MCP QUEEN
io.github.jamesdfinance-dev/lazaretto A
Verify a skill, tool, or package for malicious behavior before your agent installs it. Hosted.
AI & Agentsv1.0.0streamable-httplazaretto.dev repository
Grade evidence — probed 2026-07-16 20:01 UTC
| Criterion | Points | Observed |
|---|---|---|
| reachability | 25 / 25 | HTTP 200, initialize accepted in 446ms |
| protocol | 15 / 15 | valid JSON-RPC initialize result, protocolVersion 2025-06-18, serverInfo lazaretto@1.0.0 |
| tooling | 35 / 35 | tools/list OK: 2 tools e.g. "known_bad_lookup"; 2/2 described, 2/2 fully-typed schemas, median description 505 chars |
| latency | 10 / 10 | initialize round-trip 446ms |
| provenance | 15 / 15 | description present; repository linked; version 1.0.0; namespace io.github.jamesdfinance-dev matches endpoint/repo |
Score 100/100 · latency 446ms · 2 tools · protocol access: open ⓘ
Trust receipt
Security, data integrity, citation quality, and advertised claims are measured separately from protocol uptime. Missing evidence is marked unverified, never converted into a pass.
| Dimension | Metric | Status | Evidence | Source |
|---|---|---|---|---|
| security | sensitive_capabilities_declared | concern | 1 discovered tool(s) advertise potentially state-changing or privileged capabilities. Tool names: scan_artifact. Classification is description-based and does not prove exploitability. Observed value: scan_artifact Sample: n=1 | live_probe |
| security | authentication_boundary | observed | Live protocol probe observed auth_state=open. This describes discovery/access behavior; it is not by itself a vulnerability finding. Observed value: open | live_probe |
Machine-readable receipt: /api/trust/io.github.jamesdfinance-dev/lazaretto.json
Connect your agent
Claude Code:
claude mcp add --transport http lazaretto https://lazaretto.dev/mcp
Generic MCP client config:
{ "mcpServers": { "lazaretto": { "type": "http", "url": "https://lazaretto.dev/mcp" } } }
MCP Queen is a graded index, not a middleman — your agent connects directly to the server above. Check the grade and evidence first; that's the point.
Share this server: permalink https://mcpqueen.com/s/io.github.jamesdfinance-dev/lazaretto · referral link https://mcpqueen.com/go/io.github.jamesdfinance-dev/lazaretto (counts as “routed via the queen”).
Own this server? Embed your grade badge
Live operational-grade badge, re-probed continuously — not a security or data-quality certification. Put it in your README and link to the complete receipt:
[](https://mcpqueen.com/s/io.github.jamesdfinance-dev/lazaretto)
Think the grade is wrong? Fix the finding the evidence shows, then the next probe cycle picks it up automatically (full cycle ≈ 3 days) — or open a dispute via the MCP endpoint.
Queen Watch
Email alerts when the grade changes or the endpoint stops answering. Double-opt-in, one-click unwatch, free while in beta.
Probe history
| When (UTC) | Grade | Score | Latency |
|---|---|---|---|
| 2026-07-16 20:01 | A | 100 | 446ms |