{"name":"lazaretto","description":"Scans skills, tools, and packages for malicious signals before install: known-bad IOC lookup plus deterministic static analysis for credential access, exfiltration, obfuscation, and prompt injection. Signals provider.","version":"0.1.0-phase1-testnet","provider":"Meridian Bridge Advisors LLC d/b/a Lazaretto","homepage":"https://lazaretto.dev","endpoints":{"scan":"POST /v1/scan","known_bad":"GET /v1/known-bad/{sha256}","trial":"POST /v1/trial","rules":"GET /v1/rules","health":"GET /v1/health","mcp":"POST /mcp"},"mcp":{"transport":"streamable-http","url":"https://lazaretto.dev/mcp","tools":["known_bad_lookup","scan_artifact"]},"auth":["X-API-Key","x402"],"documentation":{"terms":"https://lazaretto.dev/terms","privacy":"https://lazaretto.dev/privacy","disclaimer":"https://lazaretto.dev/disclaimer","rules":"https://lazaretto.dev/v1/rules","security_txt":"https://lazaretto.dev/.well-known/security.txt"},"payments":{"protocol":"x402","network":"base","discovery":"/.well-known/x402"},"openapi":"https://lazaretto.dev/openapi.json"}