Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
Setup
Choose your client, copy the config, then fill in any required environment variables.
Local
claude mcp add lazaretto --env LAZARETTO_API_KEY='<LAZARETTO_API_KEY>' -- npx -y lazaretto-mcp~/.codex/config.toml
[mcp_servers.lazaretto]
command = "npx"
args = ["-y", "lazaretto-mcp"]
env = { LAZARETTO_API_KEY = "<LAZARETTO_API_KEY>" }
# codex mcp add lazaretto --env LAZARETTO_API_KEY='<LAZARETTO_API_KEY>' -- npx -y lazaretto-mcp~/.cursor/mcp.json
{
"mcpServers": {
"lazaretto": {
"command": "npx",
"args": [
"-y",
"lazaretto-mcp"
],
"env": {
"LAZARETTO_API_KEY": "<LAZARETTO_API_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"lazaretto": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"lazaretto-mcp"
],
"env": {
"LAZARETTO_API_KEY": "<LAZARETTO_API_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"lazaretto": {
"command": "npx",
"args": [
"-y",
"lazaretto-mcp"
],
"env": {
"LAZARETTO_API_KEY": "<LAZARETTO_API_KEY>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"lazaretto": {
"command": "npx",
"args": [
"-y",
"lazaretto-mcp"
],
"env": {
"LAZARETTO_API_KEY": "<LAZARETTO_API_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"lazaretto": {
"command": "npx",
"args": [
"-y",
"lazaretto-mcp"
],
"env": {
"LAZARETTO_API_KEY": "<LAZARETTO_API_KEY>"
}
}
}
}Remote
claude mcp add --transport http lazaretto https://lazaretto.dev/mcp --header 'X-API-Key: <X_API_KEY>'~/.codex/config.toml
[mcp_servers.lazaretto]
url = "https://lazaretto.dev/mcp"
http_headers = { X-API-Key = "<X_API_KEY>" }
# codex mcp add lazaretto --url https://lazaretto.dev/mcp~/.cursor/mcp.json
{
"mcpServers": {
"lazaretto": {
"url": "https://lazaretto.dev/mcp",
"headers": {
"X-API-Key": "<X_API_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"lazaretto": {
"type": "http",
"url": "https://lazaretto.dev/mcp",
"headers": {
"X-API-Key": "<X_API_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"lazaretto": {
"httpUrl": "https://lazaretto.dev/mcp",
"headers": {
"X-API-Key": "<X_API_KEY>"
}
}
}
}claude_desktop_config.json · Customize › Connectors › Add custom connector
{
"mcpServers": {
"lazaretto": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://lazaretto.dev/mcp",
"--header",
"X-API-Key:<X_API_KEY>"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"lazaretto": {
"url": "https://lazaretto.dev/mcp",
"headers": {
"X-API-Key": "<X_API_KEY>"
}
}
}
}Environment variables
LAZARETTO_API_KEY
Replace the placeholders with your own credentials and keep them out of version control.