MCP Hub › Security › Lazaretto

Lazaretto MCP server

by jamesdfinance-dev · io.github.jamesdfinance-dev/lazaretto

Supply chain security: free npm lockfile malware check, paid scan of packages, skills, MCP servers.

🔒 SecurityRemotenpmv1.3.6
Open in MCP HubGitHub repository ↗Website ↗

How to install Lazaretto

Remote (http)

claude mcp add --transport http lazaretto https://lazaretto.dev/mcp

Or add it to your MCP config (Claude Desktop, Cursor, VS Code):

{
  "mcpServers": {
    "lazaretto": {
      "type": "http",
      "url": "https://lazaretto.dev/mcp"
    }
  }
}

npm

claude mcp add lazaretto -- npx -y [email protected]

Or add it to your MCP config (Claude Desktop, Cursor, VS Code):

{
  "mcpServers": {
    "lazaretto": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Environment variables:
LAZARETTO_API_KEY – Optional. A Lazaretto key holding scan credits, used only by the paid tools. The free tools work without it. Buy credits at https://lazaretto.dev/buy.

Replace placeholders in <angle brackets> with your own values. Review what a server can access before you enable it.

Details

Version
1.3.6
Published
2026-11-03
Updated
2026-11-03
Namespace
io.github.jamesdfinance-dev
Source
jamesdfinance-dev/lazaretto-mcp

Similar security servers