Agent Tools
Back to directory

Lazaretto

https://lazaretto.dev
● healthy high-volume-production-deployments

Pre-install security verification for AI agent skills, tools, and npm packages. Free, no-key lockfile check: POST a `package-lock.json`, `yarn.lock`, or `pnpm-lock.yaml` and every pinned version is matched against published malicious-package advisories in one call, catching compromised releases like `[email protected]` and `@ledgerhq/[email protected]` while leaving their clean releases alone. Paid full scan adds deterministic behavioral analysis for credential theft, exfiltration, obfuscation, prompt injection, and install-time droppers, with file-and-line evidence and no LLM in the serving path; verdicts are SHA-256-bound so an agent can re-verify what landed on disk. $0.03 USDC on Base (x402) or prepaid bundles down to $0.016/scan. Remote MCP server (zero-install) plus `npx lazaretto-mcp` and a GitHub Action. ([OpenAPI](https://lazaretto.dev/openapi.json) | [Discovery](https://lazaretto.dev/.well-known/x402) | [Agent Card](https://lazaretto.dev/.well-known/agent-card.json) | [MCP](https://github.com/jamesdfinance-dev/lazaretto-mcp))

Category
high-volume-production-deployments
Chains
—
Price
—

Quality grade

How grading works
B 62.4 / 100
Availability 40.0 / 40
Endpoint responded (HTTP 200)
Payability 16.7 / 20
  • ✓ Answers a real HTTP 402 challenge
  • ✗ Publishes a /.well-known/x402 descriptor
  • ✓ Payment address on record
  • ✓ Settlement network declared
  • ✓ Price declared
Demand 5.7 / 40
1 distinct payers, 7 USDC transfers in the last 30 days
Owner verified 0.0 / 3
Nobody has claimed this listing yet
Endpoint last checked 6 h ago. On-chain activity last read 11 d ago. Availability and on-chain demand are both re-probed daily; the grade updates automatically on the next pass.

How to call

cURL · x402-fetch / x402-axios will auto-handle 402
curl -X POST https://lazaretto.dev

Listed in

Directories this entry was found in.

awesome-x402