--- title: "Lazaretto MCP server | Agent MCP Directory" description: "Lazaretto has an open MCP server with 10 tools and no authentication. Endpoint, auth type and tool list, checked by connecting on 4 November 2026." canonical: https://agentmcpdirectory.com/directory/lazaretto-dev site: "Agent MCP Directory" last_updated: 2026-11-05 section: "Directory entries" --- # Lazaretto MCP server | Agent MCP Directory > Lazaretto has an open MCP server with 10 tools and no authentication. Endpoint, auth type and tool list, checked by connecting on 4 November 2026. Source: https://agentmcpdirectory.com/directory/lazaretto-dev Site: Agent MCP Directory Last reviewed: 2026-11-05 # Lazaretto: MCP server, CLI and agent surfaces Yes: Lazaretto runs a public MCP server at lazaretto.dev that listed 10 tools to a client with no credentials on 4 November 2026. Examples: known\_bad\_lookup, check\_lockfile, scan\_artifact. It speaks streamable-http, protocol 2025-06-18. Open servers are readable by any agent; writes still depend on each tool. ## Fact sheet | Company | Lazaretto | | --- | --- | | Domain | lazaretto.dev | | Category | Uncategorised (assigned by this directory from the registry description) | | MCP server | Verified (No authentication) | | Ora score | none: Ora returned no cached score for lazaretto.dev when asked on 5 November 2026 | | Company found through | the GitHub MCP Registry | | Last verified | 4 November 2026 | ## MCP server | Endpoint | https://lazaretto.dev/mcp | | --- | --- | | How it was found | listed in the GitHub MCP Registry | | Transport | streamable-http | | HTTP status | 200 | | Protocol version | 2025-06-18 | | Server | lazaretto 1.0.0 | | Capabilities | tools | | Tools | 10 | | Resources | 0 | | Prompts | 0 | | Connected | 4 November 2026, 20:03 UTC | | Handshake time | 4,254 ms over 1 attempt | ### Tools listed 10 tools - known\_bad\_lookup - check\_lockfile - scan\_artifact - scan\_lockfile\_deep - scan\_mcp\_server - check\_mcp\_tools - find\_mcp\_servers - find\_attestation - verify\_attestation - get\_free\_key ### Connector log 2 connections on 4 November 2026, read-only methods only - 19:58:09Z https://lazaretto.dev/mcp sent initialize, notifications/initialized, tools/list result verified (HTTP 200) 1083 ms - 20:03:31Z https://lazaretto.dev/mcp sent initialize, notifications/initialized, tools/list result verified (HTTP 200) 4254 ms ## Authentication | Auth type | No authentication | | --- | --- | ### The sign-in route, step by step 1. Send the handshake to `https://lazaretto.dev/mcp` over streamable-http. Servers on the 2026-07-28 revision answer `server/discover`; older servers answer `initialize`. 2. Send `tools/list`, then `resources/list` and `prompts/list` if the capabilities name them. 3. Send no token. The connector sent none and the server answered, so any MCP client can read this list. 4. Calling a tool is a separate step this directory never takes. See [OAuth for MCP: client ID metadata documents and dynamic registration](https://agentmcpdirectory.com/guides/oauth-for-mcp-cimd-dcr/) for how each route works. ## CLI No CLI is on record for Lazaretto. The directory checks a package only where a source names one, so this is a floor: a company can ship a command line that no source read for this edition mentions. See [shipping a CLI agents can use](https://agentmcpdirectory.com/guides/ship-a-cli-for-agents/). ## Other agent surfaces | Surface | Result | | --- | --- | | OpenAPI file | Found: lazaretto.dev (JSON, via a direct request). | | WebMCP in the initial HTML | Not checked: the home page was not read by the shared crawl. | | MCP discovery file | Not checked: the domain is not in the shared crawl for this edition. | | A2A agent card | Not checked: the domain is not in the shared crawl for this edition. | | A2A agent card (older path) | Not checked: the domain is not in the shared crawl for this edition. | | agents.json | Not checked: the domain is not in the shared crawl for this edition. | | OAuth authorization server metadata | Not checked: the domain is not in the shared crawl for this edition. | | NLWeb endpoint | Not checked in this edition. | ## Registry listings | Registry | Listed | | --- | --- | | Official MCP Registry | No | | GitHub MCP Registry | Yes | | awesome-remote-mcp-servers | No | | Smithery | Not checked: Smithery's listing pages and search API were unavailable on 4 November 2026. | | Glama | Not checked: Glama's API needs a key and attribution terms. | Edition 4 November 2026 Method [How rows are verified](https://agentmcpdirectory.com/method/) Data [CSV and JSON](https://agentmcpdirectory.com/data/) Markdown [This page as markdown](https://agentmcpdirectory.com/directory/lazaretto-dev/index.md) ## Sources - [Lazaretto website](https://lazaretto.dev), read 4 November 2026 - [Official MCP Registry API, the registry read for this edition](https://registry.modelcontextprotocol.io/v0/servers), read 4 November 2026 Last reviewed 5 November 2026