Log inSubmit server
Security• MCP Alternatives Guide

Best Alternatives to Lazaretto MCP

Looking for an alternative to Lazaretto MCP? Whether you need a different runtime environment, custom authentication support, or alternative API integrations in the Security ecosystem, we have cataloged and compared the top alternative MCP servers below.

Browse all Security servers →View Lazaretto MCP Specs →
Lazaretto MCP logo
Target Reference Server

Lazaretto MCP Overview

The jamesdfinance-dev/lazaretto-mcp MCP server checks lockfiles, package artifacts, and MCP tool descriptions against Lazaretto's security analysis service. It can run as a hosted Streamable HTTP server or locally over stdio, with free checks requiring no API key and deeper scans using prepaid credits. Lockfile checks cover npm, Yarn, and pnpm formats, while artifact scans return verdicts with file, line, and evidence details. Reach for it before installing dependencies, agent skills, or MCP tools.

Primary Use Cases for Lazaretto MCP:
  • Check pinned dependencies before installing them
  • Scan packages or repositories for suspicious behavior
  • Verify a previously issued Lazaretto attestation
  • Inspect MCP tools for prompt injection or tool poisoning

Specification Matrix: Lazaretto MCP vs Alternatives

Direct comparison of key metrics, runtimes, authentication methods, and community popularity.

Server NameRuntimeAuthPricingGitHub StarsDownloadsAction
Lazaretto MCP logoLazaretto MCP (Target)
npxAPI keyFreemium1—Current
Agent Security Scanner MCP logoAgent Security Scanner MCPnpx——123—
EchelonGraph CVE & Exposure logoEchelonGraph CVE & ExposurenpxNo auth requiredFree20—
Intodns MCP Server logoIntodns MCP ServernpxNo auth requiredFree2—
Shodan logoShodannpxAPI keyBring your own API key (usage-based cost)187—
Dechonet MCP logoDechonet MCPnpxNo auth requiredFree1—
AI Distiller MCP logoAI Distiller MCPnpxNo auth requiredFree172—
MCP Server logoMCP ServernpxAPI keyBring your own API key (usage-based cost)7—
4da MCP Server logo4da MCP ServernpxNo auth requiredFree——
Redact Pdf MCP logoRedact Pdf MCPnpxNo auth required—1—
Qurl MCP logoQurl MCPnpxAPI keyBring your own API key (usage-based cost)4—
AtlaSent MCP Server logoAtlaSent MCP Servernpx—Freemium——
Agent Passport MCP logoAgent Passport MCPnpxNo auth requiredFree4—

Detailed Evaluation of Lazaretto MCP Alternatives

Agent Security Scanner MCP logo

Agent Security Scanner MCP

Runtime: npxSecurity

Scans agent-written code, MCP servers, prompts, actions, and dependencies for security risks and package hallucinations.

Key Features:
Project, file, and Git diff security scans
MCP server, prompt, and agent action checks
AI-suggested package existence verification
3 0 123
EchelonGraph CVE & Exposure logo

EchelonGraph CVE & Exposure

Runtime: npxSecurity

Keyless MCP access to CVE intelligence, KEV, EPSS, SBOM checks, advisories, and Shodan-derived exposure data.

Key Features:
Searches and summarizes fused CVE intelligence
Checks packages, CPE products, SBOMs, and lockfiles
Reports CISA KEV and EPSS history
1 0 20
Intodns MCP Server logo

Intodns MCP Server

Runtime: npxSecurity

Scans DNS, email security, deliverability, web headers, and compliance posture through IntoDNS.ai over MCP.

Key Features:
IntoDNS.ai scans with scores, grades, issues, and recommendations
DNS, DNSSEC, propagation, WHOIS, and TLSA/DANE diagnostics
Email authentication and deliverability analysis
5 0 2
Shodan logo

Shodan

Runtime: npxSecurity

Connects AI agents to Shodan for host reconnaissance, device search, DNS lookups, and CVE intelligence.

Key Features:
IP reconnaissance with ports, banners, TLS, cloud, and CVE data
Shodan device search with pagination and facets
Forward, reverse, and domain DNS intelligence
2 0 187
Dechonet MCP logo

Dechonet MCP

Runtime: npxSecurity

Audits domains through MCP with DNS, TLS, HTTP, email, network, registration, and subnet analysis tools.

Key Features:
DNS, DNSSEC, SPF, and DMARC diagnostics
TLS certificate and HTTP security grading
Email authentication and header analysis
6 0 1
AI Distiller MCP logo

AI Distiller MCP

Runtime: npxSecurity

Distills codebases into compact API context and generates prompts for documentation, refactoring, security, and other AI analyses.

Key Features:
Distills individual files and directories into compact code structure
Filters public APIs, types, imports, documentation, and implementation details
Generates prompts for security, refactoring, bugs, documentation, and performance
4 0 172
MCP Server logo

MCP Server

Runtime: npxSecurity

Query RAD Security for Kubernetes inventory, vulnerabilities, runtime data, findings, and workflow automation through MCP.

Key Features:
Kubernetes cluster, container, and resource inventory
Container image vulnerability and SBOM lookup
Runtime process trees, baselines, and process analysis
3 0 7
4da MCP Server logo

4da MCP Server

Runtime: npxSecurity

Scans dependencies for vulnerabilities, evaluates upgrade safety and impact, and preserves project decisions and agent memory.

Key Features:
OSV.dev vulnerability scanning across supported lockfiles
Release, deprecation, yank, and freshness analysis
Project-aware upgrade impact and planning
0 0
Redact Pdf MCP logo

Redact Pdf MCP

Runtime: npxSecurity

Permanently redacts PII from PDFs and scans with OCR, pseudonymization, batch jobs, and local name restoration.

Key Features:
Permanent PDF and image redaction
OCR for scanned documents
Pseudonymization with consistent tags
1 0 1
Qurl MCP logo

Qurl MCP

Runtime: npxSecurity

Creates and manages expiring qURL access links with policy controls, token rotation, session management, and one-time link delivery.

Key Features:
Policy-bound expiring qURL creation
IP, geo, user-agent, and AI-agent access filters
One-time use and session limits
1 0 4
AtlaSent MCP Server logo

AtlaSent MCP Server

Runtime: npxSecurity

Gates consequential agent actions with policy decisions, single-use permits, approval holds, and execution-time verification.

Key Features:
Execution-time permit evaluation and verification
Human approval waits for held actions
Batch and streaming evaluation for up to 100 actions
2 0
Agent Passport MCP logo

Agent Passport MCP

Runtime: npxSecurity

Issues signed agent passports, scoped delegations, verification records, and coordination workflows through MCP.

Key Features:
Ed25519 agent identity and key rotation
Signed passport issuance and verification
Narrowing-only scoped delegation
5 0 4

Frequently Asked Questions: Lazaretto MCP Alternatives

The top-rated alternatives to Lazaretto MCP in the Security category include Agent Security Scanner MCP, EchelonGraph CVE & Exposure, Intodns MCP Server. These servers offer complementary or alternative capabilities depending on your deployment stack and authentication requirements.

Lazaretto MCP and its alternatives vary by runtime requirement (Node.js/npx, Python/uvx, Docker, or remote HTTP/SSE endpoints). Check the specification comparison table above to verify command requirements before installing.

It varies by server. Pricing, auth and license are declared by each maintainer and shown in the comparison table where provided — a dash means nothing was declared, so check that project's own site before assuming it's free.

Click the "Compare side-by-side →" button on any alternative card to see an in-depth comparison matrix covering feature lists, stars, npm downloads, install configurations, and schema specifications.