What it can do: exa

Plugin bundle · exa-labs

What exa declares, asks for and runs, according to the marketplaces we read. Runs on a remote server: your AI tool connects to it over the network. mcp.exa.ai/mcp. Tools it declares: 2. Environment variables it asks for: 1, secrets among them: 1. As of our marketplace pass on 2026-10-12.

This is not a security audit. We list what the marketplaces publish about this plugin: what it declares, what it asks for and what it runs. We do not run or inspect its code, and a verified mark is the marketplace's statement, not ours.

Where it runs

Runs on a remote server: your AI tool connects to it over the network. mcp.exa.ai/mcpTransport: Streamable HTTP. As declared on: Claude Code: claude-plugins-official, Official MCP Registry, Claude: knowledge-work-plugins, Community GitHub marketplaces.
Runs on your machine, in a container started from this image: mcp/exaAs declared on: Docker MCP Catalog.

What it declares

Tools it declares: 2. As declared on: Docker MCP Catalog.

web_fetch_exa
web_search_exa

Prompts and resources: the marketplaces we read do not publish them.

What it asks for

Environment variables it asks for: 1, secrets among them: 1. As declared on: Docker MCP Catalog.

EXA_API_KEY secret required

Names only: we keep no values, examples or descriptions of these variables. OAuth scopes and install-time settings are not published by the marketplaces we read.

What it runs besides MCP

Skills: 2 As declared on: Claude Code: claude-plugins-official.

exa-agent
search

Who answers for it

exa-labs

No marketplace we read marks it or its publisher as verified.
License: MIT.
Last change we saw: 2026-10-12.
The repository github.com/exa-labs/exa-mcp-server belongs to the account the publisher is listed under on Claude Code: claude-plugins-official.

How it has changed

Its tools, settings, hooks and composition have not changed since we started watching it.

In context

Median number of secrets a plugin bundle asks for on the marketplaces we read: 0.0. This one asks for: 1.
Share of plugin bundles that run on a remote server: 17%.

Where it is published and how its figures have moved

Compare it side by side with similar plugins

Data comes from the public marketplace file https://github.com/anthropics/claude-plugins-official/blob/HEAD/.claude-plugin/marketplace.json. Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Data comes from the Docker MCP Catalog (desktop.docker.com/mcp/catalog) and Docker Hub. Data comes from the public marketplace file https://github.com/anthropics/knowledge-work-plugins/blob/HEAD/.claude-plugin/marketplace.json. Data comes from public marketplace files in GitHub repositories of their authors. Figures come from our own regular passes over the marketplaces, last read on 2026-10-12. We publish no contact details for plugin publishers.