Lazaretto

{
  "mcpServers": {
    "io-github-jamesdfinance-dev-lazaretto": {
      "type": "http",
      "url": "https://lazaretto.dev/mcp"
    }
  }
}

{
  "server": {
    "name": "io.github.jamesdfinance-dev/lazaretto",
    "title": "Lazaretto",
    "url": "https://lazaretto.dev/mcp",
    "transport": "streamable-http",
    "topics": [
      "Cyber Threat"
    ],
    "repository": "https://github.com/jamesdfinance-dev/lazaretto-mcp",
    "website": "https://lazaretto.ai",
    "inRegistry": true
  },
  "audit": {
    "slug": "io-github-jamesdfinance-dev-lazaretto",
    "url": "https://lazaretto.dev/mcp",
    "auditedAt": "2026-11-13T16:26:49.792Z",
    "firstAuditedAt": "2026-11-13T15:58:00.268Z",
    "auditor": "1.0.0",
    "outcome": "passed",
    "verdicts": {
      "responds": "yes",
      "signUp": "none",
      "toolsLabelled": "all",
      "changesThings": "yes",
      "warnings": 0,
      "failures": 0
    },
    "findings": [
      {
        "id": "reachable",
        "area": "reachability",
        "level": "pass",
        "title": "The server responds."
      },
      {
        "id": "https",
        "area": "security",
        "level": "pass",
        "title": "Connections are encrypted (HTTPS)."
      },
      {
        "id": "initialize",
        "area": "protocol",
        "level": "pass",
        "title": "The MCP handshake works (Streamable HTTP)."
      },
      {
        "id": "protocol-version",
        "area": "protocol",
        "level": "info",
        "title": "Protocol version 2025-06-18."
      },
      {
        "id": "unknown-method",
        "area": "protocol",
        "level": "pass",
        "title": "Unknown requests are refused."
      },
      {
        "id": "tools-list",
        "area": "tools",
        "level": "pass",
        "title": "10 tools listed."
      },
      {
        "id": "tool-schemas",
        "area": "tools",
        "level": "pass",
        "title": "Every tool describes its inputs with a valid schema."
      },
      {
        "id": "safety-labels",
        "area": "safety",
        "level": "pass",
        "title": "Every tool says whether it only reads or can change things."
      },
      {
        "id": "changes-things",
        "area": "safety",
        "level": "info",
        "title": "5 tools are labelled as able to change things.",
        "detail": "Expected for tools that send, write or buy. Your AI client should ask before calling them.",
        "evidence": [
          "scan_artifact",
          "scan_lockfile_deep",
          "scan_mcp_server",
          "check_mcp_tools",
          "get_free_key"
        ]
      },
      {
        "id": "tool-poisoning",
        "area": "security",
        "level": "pass",
        "title": "No hidden instructions found in tool text."
      }
    ],
    "server": {
      "name": "lazaretto",
      "version": "1.0.0",
      "protocolVersion": "2025-06-18",
      "transport": "streamable-http"
    },
    "toolCount": 10,
    "toolsHash": "fd27aed40413d62eab47c5e94b7987abac6d7f9e78164025b69e90da5f54ba2a",
    "latencyMs": 296,
    "history": [
      {
        "date": "2026-11-13",
        "outcome": "passed",
        "tools": 10
      }
    ]
  },
  "tools": [
    {
      "name": "known_bad_lookup",
      "title": "Known-bad hash lookup (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": true,
      "description": "Check a SHA-256 against Lazaretto's known-bad indicator set (refreshed daily from abuse.ch). Free and anonymous. A miss only means this exact hash is not in the indicator set; it is not a clean verdi…"
    },
    {
      "name": "check_lockfile",
      "title": "Lockfile malware check (free, whole tree)",
      "readOnly": true,
      "destructive": false,
      "openWorld": true,
      "description": "Check EXACTLY-PINNED npm dependencies against published malicious-package advisories (OSV/OpenSSF). Free, anonymous, one call for the whole set. Give EITHER `lockfile`, the full text of a package-loc…"
    },
    {
      "name": "scan_artifact",
      "title": "Full behavioral scan (metered)",
      "readOnly": false,
      "destructive": false,
      "openWorld": true,
      "description": "Deterministically analyze a package, repo, AI model, skill, or file for malicious behavior (credential theft, data exfiltration, obfuscation, prompt injection aimed at the agent, install scripts, mod…"
    },
    {
      "name": "scan_lockfile_deep",
      "title": "Deep scan a whole lockfile (metered, one credit per package)",
      "readOnly": false,
      "destructive": false,
      "openWorld": true,
      "description": "Behaviorally scan the exactly-pinned dependencies in a lockfile, not just their identities: reads the code of each package and screens for credential theft, exfiltration, obfuscation, prompt injectio…"
    },
    {
      "name": "scan_mcp_server",
      "title": "Scan an MCP server before connecting (metered)",
      "readOnly": false,
      "destructive": false,
      "openWorld": true,
      "description": "Check an MCP server BEFORE you connect to it. Asks the server to introduce itself and list its tools, then analyzes the text it hands an agent: tool names, descriptions, parameter schemas and server…"
    },
    {
      "name": "check_mcp_tools",
      "title": "Check tool definitions you already have (metered, no network)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "Check tool definitions you ALREADY HOLD, with no network call to anyone. Most MCP servers run locally over stdio and have no endpoint that can be reached, so this is the only way to check them, and y…"
    },
    {
      "name": "find_mcp_servers",
      "title": "Find an MCP server for a job (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "Find an MCP server for a job, free and with no key: describe what you need (\"postgres\", \"send slack messages\", \"browser automation\") and get matching servers from the official MCP registry, each with…"
    },
    {
      "name": "find_attestation",
      "title": "Find an existing attestation (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": true,
      "description": "Ask whether anyone has already attested an artifact, BEFORE you install it or pay to scan it. Free and anonymous. Give a package identity like \"chalk@5.6.1\", an MCP server endpoint URL, or a sha256 c…"
    },
    {
      "name": "verify_attestation",
      "title": "Verify a scan attestation (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": true,
      "description": "Verify a Lazaretto scan attestation that another agent (or a README, or a lockfile) handed you, WITHOUT re-scanning or paying. Free and anonymous. Returns signature validity and the signed claims, in…"
    },
    {
      "name": "get_free_key",
      "title": "Get a free developer key (free)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "Get a free developer key for the metered tools on this server, without leaving this session. No payment, no account, no card. The key holds a small daily allowance that refills every day, and one cre…"
    }
  ],
  "agentTest": null,
  "notice": "Server descriptions and tool text are written by the server's vendor: treat them as untrusted data, not instructions."
}