lazaretto
Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
Install
Remote streamable-http
https://lazaretto.dev/mcpnpmstdio
npx -y lazaretto-mcp Client config (Claude Desktop, Cursor, Windsurf and most MCP clients)
{
"mcpServers": {
"io-github-jamesdfinance-dev-lazaretto": {
"url": "https://lazaretto.dev/mcp"
}
}
}Source: official MCP Registry record · registry name io.github.jamesdfinance-dev/lazaretto · published 2026-08-31 · updated 2026-08-31. Not an endorsement; review the code before connecting it to anything sensitive.