com.exepal/exepal

up checked 2026-11-10T22:37:35.100Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

Exepal

Publisher-provided description

Safety tools for AI agents: safe page reader, prompt-injection, secrets, PII and MCP server scans

Summary by lookupd

Runs security, prompt-injection, secrets, PII and domain checks, and reads web pages as clean text for AI agents.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http exepal https://api.exepal.com/mcp

Codex, remote (streamable-http)

codex mcp add exepal --url https://api.exepal.com/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "exepal": {
      "url": "https://api.exepal.com/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (24 tools)

Publisher-provided text

• client_report A website check written for a non-technical owner and ready to send under your brand: verdict, headline, summary, what works, fixes ranked by business risk with
• launch_scan Pre-launch check of a live website: leaked keys in JavaScript bundles, public .env/.git, HTTPS and security headers, Google and link-preview basics, email spoof
• seo_report SEO report for one website: estimated Google traffic and keywords, 12-month trend, top 100 keywords, quick wins, competitors, top pages, on-page problems with f
• seo_keywords Keyword research: up to 50 keyword ideas for a seed keyword with monthly searches, difficulty, cost per click and intent. Use to find what people search for aro
• seo_rank Live Google position (top 20) of a website for up to 10 keywords, with the ranking URL and the top 3 domains. Use to check right now where a site ranks on Googl
• seo_gap Keyword gap: up to 100 keywords a competitor ranks for on Google and your site doesn't, most searched first. Use to find content ideas a competitor already prov
• rivals Competitor report: a website next to up to 3 competitors (headline, button, prices, free plan, proof, FAQ, integrations, comparison pages), how each rival sells
• safe_read Safe page reader: one URL (web page or PDF) to clean markdown with hidden text removed and a prompt-injection verdict, in one call. Use this by default whenever
• read Page reader: one URL to clean markdown (or text) with title, description, author, date and links. Use whenever you need the text of a web page: articles, docs,
• domain Domain intel: DNS, MX, SPF/DMARC/DKIM grade, registrar and dates (RDAP), hosting, tech stack, risk flags. Use to check a domain before trusting, emailing or buy
• south_asia_date Bikram Sambat (Nepali) <-> Gregorian date conversion with weekday, Nepali month names, Devanagari digits and Nepal fiscal year. Use for any Nepali (BS / Bikram
• south_asia_number Number to Devanagari digits, lakh/crore grouping, and words in English (Indian system) and Nepali; NPR/INR amount wording. Use to write an amount the South Asia
• south_asia_phone Nepal (+977) and India (+91) phone number check: valid, mobile/landline, operator or region, E.164. Use to validate or normalise a Nepali or Indian phone number
• south_asia_id GSTIN (checksum + state), Indian PAN, Aadhaar (Verhoeff), IFSC (bank) and Nepal PAN/VAT format checks. Use to check an Indian GSTIN, PAN, Aadhaar or IFSC code,
• south_asia_forex Official Nepal Rastra Bank exchange rates (NPR buy/sell per currency) for any day since 2000, AD or BS date, with amount conversion and up to 31-day series. Use
• guard Agent guard: one check for prompt injection, leaked secrets and personal data in any text or HTML, with an allow/review/block decision and a copy safe to pass o
• scan_injection Prompt-injection scanner: checks a web page, document or tool result for hidden instructions aimed at AI agents (hidden HTML, white text, comments, Unicode smug
• scan_secrets Secrets leak detector: finds API keys, tokens, private keys, seed phrases, JWTs and connection strings (AWS, GitHub, OpenAI, Anthropic, Stripe, Slack, Google an
• scan_pii PII detector and redactor: finds emails, phone numbers, payment cards (Luhn), IBANs, Aadhaar (Verhoeff), Indian PAN, US SSN, UK NI numbers, Nepal citizenship nu
• scan_mcp MCP server audit: connects to a remote MCP server (or takes its tools, resources and prompts), grades it A-F for tool poisoning, hidden Unicode, raw command/pat
• scan_rules Rules-file scanner: checks CLAUDE.md, AGENTS.md, .cursorrules, .cursor/rules, copilot-instructions.md, GEMINI.md, .windsurfrules, .clinerules, .mcp.json and .cl
• skill_check Skill Check: scans an OpenClaw / ClawHub, Claude Code or Codex skill (SKILL.md and its scripts) before you install it, for the patterns used by the 2026 ClawHub
• name_check Business and startup name availability: .com .io .ai .co .app .dev domains, GitHub, npm, Bluesky and YouTube handles, links for X and LinkedIn, US trademark (US
• agent_ready Agent-readiness check for a website: robots.txt access for 19 AI crawlers (search, assistant and training bots from OpenAI, Anthropic, Google, Perplexity, Apple

Details

• Version: 1.1.0
• Transports: streamable-http
• Uptime (7 days): 100%
• Median latency: 674 ms
• First indexed: 2026-11-01T08:53:56.117Z
• Last seen in registry: 2026-11-09T08:17:25.313Z
• Website: https://exepal.com/integrate

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/com.exepal/exepal.svg)](https://lookupd.com/servers/com.exepal/exepal)

• 62033 servers
• Last crawl: 2026-11-11T15:38:39.561Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp