Direct MCP candidate from ai_catalog
direct:lazaretto.dev:109e3ae5feDeclared as an MCP endpoint by ai_catalog; probed directly.
Score: 100/100
Handshake verified by our own probe.
Tools · 7
Check a SHA-256 against Lazaretto's known-bad indicator set (refreshed daily from abuse.ch). Use it when the user has a file hash and wants to know whether it is a known malware sample. A miss only me…
Check EXACTLY-PINNED npm dependencies against published malicious-package advisories (OSV/OpenSSF). One call covers the whole set. Give EITHER `lockfile`, the full text of a package-lock.json, yarn.lo…
Check an MCP server BEFORE you connect to it. Asks the server to introduce itself and list its tools, then analyzes the text it hands an agent: tool names, descriptions, parameter schemas and server i…
Check tool definitions you ALREADY HOLD, with no network call to anyone. Most MCP servers run locally over stdio and have no endpoint that can be reached, so this is the only way to check them, and yo…
Find a remote MCP server for a job: describe what is needed ("postgres", "send slack messages", "browser automation") and get matching servers from the official MCP registry, each with its endpoint, i…
Ask whether anyone has already attested an artifact, before installing it. Give a package identity like "chalk@5.6.1", an MCP server endpoint URL, or a sha256 content hash. Returns the signed verdict …
Verify a Lazaretto scan attestation that another agent (or a README, or a lockfile) handed you, without re-scanning it. Returns signature validity and the signed claims, including verdict, risk and su…
How to use
Claude Desktop or claude.ai: add a custom connector (Customize → Connectors; on Team and Enterprise plans an owner adds it under Organization settings → Connectors) with this server URL: https://lazaretto.dev/mcp/connector
Cursor or Cline: add to your MCP config:
{
"mcpServers": {
"direct_mcp_candidate_from_ai_catalog": {
"url": "https://lazaretto.dev/mcp/connector",
"transport": "streamable-http"
}
}
}