lazaretto-mcp

jamesdfinance-dev/lazaretto-mcp

★ 0 stars JavaScript AI/LLM Updated 6d ago

MCP server for Lazaretto: check a lockfile for known-malicious dependencies (free, no key), or scan a skill, tool, or package before an agent installs it.

View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "lazaretto-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "jamesdfinance-dev/lazaretto-mcp"
      ]
    }
  }
}

README Excerpt

Know what a package does before you install it. An [MCP](https://modelcontextprotocol.io) server for Lazaretto: deterministic pre-install verification for npm packages, AI agent skills and MCP tools. The free lockfile check matches every exactly pinned dependency against OSV and OpenSSF malicious-package advisories with no account. A paid scan adds

Tools (1)

check_lockfile

Topics

ai-agentsmalware-detectionmcpmcp-servermodelcontextprotocolsecuritysupply-chain

lazaretto-mcp

Quick Install

README Excerpt

Tools (1)

Topics

Related AI/LLM Servers