---
bezeichner: "io.github.jamesdfinance-dev/lazaretto"
art: "mcp_server"
slug: "io-github-jamesdfinance-dev-lazaretto"
paketkoordinate: "npm:lazaretto-mcp"
status: "aktiv"
homepage: "https://lazaretto.dev"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.jamesdfinance-dev"
registerseite: "https://tracevero.com/mcp/io-github-jamesdfinance-dev-lazaretto"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: false
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
einsatzgebiet: "sicherheit"
roh_beschreibung: "Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools."
version: "1.3.0"
roh_umgebungsvariablen: "LAZARETTO_API_KEY"
roh_geheime_pflichtvariablen: ""
roh_transportarten: "stdio, streamable-http"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/jamesdfinance-dev/lazaretto-mcp"
roh_paketquellen: "npm"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: "https://lazaretto.dev/mcp"
roh_remote_hosts: "lazaretto.dev"
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-09-22"
roh_aktualisiert_am: "2026-09-22"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket und remote"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "lazaretto-mcp"
roh_paketversionen: "0.6.0"
roh_laufzeithinweise: "npx"
roh_umgebungsformate: ""
roh_umgebungsbeschreibungen: "LAZARETTO_API_KEY=Optional. A Lazaretto key holding scan credits, used only by the paid tools. The free tools work without it. Buy credits at https://lazaretto.dev/buy."
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"lazaretto-mcp\",\"version\":\"0.6.0\",\"runtimeHint\":\"npx\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"LAZARETTO_API_KEY\",\"description\":\"Optional. A Lazaretto key holding scan credits, used only by the paid tools. The free tools work without it. Buy credits at https://lazaretto.dev/buy.\",\"required\":false,\"secret\":true}],\"additional_arguments_declared\":false}],\"remotes\":[{\"url\":\"https://lazaretto.dev/mcp\",\"transport\":\"streamable-http\",\"headers\":[{\"name\":\"X-API-Key\",\"description\":\"Optional. A Lazaretto key holding scan credits, used only by the paid tools. The free tools work without it. Buy credits at https://lazaretto.dev/buy.\",\"required\":false,\"secret\":true}]}]}"
---

# io.github.jamesdfinance-dev/lazaretto

## Measured values

| Property | Value | Source | Collected on | Level of trust | Raw declaration |
| --- | --- | --- | --- | --- | --- |
| Required secrets declared | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: |
| Execution location | lokal | MCP-Register | 2026-08-08T01:17:01.410Z | abgeleitet | roh_transportarten: stdio, streamable-http |
| Path argument present | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/jamesdfinance-dev/lazaretto-mcp |
| Field of use, derived from the vendor description | sicherheit | MCP-Register | 2026-08-26T16:45:01.514Z | abgeleitet | roh_beschreibung: Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools. |
| Description (raw) | Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools. | MCP-Register | 2026-08-31T01:17:02.104Z | selbstauskunft |  |
| Declared version | 1.3.0 | MCP-Register | 2026-09-23T01:17:01.309Z | selbstauskunft |  |
| Environment variables (raw) | LAZARETTO_API_KEY | MCP-Register | 2026-09-23T01:17:01.309Z | selbstauskunft |  |
| Required secret variables (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Transports (raw) | stdio, streamable-http | MCP-Register | 2026-08-08T01:17:01.410Z | selbstauskunft |  |
| Path arguments (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Repository (raw) | https://github.com/jamesdfinance-dev/lazaretto-mcp | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Package registries (raw) | npm | MCP-Register | 2026-08-08T01:17:01.410Z | selbstauskunft |  |
| Required secret headers (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Path environment variables (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote URLs (raw) | https://lazaretto.dev/mcp | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote hosts (raw) | lazaretto.dev | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Registry status message (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| First listed in the registry (raw) | 2026-09-22 | MCP-Register | 2026-09-23T01:17:01.309Z | selbstauskunft |  |
| Last changed in the registry (raw) | 2026-09-22 | MCP-Register | 2026-09-23T01:17:01.309Z | selbstauskunft |  |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Delivery form (raw) | paket und remote | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository subfolder (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package identifiers (raw) | lazaretto-mcp | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package versions (raw) | 0.6.0 | MCP-Register | 2026-09-23T01:17:01.309Z | selbstauskunft |  |
| Runtime hints (raw) | npx | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable formats (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable descriptions (raw) | LAZARETTO_API_KEY=Optional. A Lazaretto key holding scan credits, used only by the paid tools. The free tools work without it. Buy credits at https://lazaretto.dev/buy. | MCP-Register | 2026-09-23T01:17:01.309Z | selbstauskunft |  |
| Icon formats (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"lazaretto-mcp","version":"0.6.0","runtimeHint":"npx","transport":"stdio","environment":[{"name":"LAZARETTO_API_KEY","description":"Optional. A Lazaretto key holding scan credits, used only by the paid tools. The free tools work without it. Buy credits at https://lazaretto.dev/buy.","required":false,"secret":true}],"additional_arguments_declared":false}],"remotes":[{"url":"https://lazaretto.dev/mcp","transport":"streamable-http","headers":[{"name":"X-API-Key","description":"Optional. A Lazaretto key holding scan credits, used only by the paid tools. The free tools work without it. Buy credits at https://lazaretto.dev/buy.","required":false,"secret":true}]}]} | MCP-Register | 2026-09-23T01:17:01.309Z | selbstauskunft |  |

## Links

- Namespace: [[namensraum/io-github-jamesdfinance-dev|io.github.jamesdfinance-dev]]

---

- Registry page: <https://tracevero.com/mcp/io-github-jamesdfinance-dev-lazaretto>
- Retrieved on: 2026-10-11
