{
  "x402Version": 2,
  "id": 12389,
  "slug": "12389",
  "resource": "https://lazaretto.dev/v1/scan",
  "description": "Deterministic pre-install verification for npm packages, AI agent skills and MCP tools. Matches the exact version against OSV and OpenSSF malicious-package advisories, then runs behavioral analysis for credential theft, exfiltration, obfuscation, prompt injection and install-time droppers, returning a verdict with file-and-line evidence, a SHA-256 of what was analyzed, and a signed attestation that verifies offline. No LLM in the scan path, so the same input yields the same verdict.",
  "type": "http",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0x428df107e32E08288fcAC6567f4F40bc4eAB4Da0",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "30000",
      "maxTimeoutSeconds": 60
    }
  ],
  "outputSchema": {
    "bazaar": {
      "info": {
        "description": "Deterministic pre-install verification for npm packages, AI agent skills and MCP tools. Matches the exact version against OSV and OpenSSF malicious-package advisories, then runs behavioral analysis for credential theft, exfiltration, obfuscation, prompt injection and install-time droppers, returning a verdict with file-and-line evidence, a SHA-256 of what was analyzed, and a signed attestation that verifies offline. No LLM in the scan path, so the same input yields the same verdict.",
        "input": {
          "body": {
            "depth": "full",
            "target": {
              "ref": "left-pad@1.3.0",
              "type": "npm_package"
            }
          },
          "bodyType": "json",
          "method": "POST",
          "type": "http"
        },
        "name": "Lazaretto pre-install scan",
        "output": {
          "example": {
            "confidence": "high",
            "risk": "none",
            "target_hash": "sha256:aa57b3ac555f3bfe2357e8a2e7ddfaa77934597887502db9ca0e660d388bf85f",
            "verdict": "clear"
          },
          "type": "json"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "body": {
                "properties": {
                  "depth": {
                    "enum": [
                      "lookup",
                      "full"
                    ],
                    "type": "string"
                  },
                  "target": {
                    "properties": {
                      "content": {
                        "type": "string"
                      },
                      "ref": {
                        "type": "string"
                      },
                      "type": {
                        "enum": [
                          "inline",
                          "raw_url",
                          "npm_package",
                          "github_repo",
                          "clawhub_skill"
                        ],
                        "type": "string"
                      }
                    },
                    "required": [
                      "type"
                    ],
                    "type": "object"
                  }
                },
                "required": [
                  "target"
                ]
              },
              "bodyType": {
                "enum": [
                  "json",
                  "form-data",
                  "text"
                ],
                "type": "string"
              },
              "method": {
                "enum": [
                  "POST",
                  "PUT",
                  "PATCH"
                ],
                "type": "string"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method",
              "bodyType",
              "body"
            ],
            "type": "object"
          },
          "output": {
            "properties": {
              "example": {
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "bazaar"
  ],
  "sourceHost": "lazaretto.dev",
  "lastUpdated": "2026-09-17T06:16:11.431Z",
  "quality": {
    "calls30d": 2,
    "uniquePayers30d": 2,
    "lastCalledAt": "2026-09-17T06:16:11.193Z"
  },
  "liveness": {},
  "verified": false,
  "featured": false,
  "provider": {
    "host": "lazaretto.dev",
    "manifest_name": "lazaretto.dev",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-09-18T22:00:31.484Z"
  }
}