Marketplace · API · x402

lazaretto.dev/v1/scan

Supply chain security scan of an npm or PyPI package, GitHub repo, raw URL, ClawHub skill or MCP server. Use it when an agent is about to install, clone or connect to something. Matches the target against OSV and OpenSSF advisories to catch known malware, then behavioral analysis for credential theft, exfiltration, obfuscation, prompt injection, install-time droppers and tool poisoning. Returns a verdict, file-and-line evidence, a SHA-256 and a signed attestation. An errored scan is free.

Endpointhttps://lazaretto.dev/v1/scan
Trust100% uptime over 1 checks · ~809 ms
PricingPay per call with x402, no account. Call it to get an exact quote before paying.
networkeip155:8453
schemeexact
pay to0x428df107e32E08288fcAC6567f4F40bc4eAB4Da0
methodPOST
last updated2026-11-12T16:33:58.48Z

Use it

Call it (an x402 client pays automatically)

curl -i https://lazaretto.dev/v1/scan
# 402 reply -> sign PAYMENT-REQUIRED with an x402 client (e.g. @x402/fetch) -> retry with PAYMENT-SIGNATURE

This listing as JSON

curl https://aipaygen.com/v1/catalog/api/x402-03c1dd8b3a4bf1f2

Search the whole marketplace from your agent (MCP)

{
  "mcpServers": {
    "aipaygen": {
      "url": "https://aipaygen.com/mcp"
    }
  }
}