Lazaretto

lazaretto.dev · 1 paid endpoint · listed 2026-10-27

Pre-install scan of an npm or PyPI package, GitHub repo, raw URL, ClawHub skill, MCP server or tool list, or inline content. Matches OSV and OpenSSF malicious-package advisories, then behavioral analysis for credential theft, exfiltration, obfuscation, prompt injection, install-time droppers and MCP tool poisoning. Returns a verdict, file-and-line evidence, a SHA-256 of the input and an Ed25519-signed attestation that verifies offline. No LLM in the scan path; a scan that errors is not charged.

livelast check 38 h ago
100%valid x402 answers, 72 h
$0.00USDC received on Base, 7 days
0distinct payers, 7 days
50.0score (0-100)

Paid endpoints

MethodEndpointPriceNetworks
POSTlazaretto.dev/v1/scan
Pre-install scan of an npm or PyPI package, GitHub repo, raw URL, ClawHub skill, MCP server or tool list, or inline content. Matches OSV and OpenSSF malicious-p		$0.03Base

Latest checks

WhenEndpointHTTPmsResult
38 h agolazaretto.dev/v1/scan402275valid x402 v2 terms
7 days agolazaretto.dev/v1/scan402237valid x402 v2 terms

Income on Base (7 days)

DayTransfersUSDC
No USDC received on Base in the last 7 days (or the payout address is on another network).

Is this your API?

Add the live badge to your docs: 
<a href="https://logicnodes.io/observatory/p/lazaretto.dev"><img src="https://logicnodes.io/observatory/badge/lazaretto.dev.svg" alt="x402 status"></a>
x402 status badge
Claim it for free with x402_provider_claim (sign with your payout address), and get an alert within minutes when it stops answering with x402_monitor_create ($5 for 30 days). Both work over MCP (https://logicnodes.io/mcp/v2) or POST https://logicnodes.io/v1/tools/<tool>.

Income is all USDC received by the provider's payout address on Base, whatever the source. Score: 0-100: 50 x share of checks in the last 72 h that returned valid x402 payment terms + 30 x min(1, log10(1 + USDC received in 7 days) / 4) + 20 x min(1, log10(1 + distinct payers in 7 days) / 3). A provider never checked scores on income only; income is all USDC received by its payout address on Base, whatever the source. JSON: /v1/observatory/providers/lazaretto.dev