Exa Search

Official MCP

AI-native search engine providing real-time web information through Exa's Search API

vcommit-reinges-2026-03-01

PDF

Quick Install

smcp run official/exa-search@commit-reinges-2026-03-01

Run securely with mcp hub client The secure MCP runner by mcp-hub

Integrity Verified

Level 0

Basic integrity checks passed. Digest validation and schema validation completed.

MSSS: Level 0 (Not Compliant)

Findings

High

35/100

Global Security Score

Not Recommended for Production

Critical security issues found. This MCP server should not be used in production until remediated.

20 findings

17 high

Vulnerability Summary

Critical

High

Medium

Low

Info

20 total findings detected

High

Medium

Score Breakdown

Security (50% weight) 70

Supply Chain (30% weight) 100

Maturity (20% weight) 100

Global Score (weighted) 35

OWASP MCP Top 10 View full details →

MCP01

Token & Secrets

At Risk

MCP02

Privilege Escalation

Mitigated

MCP03

Tool Poisoning

At Risk

MCP04

Supply Chain

Mitigated

MCP05

Cmd Injection

Mitigated

MCP06

Intent Subversion

At Risk

MCP07

Auth/AuthZ

Mitigated

MCP08

Audit & Telemetry

Mitigated

MCP09

Shadow Servers

Mitigated

MCP10

Context Injection

Mitigated

MSSS Certification Level

MCP Server Security Standard (MSSS) — A standardized framework for evaluating MCP server security. Learn more

0 Level 0

Security Controls

Other Controls

23/26 passed

No Secrets in Code

Control failed: 3 findings found, score 70.0

MEDIUM FAIL

No Prompt Injection

Control failed: 8 findings found, score 50.0

HIGH FAIL

No Tool Poisoning

Control failed: 9 findings found, score 50.0

HIGH FAIL

Code Quality

PASS

Error Handling

PASS

Input Validation

PASS

Logging

PASS

No Critical Vulnerabilities

PASS

No High Vulnerabilities

PASS

No SQL Injection

PASS

No Command Injection

PASS

No Path Traversal

PASS

No Insecure Deserialization

PASS

No XSS Vulnerabilities

PASS

Secure Cryptography

PASS

No Hardcoded Credentials

PASS

No Remote Code Execution

PASS

No SSRF or Data Exfiltration

PASS

No Privilege Escalation

PASS

No Cross-Tool Data Leakage

PASS

No Hidden Network Channels

PASS

Compatible License

PASS

No Copyleft License

PASS

No Deprecated Dependencies

PASS

Pinned Dependencies

PASS

Known Supply Chain

PASS

Security Findings

20 findings:

Filter:

Severity	CVSS	Finding	Class	Location	CWE
high	—	User input flows to LLM prompt without validation User input flows to LLM prompt without validation	H Prompt Injection	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/webSearchAdvanced.ts:204	—
Description User input flows to LLM prompt without validation Code Snippet `logger.complete();` Remediation Validate and sanitize user input before passing to LLM APIs Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/webSearchAdvanced.ts:204 View on GitHub Confidence medium Rule ID MCP-H001
high	—	ML classifier detected prompt injection pattern ML classifier detected prompt injection pattern	G Tool Poisoning	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/api/mcp.ts:140	—
Description ML classifier detected prompt injection pattern Code Snippet `'[EXA-MCP] Cannot save bypass info: Redis not configured'` Remediation Review and sanitize the detected text for potential injection attempts Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/api/mcp.ts:140 View on GitHub Confidence high Rule ID MCP-ML-001
high	—	User input flows to LLM prompt without validation User input flows to LLM prompt without validation	H Prompt Injection	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/webSearch.ts:94	—
Description User input flows to LLM prompt without validation Code Snippet `logger.complete();` Remediation Validate and sanitize user input before passing to LLM APIs Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/webSearch.ts:94 View on GitHub Confidence medium Rule ID MCP-H001
high	—	ML classifier detected prompt injection pattern ML classifier detected prompt injection pattern	G Tool Poisoning	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/webSearchAdvanced.ts:12	—
Description ML classifier detected prompt injection pattern Code Snippet `"web_search_advanced_exa"` Remediation Review and sanitize the detected text for potential injection attempts Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/webSearchAdvanced.ts:12 View on GitHub Confidence high Rule ID MCP-ML-001
high	—	ML classifier detected prompt injection pattern ML classifier detected prompt injection pattern	G Tool Poisoning	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/webSearchAdvanced.ts:13	—
Description ML classifier detected prompt injection pattern Code Snippet `Advanced web search with full control over filters, domains, dates, and content options. Best for:... Remediation Review and sanitize the detected text for potential injection attempts Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/webSearchAdvanced.ts:13-17 View on GitHub Confidence high Rule ID MCP-ML-001
high	—	ML classifier detected prompt injection pattern ML classifier detected prompt injection pattern	G Tool Poisoning	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/companyResearch.ts:12	—
Description ML classifier detected prompt injection pattern Code Snippet `"company_research_exa"` Remediation Review and sanitize the detected text for potential injection attempts Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/companyResearch.ts:12 View on GitHub Confidence high Rule ID MCP-ML-001
high	—	User input flows to LLM prompt without validation User input flows to LLM prompt without validation	H Prompt Injection	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/companyResearch.ts:90	—
Description User input flows to LLM prompt without validation Code Snippet `logger.complete();` Remediation Validate and sanitize user input before passing to LLM APIs Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/companyResearch.ts:90 View on GitHub Confidence medium Rule ID MCP-H001
high	—	ML classifier detected prompt injection pattern ML classifier detected prompt injection pattern	G Tool Poisoning	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/crawling.ts:12	—
Description ML classifier detected prompt injection pattern Code Snippet `Get the full content of a specific webpage. Use when you have an exact URL. Best for: Extracting c... Remediation Review and sanitize the detected text for potential injection attempts Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/crawling.ts:12-15 View on GitHub Confidence high Rule ID MCP-ML-001
high	—	User input flows to LLM prompt without validation User input flows to LLM prompt without validation	H Prompt Injection	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/crawling.ts:87	—
Description User input flows to LLM prompt without validation Code Snippet `logger.complete();` Remediation Validate and sanitize user input before passing to LLM APIs Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/crawling.ts:87 View on GitHub Confidence medium Rule ID MCP-H001
high	—	User input flows to LLM prompt without validation User input flows to LLM prompt without validation	H Prompt Injection	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/deepResearchCheck.ts:138	—
Description User input flows to LLM prompt without validation Code Snippet `logger.complete();` Remediation Validate and sanitize user input before passing to LLM APIs Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/deepResearchCheck.ts:138 View on GitHub Confidence medium Rule ID MCP-H001
high	—	User input flows to LLM prompt without validation User input flows to LLM prompt without validation	H Prompt Injection	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/deepResearchStart.ts:94	—
Description User input flows to LLM prompt without validation Code Snippet `logger.complete();` Remediation Validate and sanitize user input before passing to LLM APIs Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/deepResearchStart.ts:94 View on GitHub Confidence medium Rule ID MCP-H001
high	—	ML classifier detected prompt injection pattern ML classifier detected prompt injection pattern	G Tool Poisoning	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/exaCode.ts:12	—
Description ML classifier detected prompt injection pattern Code Snippet `"get_code_context_exa"` Remediation Review and sanitize the detected text for potential injection attempts Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/exaCode.ts:12 View on GitHub Confidence high Rule ID MCP-ML-001
high	—	User input flows to LLM prompt without validation User input flows to LLM prompt without validation	H Prompt Injection	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/exaCode.ts:88	—
Description User input flows to LLM prompt without validation Code Snippet `logger.complete();` Remediation Validate and sanitize user input before passing to LLM APIs Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/exaCode.ts:88 View on GitHub Confidence medium Rule ID MCP-H001
high	—	ML classifier detected prompt injection pattern ML classifier detected prompt injection pattern	G Tool Poisoning	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/linkedInSearch.ts:12	—
Description ML classifier detected prompt injection pattern Code Snippet `"linkedin_search_exa"` Remediation Review and sanitize the detected text for potential injection attempts Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/linkedInSearch.ts:12 View on GitHub Confidence high Rule ID MCP-ML-001
high	—	Tool description contains suspicious Unicode characters Tool description contains suspicious Unicode characters	G Tool Poisoning	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/linkedInSearch.ts:83	—
Description Tool description contains suspicious Unicode characters Code Snippet `const deprecationNotice = "\n\n⚠️ DEPRECATION NOTICE: This tool (linkedin_search_exa) is depreca...` Remediation Remove Unicode control characters and confusables Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/linkedInSearch.ts:83 View on GitHub Confidence high Rule ID MCP-G002
high	—	User input flows to LLM prompt without validation User input flows to LLM prompt without validation	H Prompt Injection	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/peopleSearch.ts:93	—
Description User input flows to LLM prompt without validation Code Snippet `logger.complete();` Remediation Validate and sanitize user input before passing to LLM APIs Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/peopleSearch.ts:93 View on GitHub Confidence medium Rule ID MCP-H001
high	—	ML classifier detected prompt injection pattern ML classifier detected prompt injection pattern	G Tool Poisoning	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/webSearch.ts:13	—
Description ML classifier detected prompt injection pattern Code Snippet `Search the web for any topic and get clean, ready-to-use content. Best for: Finding current inform... Remediation Review and sanitize the detected text for potential injection attempts Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/src/tools/webSearch.ts:13-16 View on GitHub Confidence high Rule ID MCP-ML-002
medium	—	Potential secret in variable name Potential secret in variable name	E Secrets/Tokens	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/api/mcp.ts:230	—
Description Potential secret in variable name Code Snippet `userProvidedApiKey` Remediation Avoid storing secrets in plaintext variables Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/api/mcp.ts:230 View on GitHub Confidence low Rule ID MCP-E002
medium	—	Potential secret in variable name Potential secret in variable name	E Secrets/Tokens	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/api/mcp.ts:313	—
Description Potential secret in variable name Code Snippet `bypassApiKey` Remediation Avoid storing secrets in plaintext variables Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/api/mcp.ts:313 View on GitHub Confidence low Rule ID MCP-E002
medium	—	Potential secret in variable name Potential secret in variable name	E Secrets/Tokens	/tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/api/mcp.ts:37	—
Description Potential secret in variable name Code Snippet `redisToken` Remediation Avoid storing secrets in plaintext variables Location /tmp/mcp-scan-worker-2534411951/source/4ff0db4151d3-d0388ea7/api/mcp.ts:37 View on GitHub Confidence low Rule ID MCP-E002

MCP Surface Analysis

Attack Surface Analysis

Declared capabilities, transport security, and authentication posture

Tools

Resources

Transport

Not detected

Auth

Not detected

Detected Capabilities

Inferred system access requirements from static analysis

8 checked

Declared Tools

0 total

No tools declared

This server does not expose any callable tools

Resources

0 total

No resources detected

This server does not expose any data resources

Transport Security

Insecure

Type: Not detected
Protocol: Not detected
TLS / Encryption: Not Enabled

Authentication & Secrets

Authentication: Not Detected
Token in Environment: No
Secrets Detected: None Detected

No authentication mechanism detected. This server may accept unauthenticated connections.

OWASP MCP Top 10 (2025)

Risk assessment mapped to OWASP MCP security framework v0.1

OWASP Reference

Risk ID	Risk Name	Status	Related Controls	Findings
MCP01	Token Mismanagement & Secret Exposure Hard-coded credentials, long-lived tokens, secrets in logs	At Risk	2/3 controls pass	3
MCP02	Privilege Escalation via Scope Creep Weak scope enforcement, expanding permissions	Mitigated	1/1 controls pass	0
MCP03	Tool Poisoning Rug pulls, schema poisoning, tool shadowing	Vulnerable	1/2 controls pass	9
MCP04	Software Supply Chain Attacks Dependency tampering, build pipeline attacks	Mitigated	3/3 controls pass	0
MCP05	Command Injection & Execution Shell injection, chained execution, tool-mediated injection	Mitigated	2/2 controls pass	0
MCP06	Prompt Injection via Contextual Payloads Hidden instructions in input, files, or retrieved documents	Vulnerable	3/4 controls pass	8
MCP07	Insufficient Authentication & Authorization Missing auth, shared secrets, token replay, impersonation	Not Assessed	No mapped controls	0
MCP08	Lack of Audit and Telemetry Insufficient logging, no traceability for autonomous workflows	Mitigated	1/1 controls pass	0
MCP09	Shadow MCP Servers Unauthorized instances outside security governance	Not Assessed	No mapped controls	0
MCP10	Context Injection & Over-Sharing Context window leaks, data exposure across sessions	Mitigated	2/2 controls pass	0

Based on OWASP MCP Top 10 v0.1 (2025). Controls and findings are mapped by category and keyword analysis.

20 total findings analyzed

Compliance Matrix

Level 0: Integrity Verified

Cert Level 0

Basic digest and schema validation only. No static analysis passed.

Next level requirements: Score ≥ 60, no critical findings, pass Level 1 controls

MSSS — MCP Server Security Standard

Certification level progression and control requirements · Score: 14/100 (Not Compliant)

MSSS Reference

Integrity Baseline

Static Verified Score ≥ 60

Security Certified Score ≥ 80

Runtime Certified Score ≥ 90

Level 1 -- Static Verified

23/26

Basic analysis, score ≥ 60, no critical findings

88%

No Critical Vulnerabilities
No High Vulnerabilities
No Secrets in Code
No SQL Injection
No Command Injection
No Path Traversal
No Insecure Deserialization
No XSS Vulnerabilities
Secure Cryptography
No Hardcoded Credentials
Compatible License
No Copyleft License
No Deprecated Dependencies
Pinned Dependencies
Known Supply Chain
Code Quality
Error Handling
Input Validation
Logging
No Prompt Injection
No Tool Poisoning
No Remote Code Execution
No SSRF or Data Exfiltration
No Privilege Escalation
No Cross-Tool Data Leakage
No Hidden Network Channels

Level 2 -- Security Certified

0/0

Full analysis, score ≥ 80, SBOM evidence required

Level 3 -- Runtime Certified

0/0

Score ≥ 90, dynamic analysis, full attestation chain

MSSS Controls Detail

Individual control results grouped by security category

Control	Status	Severity	Evidence
No Critical Vulnerabilities SEC-001	PASS		Control passed: No significant issues found
No High Vulnerabilities SEC-002	PASS		Control passed: No significant issues found
No Secrets in Code SEC-003	FAIL	MEDIUM	Control failed: 3 findings found, score 70.0
No SQL Injection SEC-004	PASS		Control passed: No significant issues found
No Command Injection SEC-005	PASS		Control passed: No significant issues found
No Path Traversal SEC-006	PASS		Control passed: No significant issues found
No Insecure Deserialization SEC-007	PASS		Control passed: No significant issues found
No XSS Vulnerabilities SEC-008	PASS		Control passed: No significant issues found
Secure Cryptography SEC-009	PASS		Control passed: No significant issues found
No Hardcoded Credentials SEC-010	PASS		Control passed: No significant issues found
Compatible License SC-001	PASS		Control passed: No significant issues found
No Copyleft License SC-002	PASS		Control passed: No significant issues found
No Deprecated Dependencies SC-003	PASS		Control passed: No significant issues found
Pinned Dependencies SC-004	PASS		Control passed: No significant issues found
Known Supply Chain SC-005	PASS		Control passed: No significant issues found
Code Quality MAT-001	PASS		Control passed: No significant issues found
Error Handling MAT-002	PASS		Control passed: No significant issues found
Input Validation MAT-003	PASS		Control passed: No significant issues found
Logging MAT-004	PASS		Control passed: No significant issues found
No Prompt Injection SEC-011	FAIL	HIGH	Control failed: 8 findings found, score 50.0
No Tool Poisoning SEC-012	FAIL	HIGH	Control failed: 9 findings found, score 50.0
No Remote Code Execution SEC-013	PASS		Control passed: No significant issues found
No SSRF or Data Exfiltration SEC-014	PASS		Control passed: No significant issues found
No Privilege Escalation SEC-015	PASS		Control passed: No significant issues found
No Cross-Tool Data Leakage SEC-016	PASS		Control passed: No significant issues found
No Hidden Network Channels SEC-017	PASS		Control passed: No significant issues found

Details

Repository: https://github.com/exa-labs/exa-mcp-server
Language
License
Latest Version: commit-reinges-2026-03-01
Last Updated: Mar 1, 2026

Score Badge

Add this badge to your README.

[![MCP Hub](https://mcp-hub.info/badge/_/exa-search.svg)](https://mcp-hub.info/mcp/_/exa-search)

Capabilities

Filesystem Network Command Execution Code Evaluation Database Secrets LLM Access Environment

View full details →

Versions

Analysis Metadata

Toolchain Version: mcp-scan:1.0.0
Analyzed: 2026-02-26 14:50:38

Quick Install

Integrity Verified

Not Recommended for Production

Vulnerability Summary

Score Breakdown

OWASP MCP Top 10 View full details →

MSSS Certification Level

Security Controls

Other Controls

Security Findings

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

MCP Surface Analysis

Attack Surface Analysis

Detected Capabilities

Declared Tools

Resources

Transport Security

Authentication & Secrets

OWASP MCP Top 10 (2025)

Compliance Matrix

Level 0: Integrity Verified