INDIVIDUAL MCP TOOL

verify_attestation

Verify a Lazaretto scan attestation that another agent (or a README, or a lockfile) handed you, WITHOUT re-scanning or paying.

lazaretto.devnone authenticationAvailability not checked

LIVE ENDPOINT

https://lazaretto.dev/mcp

No auth detected

Connect to this endpoint to inspect the live schema for verify_attestation and invoke it with your own arguments.

{}

Inferred read-only · medium confidence · heuristic, not a guarantee.

No write-capable action terms were found; this is not proof that invocation has no side effects.

CONNECT WITH APPROVAL

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.lazaretto]
url = "https://lazaretto.dev/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "lazaretto": {
      "type": "http",
      "url": "https://lazaretto.dev/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: lazaretto
Remote MCP URL: https://lazaretto.dev/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "lazaretto": {
      "url": "https://lazaretto.dev/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "lazaretto": {
      "type": "http",
      "url": "https://lazaretto.dev/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "lazaretto",
  "transport": "streamable-http",
  "url": "https://lazaretto.dev/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

known_bad_lookup — Check a SHA-256 against Lazaretto's known-bad indicator set (refreshed daily from abuse.ch).
check_lockfile — Check every EXACTLY-PINNED dependency in a lockfile against published malicious-package advisories (OSV/OpenSSF).
scan_artifact — Deterministically analyze a package, repo, skill, or file for malicious behavior (credential theft, data exfiltration, obfuscation, prompt injection aimed at the agent, install scripts) and return a verdict (malicious, flagged, clear, error) with the exact evidence and a hash of what was scanned.
scan_lockfile_deep — Behaviorally scan EVERY exactly-pinned dependency in a lockfile, not just their identities: reads the code of each package and reports credential theft, exfiltration, obfuscation, prompt injection and install-time droppers with file-and-line evidence.
scan_mcp_server — Check an MCP server BEFORE you connect to it.
check_mcp_tools — Check tool definitions you ALREADY HOLD, with no network call to anyone.
find_attestation — Ask whether anyone has already attested an artifact, BEFORE you install it or pay to scan it.