Registry/Exa MCP Server

Exa MCP Server

v0.1.8
Verified

Exa AI search integration. WARNING: Information disclosure - API responses may contain cached data from other users.

By Exa LabsMIT
typescript
ai ml
1.4Kstars
35.0Kdownloads
195forks
Scanned Feb 8, 2026
WebsiteRepositoryNPM
D45%
Scanned 3w ago

Poor Security

Vulnerabilities Found
2Crit
2High
3Med
3Low
4Info

Security ScoreD

45
out of 100

Vulnerabilities Found

2
Crit
2
High
3
Medi
3
Low
4
Info
Last scanned: 2/8/2026

Quality ScoreD

62
out of 100
62
Maint.
63
Popular
67
Docs
65
Compat
Maintenance62%
Popularity63%
Documentation67%
Compatibility65%

Maintenance62

Recent
12 days ago
Commit Frequency59%
Release Frequency49%
Issue Response56%

Popularity63

1.4K
Stars
35.0K
Downloads
195
Forks
Stars Score57%
Downloads Score67%
Forks Score59%

Documentation67

README Quality81%

Available Documentation

API DocsExamplesChangelog

Compatibility65

MCP Spec Compliance67%
Transport Support50%

Features

TypeScript

Supported Transports

STDIO

Vulnerabilities(14)

2Critical
2High
3Medium
3Low
4Info
Filter:

READMEExa MCP Server

View source

Exa MCP Server

⚠️ SECURITY ISSUE: INFORMATION DISCLOSURE ⚠️

Issue

Shared caching mechanism may return cached search results from other users' queries.

Impact

  • Search queries from other users may be visible
  • Potentially sensitive search results leaked
  • Privacy violation

Technical Details

The server uses a shared Redis cache without proper user isolation. Queries with similar patterns may return cached results from different user sessions.

Mitigation

Disable caching or use per-user cache namespaces.

Status

Issue reported, fix in development.

Embed Security Badge

Add this badge to your README or documentation

Exa MCP Server MCPSafe Security
[![Exa MCP Server MCPSafe Security](https://api.mcpsafe.org
/api/badge/exa-mcp-server-vuln.svg)](https://mcpsafe.org/registry/exa-mcp-server-vuln)
Need more customization options?Badge Documentation

Server Information

Source
NPM
Package
exa-mcp-server
Version
0.1.8
Language
typescript
License
MIT
Transport
STDIO
Added
Jan 20, 2026
Updated
Feb 8, 2026