Search excessionlabs.ai, the site of Excession Labs, a security lab, and request a security test.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Read one public page of excessionlabs.ai as Markdown. Use a path from search_site or llms.txt.
Page path or full URL on excessionlabs.ai, for example '/', '/about/' or '/security-assessment/'
Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.
Run in a terminal
claude mcp add --transport http site https://excessionlabs.ai/mcp
Tool list last changed Nov 10, 2026.
Read one public page of excessionlabs.ai as Markdown. Use a path from search_site or llms.txt.
| Argument | Type | Description |
|---|---|---|
| path* | string | Page path or full URL on excessionlabs.ai, for example '/', '/about/' or '/security-assessment/' |
{
"type": "object",
"required": [
"path"
],
"properties": {
"path": {
"type": "string",
"maxLength": 300,
"minLength": 1,
"description": "Page path or full URL on excessionlabs.ai, for example '/', '/about/' or '/security-assessment/'"
}
},
"additionalProperties": false
}Return the ways a person can contact Excession Labs: the request form, email, and the request_security_test tool for agents.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}Send a request for a security test (web application, API, multi-tenant SaaS isolation or AI application) to Excession Labs on behalf of a person who asked for it. Needs an agent key (POST https://excessionlabs.ai/agent/auth, then Authorization: Bearer <key>). Excession Labs replies to the person by email to agree scope; testing starts only after a written scope and written authorization from the system owner. Never include passwords, API keys or customer data. Limits: 5 requests a day per key, 3 a day per email address.
| Argument | Type | Description |
|---|---|---|
| name* | string | The person's name |
| email* | string | The person's work email; Excession Labs replies here |
| notes | string | Other context from the person, up to 2,000 characters. No credentials or customer data. |
| reason | string | Why the person needs the test |
| company | string | The person's company or organization name |
| targets* | array | Systems to test: URLs, API base URLs or short descriptions. No credentials. |
| website | string | Company website |
| timeline | string |
Search the public pages and research notes on excessionlabs.ai. Returns titles, URLs and one-line summaries.
| Argument | Type | Description |
|---|---|---|
| limit | integer | Maximum number of results to return (1 to 20, default 8) |
| query* | string | Words to search for, for example 'security assessment' or 'authorization testing' |
{
"type": "object",
"required": [
"query"
],
"properties": {
"limit": {
"type": "integer",
"default": 8,
"maximum": 20,
"minimum": 1,
"description": "Maximum number of results to return (1 to 20, default 8)"
},
"query": {
"type": "string",
"maxLength": 200,
"minLength": 1,
"description": "Words to search for, for example 'security assessment' or 'authorization testing'"
}
},
"additionalProperties": false
}We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 10, 2026.
What changed in this server's tools since we started watching, newest first. Each change is scanned again.
Read one of the published API, authentication or pricing documents in full.
Read current public token prices, monthly plans and prepaid top-up limits in USD.
Read the public Excession model catalog and current token prices. The same data as the live public endpoint https://excessionlabs.ai/v1/models.
{
"type": "object",
"required": [
"path"
],
"properties": {
"path": {
"type": "string",
"maxLength": 300,
"minLength": 1,
"description": "Page path or full URL on excessionlabs.ai, for example '/', '/about/', '/pricing' or '/blog/deepseek-api-guide/'"
}
},
"additionalProperties": false
}{
"type": "object",
"required": [
"path"
],
"properties": {
"path": {
"type": "string",
"maxLength": 300,
"minLength": 1,
"description": "Page path or full URL on excessionlabs.ai, for example '/', '/about/' or '/security-assessment/'"
}
},
"additionalProperties": false
}Search the public pages, research notes, blog postspages and APIresearch documentationnotes on excessionlabs.ai. Returns titles, URLs and one-line summaries.
{
"type": "object",
"required": [
"query"
],
"properties": {
"limit": {
"type": "integer",
"default": 8,
"maximum": 20,
"minimum": 1,
"description": "Maximum number of results to return (1 to 20, default 8)"
},
"query": {
"type": "string",
"maxLength": 200,
"minLength": 1,
"description": "Words to search for, for example 'abliterated model' or 'Claude Code setup'"
}
},
"additionalProperties": false
}{
"type": "object",
"required": [
"query"
],
"properties": {
"limit": {
"type": "integer",
"default": 8,
"maximum": 20,
"minimum": 1,
"description": "Maximum number of results to return (1 to 20, default 8)"
},
"query": {
"type": "string",
"maxLength": 200,
"minLength": 1,
"description": "Words to search for, for example 'security assessment' or 'authorization testing'"
}
},
"additionalProperties": false
}| When the person needs the result, in their words |
| test_type* | string | Kind of test: web_app, api, saas_multi_tenant, ai_application (LLM app or agent) or other |
| authorized* | boolean | Must be true: the person owns these systems or may arrange a test of them |
| person_consent* | boolean | Must be true: the person asked for this request and agreed to be contacted by email |
{
"type": "object",
"required": [
"name",
"email",
"test_type",
"targets",
"person_consent",
"authorized"
],
"properties": {
"name": {
"type": "string",
"maxLength": 120,
"description": "The person's name"
},
"email": {
"type": "string",
"maxLength": 200,
"description": "The person's work email; Excession Labs replies here"
},
"notes": {
"type": "string",
"maxLength": 2000,
"description": "Other context from the person, up to 2,000 characters. No credentials or customer data."
},
"reason": {
"enum": [
"customer_request",
"compliance",
"launch",
"routine",
"incident",
"other"
],
"type": "string",
"description": "Why the person needs the test"
},
"company": {
"type": "string",
"maxLength": 160,
"description": "The person's company or organization name"
},
"targets": {
"type": "array",
"items": {
"type": "string",
"maxLength": 300
},
"maxItems": 10,
"minItems": 1,
"description": "Systems to test: URLs, API base URLs or short descriptions. No credentials."
},
"website": {
"type": "string",
"maxLength": 300,
"description": "Company website"
},
"timeline": {
"type": "string",
"maxLength": 120,
"description": "When the person needs the result, in their words"
},
"test_type": {
"enum": [
"web_app",
"api",
"saas_multi_tenant",
"ai_application",
"other"
],
"type": "string",
"description": "Kind of test: web_app, api, saas_multi_tenant, ai_application (LLM app or agent) or other"
},
"authorized": {
"type": "boolean",
"description": "Must be true: the person owns these systems or may arrange a test of them"
},
"person_consent": {
"type": "boolean",
"description": "Must be true: the person asked for this request and agreed to be contacted by email"
}
},
"additionalProperties": false
}