, or pnpm-lock.yaml. Only exact versions can be answered: a range like ^5.0.0 has no definitive answer because a compromised release usually sits between clean ones. Fail-closed: anything that could not be checked is returned in `unverified`, so an empty `malicious` list is an all-clear only when `unverified` is empty too.
scan
scan_artifact
Deterministically analyze a package, repo, skill, or file for malicious behavior (credential theft, data exfiltration, obfuscation, prompt injection aimed at the agent, install scripts) and return a verdict (malicious, flagged, clear, error) with the exact evidence and a hash of what was scanned. Requires prepaid credits presented as an X-API-Key request header; consumes one credit per successful scan. Buy credits at POST https://lazaretto.dev/v1/credits/topup. For a free check, use known_bad_lookup.

Endpoints

URLTransportStateLatencyChecked
https://lazaretto.dev/mcp streamable-http answering 468 ms 15 min ago

Lazaretto — questions

Answers built from our own checks of this server.

What can Lazaretto do?
It exposes 3 tools, read directly from the server on our last check. Among them: check_lockfile, known_bad_lookup, scan_artifact. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is Lazaretto working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 361 ms. The bar chart above shows every period we have measured.
How do I connect Lazaretto?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Lazaretto need an API key?
No. Lazaretto completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 3 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Lazaretto?
It answers our handshake in 361 ms on average, which is faster than 38% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is Lazaretto open source?
Yes — it is published under the MIT licence, written in JavaScript, 0 stars on GitHub and 1 open issue. The source link is on this page, so you can read exactly what it does with your data before you connect it.