exa
exa is grade A with no findings: 39 rules ran across 9 surfaces and 2 tools, and nothing matched. 7 requests made. 0 penalty points — the scale counts problems, so zero is the best possible result.
What we found
Nothing matched. That is a statement about what could be seen, listed below — not a guarantee this server is clean.
What we tested
server_instructions
text the server sends at connect, before any tool is called
3 items checked · nothing matched
exa-search-serverExahttps://exa.ai
tool_name
the names of the tools
2 items checked · nothing matched
web_search_exaweb_fetch_exa
tool_description
what each tool says it does
2 items checked · nothing matched
tools/web_search_exa.descriptiontools/web_fetch_exa.descriptiontool_input_schema
the descriptions on each tool’s input fields
5 items checked · nothing matched
tools/web_search_exa.inputSchema.properties.query.descriptiontools/web_search_exa.inputSchema.properties.numResults.descriptiontools/web_search_exa.inputSchema.properties.objective.descriptiontools/web_fetch_exa.inputSchema.properties.urls.descriptiontools/web_fetch_exa.inputSchema.properties.maxCharacters.descriptionprompt_description
the descriptions of the server’s prompts
1 item checked · nothing matched
Get help with web search using Exa
prompt_message
the text inside those prompts
1 item checked · nothing matched
prompts/web_search_help -> messages[0].content.textresource_description
the descriptions of the server’s resources
1 item checked · nothing matched
List of available Exa tools and their descriptions
resource_contents
the contents of those resources
1 item checked · nothing matched
resources/exa://tools/list -> contents[0].textAI read: claude-opus-5 examined 17 of 17 pieces of text, nothing to add.
Tested and not found: Concealment · Consent bypass · Persona / role override · Model-directed imperative · Result-as-instruction · Promotional · Upgrade / pricing URL · Structural signal
Details & raw data
mcp-audit scan-file data/snapshots/exa/2026-09-18T00-10-04Z/manifest.json
data/snapshots/exa/2026-09-18T00-10-04Z/manifest.json- findings.json — every published entry, machine-readable
| Manifest hash | sha256:385959804b07d333a0185b7284472ca6e9ede96b6356bfcfd7b86626709678ef |
|---|---|
| Ruleset hash | sha256:d26757507f22c9f8c437d7428a5ed19a46c3783c46f9ceb158b58a053eab1397 |
| Scanner | 0.1.0 |
| Scanned at | 2026-09-18T00:10:28.494Z |
Not covered: NON-DETERMINISTIC: two identical calls to "web_fetch_exa" returned different text. Content that changes between identical requests is a signal worth reading the snapshots for. SESSION-DEPENDENT: "web_search_exa" returned different text when the identical call was repeated later in the same session. Content that changes with session state, rather than with the request, is worth reading the snapshots for.