{"slug":"io-github-jamesdfinance-dev-lazaretto-b8976bba","name":"Lazaretto","summary":"Supply chain security: free npm lockfile malware check, paid scan of packages, skills, MCP servers.","status":"live","headings":[{"slug":"security","title":"Security & risk checks"}],"indexable":true,"listed_since":"2026-10-25T17:51:54.594916Z","sources":[{"source":"mcp_registry","external_id":"io.github.jamesdfinance-dev/lazaretto","owner_address":null,"seen_at":"2026-11-03T21:19:46.542830Z","removed_at":null}],"endpoints":[{"url":"https://lazaretto.dev/mcp","host":"lazaretto.dev","protocol":"mcp","state":"live","last_probe_at":"2026-11-13T17:30:59.383911Z","last_ok_at":"2026-11-13T17:30:59.383911Z","tools_count":10,"tools_changed_at":"2026-11-02T06:37:26.272809Z","uptime_24h":1.0,"uptime_30d":1.0},{"url":"https://lazaretto.ai/","host":"lazaretto.ai","protocol":"web","state":"live","last_probe_at":"2026-11-13T15:33:13.173172Z","last_ok_at":"2026-11-13T15:33:13.173172Z","tools_count":null,"tools_changed_at":null,"uptime_24h":1.0,"uptime_30d":1.0}],"also_listed_as":[],"payment_options":[],"usage":null,"assessment":{"method":"2026.11.4","checks":[{"id":"answers","state":"pass","reason":"Answered a check 1 hours ago."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 18 days; 30 are needed."},{"id":"real_customers","state":"not_applicable","reason":"It does not sell over x402."},{"id":"clean_scan","state":"pass","reason":"None of the patterns addrbook looks for (hidden instructions, invisible characters) appeared in the 10 tools this server showed it."}],"passed":2,"applicable":4,"contradicted":false,"computed_at":"2026-11-13T00:32:52.684799Z"},"identity":{"endpoint_domains":["lazaretto.ai","lazaretto.dev"],"proven_domains":[],"proven_wallets":[],"namesakes":[{"slug":"lazaretto-46a861cd","name":"Lazaretto","proven_domain":null},{"slug":"lazaretto-3c3c4085","name":"Lazaretto","proven_domain":null}],"namesake_count":2,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":{"endpoint_url":"https://lazaretto.dev/mcp","tools":10,"high":0,"medium":2,"findings":[{"code":"unusual_wording","severity":"medium","tool":"check_mcp_tools","detail":"its description says “private key”"},{"code":"unusual_wording","severity":"medium","tool":"scan_mcp_server","detail":"its description says “private key”"}],"observed_at":"2026-10-30T22:33:57.337195Z","evidence_id":1294148},"notice":"Not affiliated with addrbook — claim or request removal."}