The MCP server io.github.jamesdfinance-dev/lazaretto verifies a skill, tool, or package for malicious behavior before your agent installs it. Hosted to support Model Context Protocol operations and security reviews within MCP workflows.

🛠️ Key Features

Malicious behavior verification for skills, tools, and packages
Hosted MCP server that integrates with agent installation pipelines
Grounded in MCP concepts: model context, safety checks, and supply-chain awareness
Focused on security, malware-detection, and risk mitigation

🚀 Use Cases

Pre-install scanning of third-party components in agent workflows
Integration point for MCP-based security checks during tool/toolkit adoption
Review of packages for malware before model-context-driven execution

⚡ Developer Benefits

Clear, protocol-aligned server for MCP implementations
Reusable component for security-focused model-context validation
Lightweight, hosted solution suitable for integration into CI/CD

⚠️ Limitations

Descriptive data primarily covers verification scope; operational specifics may vary by environment
Details on performance, latency, and scalability are not provided in the source material

lazaretto-mcp

An MCP server that lets an agent verify a skill, tool, or package before it installs it. It is a thin front end for the Lazaretto API. It ships no detection logic and does nothing but make HTTPS requests, so it is easy to audit.

Tools

known_bad_lookup: free, no key. Is a sha256 content hash a known-bad artifact? Exact-hash match against an indicator store refreshed daily.
scan_artifact: fetches a target (npm package, GitHub repo, ClawHub skill, raw URL, or inline text) without running it and returns a deterministic verdict (malicious, flagged, clear, error) with evidence. A full scan needs prepaid credits (set an X-API-Key header). Buy them at https://lazaretto.dev/#pricing.

Reports are signals with evidence, not a warranty. clear means no known-bad match and no rule fired. It is not a statement about risk.

Use it (hosted, zero install)

The server is hosted at https://lazaretto.dev/mcp. Add it to any MCP client that supports remote (Streamable HTTP) servers. Nothing to install, no local process.

json

{
  "mcpServers": {
    "lazaretto": {
      "url": "https://lazaretto.dev/mcp",
      "headers": {
        "X-API-Key": "your-prepaid-key (optional; known_bad_lookup is free)"
      }
    }
  }
}

known_bad_lookup works with no key. scan_artifact needs credits: buy a bundle at https://lazaretto.dev/#pricing (an agent can also do this itself over x402 at POST https://lazaretto.dev/v1/credits/topup).

Self-host the stdio server (optional)

If you would rather run it locally over stdio instead of the hosted URL:

bash

git clone https://github.com/jamesdfinance-dev/lazaretto-mcp
cd lazaretto-mcp && npm install
LAZARETTO_API_KEY=your-key node index.mjs

LAZARETTO_BASE_URL overrides the API host (default https://lazaretto.dev).

License

MIT. The Lazaretto service and its detection engine are separate and proprietary.

type	string	required	What kind of artifact ref points at.
ref	string	optional	The locator: an npm spec (name@version), a GitHub repo URL, a ClawHub skill id, or a raw file URL. Omit for type=inline.
content	string	optional	Raw file content, required when type=inline.
depth	string	optional	lookup = known-bad match only; full = full behavioral analysis.

Lazaretto

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

Topics

known_bad_lookup

scan_artifact

lazaretto-mcp

Tools

Use it (hosted, zero install)

Self-host the stdio server (optional)

License

Install

Remote endpoint