{"name":"lazaretto","description":"Deterministic pre-install verification for npm packages, AI agent skills and MCP tools. The free lockfile check matches every exactly pinned dependency against OSV and OpenSSF malicious-package advisories with no account. A paid scan adds behavioral analysis with file-and-line evidence.","version":"1.0.0-base","provider":"Meridian Bridge Advisors LLC d/b/a Lazaretto","homepage":"https://lazaretto.dev","endpoints":{"scan":"POST /v1/scan","scan_batch":"POST /v1/scan/batch","lockfile":"POST /v1/lockfile","check":"POST /check","known_bad":"GET /v1/known-bad/{sha256}","trial":"POST /v1/trial","rules":"GET /v1/rules","health":"GET /v1/health","mcp":"POST /mcp"},"mcp":{"transport":"streamable-http","url":"https://lazaretto.dev/mcp","tools":["known_bad_lookup","check_lockfile","scan_artifact","scan_lockfile_deep","scan_mcp_server","check_mcp_tools","find_attestation","verify_attestation","get_free_key"]},"free":{"lockfile_check":"POST https://lazaretto.dev/v1/lockfile","detail":"Check every pinned dependency in a lockfile against known-malicious package advisories. No key, no payment.","one_liner":"curl -s https://lazaretto.dev/check --data-binary @package-lock.json","trial":"POST https://lazaretto.dev/v1/trial for a free key with a daily allowance."},"paid":{"per_artifact":{"endpoint":"POST https://lazaretto.dev/v1/scan","price_usdc":"0.03","detail":"Behavioral scan of one artifact with file-and-line evidence."},"whole_tree":{"endpoint":"POST https://lazaretto.dev/v1/scan/batch","mcp_tool":"scan_lockfile_deep","pricing":"one credit per package that returns a verdict, nothing for one that errors","max_packages_per_call":25,"detail":"Behavioral scan of every pinned dependency in a lockfile, worst verdict first."},"credits":{"endpoint":"POST https://lazaretto.dev/v1/credits/topup","bundles":{"starter":"$3 = 150 scans ($0.020/scan)","pro":"$12 = 700 scans ($0.017/scan)","scale":"$25 = 1600 scans ($0.016/scan)"}},"x402":{"detail":"Pay per call with a wallet, no account: the 402 carries the challenge.","network":"base"}},"auth":["X-API-Key","x402"],"documentation":{"terms":"https://lazaretto.dev/terms","privacy":"https://lazaretto.dev/privacy","disclaimer":"https://lazaretto.dev/disclaimer","api":"https://lazaretto.dev/docs/api","llms_txt":"https://lazaretto.dev/llms.txt","llms_full_txt":"https://lazaretto.dev/llms-full.txt","agents":"https://lazaretto.dev/agents","developers":"https://lazaretto.dev/developers","evidence":"https://lazaretto.dev/caught","rules":"https://lazaretto.dev/v1/rules","security_txt":"https://lazaretto.dev/.well-known/security.txt"},"payments":{"protocol":"x402","network":"base","caip2":"eip155:8453","x402Versions":[2,1],"discovery":"/.well-known/x402"},"openapi":"https://lazaretto.dev/openapi.json"}