HomeSecurity › lazaretto-mcp

lazaretto-mcp

Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.

TypeScript CloudLocal Remote
★ 0 stars Last pushed 2026-09-22 License: MIT

Topics: Security

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Remote (streamable-http)

https://lazaretto.dev/mcp Reachable (checked 2026-09-24)

Claude Code:

claude mcp add --transport http lazaretto-mcp https://lazaretto.dev/mcp --header "X-API-Key: <YOUR_VALUE>"

Or add to your MCP client config:

{
  "mcpServers": {
    "lazaretto-mcp": {
      "url": "https://lazaretto.dev/mcp",
      "headers": {
        "X-API-Key": "<YOUR_VALUE>"
      }
    }
  }
}
  • X-API-Key secret — Optional. A Lazaretto key holding scan credits, used only by the paid tools. The free tools work without it. Buy credits at https://lazaretto.dev/buy.

Package (npm 0.6.0)

npx -y [email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "lazaretto-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "LAZARETTO_API_KEY": "<YOUR_VALUE>"
      }
    }
  }
}
  • LAZARETTO_API_KEY secret — Optional. A Lazaretto key holding scan credits, used only by the paid tools. The free tools work without it. Buy credits at https://lazaretto.dev/buy.

Related servers

Listed in punkpeye/awesome-mcp-servers (MIT)

Data from the Official MCP Registry