llms.txt
+74 −32
− > Single-purpose data and analysis tools that AI agents and developers pay for per call. No accounts. Pay by card through Apify (the five analysis tools), in USDC through x402 at api.exepal.com, or from any MCP client through the Exepal MCP server (https://api.exepal.com/mcp, USDC per call) or the Apify MCP server.− - Social profile lookup: one public Instagram, TikTok, YouTube or Bluesky profile → followers, bio, category, verified, engagement rate, average likes/comments/views, posting cadence, recent posts; Instagram also gets follower history and 30-day growth where Exepal tracks the account. POST https://api.exepal.com/v1/social/instagram ($0.01), /v1/social/tiktok ($0.02), /v1/social/youtube ($0.02), /v1/social/bluesky ($0.002). Not charged for private or missing profiles. x402 and MCP.− - Social media posting: publish one post to up to 4 accounts on Bluesky, Mastodon, Telegram and Discord with your own credentials (used for the call only, never stored), images with alt text, long text split into a thread. POST https://api.exepal.com/v1/social/publish — $0.001 per call, charged only when at least one network accepts it. MCP tool social_publish.− - Social post formatter: one draft → a ready post for X, Bluesky, Threads, Mastodon, LinkedIn, Facebook, Instagram, TikTok, YouTube, Pinterest, Telegram and Discord: length counted the platform's way, hashtag caps, numbered thread split or word-boundary trim, warnings. POST https://api.exepal.com/v1/social/format — $0.001. MCP tool social_format.− - Social account comparison: 2-5 Instagram, TikTok, YouTube or Bluesky accounts side by side → followers, engagement rate, average likes/comments/views, posting cadence, 30-day growth, leaders per metric and rankings. POST https://api.exepal.com/v1/social/compare — $0.05. Account history (followers and engagement over time): POST /v1/social/history — $0.002, not charged when the account has no history yet.− - Instagram & TikTok post stats: one Instagram post/reel URL or TikTok video URL → likes, comments, views, shares, saves, caption, hashtags, mentions, date, duration, music, author and engagement rates. POST https://api.exepal.com/v1/social/stats — $0.005 per post. MCP tool social_stats. Not charged for private or removed posts.− - Hashtag search: Instagram or TikTok hashtag → top 10 posts with numbers and authors, plus average/median likes, average views, related hashtags and top creators. POST https://api.exepal.com/v1/social/hashtag — $0.04. MCP tool social_hashtag.− - Comments + sentiment: Instagram post/reel, TikTok video or YouTube video URL → top 15 comments with likes and replies, each labelled positive/neutral/negative (any language, incl. Hinglish and romanised Nepali), sentiment score, themes, one-line summary, questions and top emojis. POST https://api.exepal.com/v1/social/comments — $0.05. MCP tool social_comments.− - YouTube transcript: video URL or id → full transcript text and timed segments in any caption language, plus title, channel, duration, views, publish date, description, keywords and chapters. POST https://api.exepal.com/v1/youtube/transcript — $0.002 per video, no account. Not charged when there is no transcript. x402 and MCP.− - Local business leads: a search and a place ("dentists", "Kathmandu, Nepal") → Google Maps businesses with address, phone, website, rating and reviews, plus emails (checked for deliverability), phones and social profiles found on each website. POST https://api.exepal.com/v1/leads — $0.10 for up to 10, /v1/leads/deep $0.20 for up to 20. x402 and MCP.− - Page reader: any public URL → clean markdown (or text) with title, description, author, date, canonical and links. Static HTML and PDFs, no JavaScript rendering. POST https://api.exepal.com/v1/read — $0.005 per page, $0.03 per 10 (/v1/read/batch). x402 and MCP only.− - Domain intel: DNS records, mail provider, SPF/DMARC/DKIM with an A–F grade, registrar and registration/expiry dates (RDAP), hosting and CDN, tech stack, risk flags (parked, registered recently, expiring, no DMARC). POST https://api.exepal.com/v1/domain — $0.005 per domain. x402 and MCP only.− - Email check: syntax, MX / null-MX / A-fallback, disposable (214k-domain list), role account, free provider, typo suggestion, SPF/DMARC grade and a 0–100 deliverability score with likely / risky / undeliverable. No SMTP probe. POST https://api.exepal.com/v1/email — $0.002 per address, $0.015 per 10 (/v1/email/batch). x402 and MCP only.− - Prompt-injection scanner: checks a web page (url), raw html or text (document, email, tool result) for instructions aimed at AI agents: hidden HTML (display:none, white text, off-screen, aria-hidden, comments, meta, alt), Unicode tag smuggling, zero-width and bidi characters, base64-encoded text, and 20 injection patterns (ignore previous instructions, you are now, do not tell the user, reveal the system prompt, exfiltrate, run this command, tool misuse, authority claims). Returns verdict clea− - Secrets leak detector: finds API keys, tokens, private keys, seed phrases, JWTs and connection strings in text (or a public url): AWS, GitHub, GitLab, OpenAI, Anthropic, Google, Stripe, Slack, Discord, Telegram, SendGrid, Mailgun, Twilio, npm, PyPI, Hugging Face, DigitalOcean, Shopify, Supabase, Azure, Vercel, Cloudflare, PEM blocks, EVM keys, BIP39 phrases, database/basic-auth URLs, Authorization headers, entropy-gated generic assignments. Masked values with line numbers; optional redacted co− - PII detector and redactor: finds emails, phone numbers (with country), payment cards (Luhn, brand), IBANs (mod-97), Aadhaar (Verhoeff), Indian PAN, US SSN, UK NI numbers, Nepal citizenship numbers, passport numbers, dates of birth, IP and wallet addresses in text (or a public url). Masked values with line numbers; optional redacted copy with stable placeholders ([EMAIL_1], [CARD_1]) so the text stays readable; types[] filter. Names and street addresses are not detected. Nothing stored. POST ht− - MCP server audit: connects to a remote MCP server (initialize, tools/list, and resources/list + prompts/list when advertised) or takes tools[], resources[] and prompts[] arrays, and grades it A–F: tool poisoning in descriptions and parameters (hidden instructions, read files before use, hide from user, shadow other tools, consent claims), hidden Unicode, raw command/sql/path/url inputs, destructive tools without readOnlyHint/destructiveHint, misleading annotations, duplicate and shadowing name− - AI brand visibility: how often ChatGPT, Claude, Gemini and Perplexity recommend a brand vs competitors. POST https://api.exepal.com/v1/ai-visibility — $0.50 quick, $3.00 standard, $7.00 deep. Apify actor: exepal/ai-brand-visibility.− - Creator vetting: fake-follower risk, engagement quality, estimated UGC rate for a creator profile. POST https://api.exepal.com/v1/creator-vetting — $0.20 per profile. Apify actor: exepal/creator-vetting.− - South Asia utility pack ($0.001 per call, x402 and MCP only): POST https://api.exepal.com/v1/south-asia/date (Bikram Sambat ↔ Gregorian, weekday, Nepali month names, Devanagari digits, Nepal fiscal year; 1970–2090 BS), /v1/south-asia/number (Devanagari digits, lakh/crore grouping, words in English and Nepali, NPR/INR amounts), /v1/south-asia/phone (Nepal +977 and India +91: valid, mobile/landline, operator or region, E.164), /v1/south-asia/id (GSTIN checksum + state, Indian PAN, Aadhaar Verhoe− - Company enrichment: domain → clean company JSON for sales agents. POST https://api.exepal.com/v1/company-enrich — $0.10 per company, $0.80 per 10. Apify actor: exepal/company-enrich.− - Ad creative score: hook, clarity, CTA and platform-fit scores for a UGC or paid-social script. POST https://api.exepal.com/v1/ad-creative-score — $0.25 per creative, $2.00 per 10. Apify actor: exepal/ad-creative-score.− - SERP + AI answer monitor: Google rank, AI Overview citation and AI-assistant mentions per keyword. POST https://api.exepal.com/v1/serp-ai-monitor — $0.70 per 10 keywords, $2.50 deep (25 keywords, all engines). Apify actor: exepal/serp-ai-monitor.− ## Free trial (no wallet)− - 20 free calls per day per IP on the tools priced $0.005 and under (page reader, domain intel, email check, South Asia pack; not the batch endpoints). HTTP: add the header `X-Exepal-Trial: 1`; the response header X-Exepal-Trial-Remaining counts down. MCP (https://api.exepal.com/mcp): automatic for unpaid calls. After the allowance, pay per call with x402.− - x402: call any /v1 endpoint on https://api.exepal.com; the 402 response carries the price and payment details (USDC on Base). An x402-capable client pays and retries automatically.− - Apify: run the Actor from https://apify.com/exepal with an Apify account; billed per event.− - MCP (USDC): add https://api.exepal.com/mcp (Streamable HTTP, no sign-in) to Claude, Cursor or any MCP client. Each tool call returns an x402 payment request; an x402-capable client (e.g. @x402/mcp) pays and repeats the call. Charged only if the tool succeeds.− - MCP (card): add https://mcp.apify.com and ask for the tool by name; billed through your Apify account.− - https://api.exepal.com/openapi.json — OpenAPI 3.1 for the x402 endpoints, with request and response schemas.− - https://api.exepal.com/mcp — MCP server; tools/list returns every tool with its description, input schema, output schema and price.− - https://exepal.com/tools/{social-profile-lookup,social-media-posting-api,social-media-analytics-api,instagram-tiktok-post-stats-api,hashtag-search-api,social-media-comments-api,youtube-transcript,local-business-leads,page-reader,domain-intel,email-check,south-asia,nrb-exchange-rates,prompt-injection-scanner,secrets-leak-detector,mcp-server-audit,ai-brand-visibility,creator-vetting,company-enrichment,ad-creative-score,serp-ai-monitor} — one human-readable page per tool.+ > Safety tools for AI agents that read things they did not write. Read a web page or PDF with hidden instructions removed and a prompt-injection verdict; scan tool results, emails, documents, MCP servers and agent rules files for prompt injection, leaked secrets and personal data. Plus domain intel and South Asia data. Pay per call from $0.001 with prepaid card credit on one free key, over REST or MCP (https://api.exepal.com/mcp). 20 free calls a day.+ The name: Exepal is exe + pal. An .exe is a program that runs when you call it; each Exepal tool is one (one job, one JSON answer, one public price). A pal has your back: the price is shown before the call, failed calls cost nothing, the everyday tools give 20 free calls a day, and a real person answers email (contact@laxmankafle.com). Operated by Evemoo Tech Pvt. Ltd., Kathmandu, Nepal.+ ## For founders+ Tools for people running a website (often one built with Lovable, Bolt, Cursor or Claude Code). Plain-English results with a fix prompt for each problem; paid parts draw from one card-funded credit balance, no subscription.+ - Launch scan, free: keys in JavaScript, exposed .env/.git, security headers, SEO basics, SPF/DMARC, domain expiry, AI readiness: https://exepal.com/launch-scan+ - Weekly site watch: first report free, then $1.25 a week from credit (about $5 a month, stop any time): the launch scan every week with an email of what changed. Sign in, then https://exepal.com/account#watch+ - Bing rank checker, 3 keywords a day free, no sign-up, then $0.01 a keyword after sign-in: live Bing position (top 20), the ranking page and the top 3 sites, 21 countries: https://exepal.com/bing-rank-checker+ - SEO for founders, free daily snapshot after sign-in, full Semrush-style report $0.50: traffic, keywords, quick wins, competitors, keyword gap, on-page fixes: https://exepal.com/seo+ - Backlink audit + disavow file, free preview after sign-in, full audit $1: every linking site with rank and spam score, keep / ask to remove / disavow verdicts with reasons, removal email drafts and a Google-format disavow.txt the user uploads in Search Console themselves: https://exepal.com/backlinks+ - Search Console growth, connect Google Search Console (read-only), weekly top 5 fixes (pages losing clicks, searches almost on page one, low click rate titles, pages not indexed) each with a copy-paste prompt for Claude Code, Cursor, Replit, Lovable or WordPress; first week free, then $2 a week for 1 site or $5 a week for up to 5: https://exepal.com/search-growth+ - Competitor report, first report free after sign-in, then $0.50: your site next to up to 3 competitors, how each rival sells, and 6-14 changes with copy-paste fix prompts for Claude Code, Cursor, Lovable, Replit, Bolt or v0: https://exepal.com/competitors+ - Business name check, free quick check (10 a day): is a name free on .com, .io, .ai, .co, .app, .dev, GitHub, npm, Bluesky and YouTube, with USPTO and WIPO trademark search links; full report $0.25 adds .net/.org/.xyz, Instagram, TikTok and a Google check; name ideas $0.50 gives 10 names with a free .com or .ai: https://exepal.com/name-check+ ## Exepal Agent+ - Exepal Agent, a research agent that searches and reads public web pages and returns a sourced answer (Markdown or JSON). Web app: https://exepal.com/agent. API: POST https://api.exepal.com/api/agent/runs with Authorization: Bearer exk_YOUR_KEY and JSON {"prompt": "...", "model": "flash", "limits": {"max_credits": 50}}; streams events (run, step, tool, tool_result, final), or add ?stream=0 for one JSON answer. Follow-ups with continue_from, shared instructions and memory with project_id. MCP: t+ - Agent pricing: 1 credit = $0.01, from the same prepaid balance as every tool. Free: one run a day per signed-in account on the Flash model (up to 5 credits), and the first run on any model (up to 10 credits). Paid runs are billed for model tokens plus tool calls: Flash $0.009 in / $0.75 out per 1M tokens, Pro $1.80 / $3.00, Claude Haiku $0.15 / $0.75; web search 2.25 credits, page read 0.15, browser-tab read 0.75, site crawl 0.75, field extraction 0.3. Typical runs: 1.6 credits ($0.02) to read+ - The agent can also run Exepal's own checks inside a run, at their list price: launch scan (2 credits), AI readiness (0.5), domain lookup (0.5), competitor report (50), Name Check (2) and full report (25), SEO report (50), keyword ideas (5), rank check (10), keyword gap (10). A check is only offered when the run's credit limit leaves room for it.+ - Ready-made tasks, each a whole job that combines checks or repeats weekly (launch check explained, SEO plan for the month, rival price table, weekly rival watch, tool shortlist): https://exepal.com/tasks/+ - Which to use: one report = its own page (often free); the whole job, combined or weekly = the agent; building an agent or app = the API and MCP tools at https://exepal.com/tools/+ - Repeat weekly: any finished task can run every week with a weekly credit limit and the answer by email, leading with what changed. API: POST https://api.exepal.com/api/agent/schedules {"from_run": "run_..."} or {"prompt": "...", "max_credits": 50}; GET to list, PATCH /api/agent/schedules/:id {"active": false} to pause, DELETE to remove.+ - Share an answer as a read-only link: POST /api/agent/runs/:id/share {"on": true} returns https://exepal.com/a/<id> (task and answer only, no steps or costs); {"on": false} turns it off.+ - The agent reads public pages only. It refuses lead lists, personal contact scraping, spam, fake reviews and getting past logins, paywalls, CAPTCHAs or robots.txt, before anything is charged.+ - Tool catalog: https://exepal.com/tools/+ - Connect an agent (Claude, Cursor, VS Code, LangChain, Vercel AI SDK): https://exepal.com/integrate+ - Pricing (from $0.001 a call, prepaid credit packs $5/$20/$50): https://exepal.com/pricing+ - Free API key (20 free calls a day): https://exepal.com/key+ - API docs: https://exepal.com/docs+ - About the company: https://exepal.com/about+ - Free agent-readiness check for any website: https://exepal.com/check+ - Free launch scan for a live website (keys in JavaScript, exposed .env/.git, security headers, SEO basics, SPF/DMARC, domain expiry, AI readiness, with fix prompts): https://exepal.com/launch-scan+ - Free AI config scanner (.cursorrules, CLAUDE.md, AGENTS.md, MCP configs): https://exepal.com/ai-config-scanner+ - Free OpenClaw skill scanner (ClawHub, GitHub or pasted SKILL.md, 3 a day): https://exepal.com/skill-check+ - The vibe-coder stack (every check for apps built with Lovable, Bolt, Cursor, Claude Code, on one key): https://exepal.com/vibe+ - Injection Feed, free: live prompt injections found in MCP servers and web pages, JSON at https://api.exepal.com/v1/feed (CC BY 4.0): https://exepal.com/injection-feed+ - Prompt-injection scanner: checks a web page (url), raw html or text (document, email, tool result) for instructions aimed at AI agents: hidden HTML (display:none, white text, off-screen, aria-hidden, comments, meta, alt), Unicode tag smuggling, zero-width and bidi characters, base64-encoded text, and 20 injection patterns (ignore previous instructions, you are now, do not tell the user, reveal the system prompt, exfiltrate, run this command, tool misuse, authority claims). Returns verdict clea+ - Secrets leak detector: finds API keys, tokens, private keys, seed phrases, JWTs and connection strings in text (or a public url): AWS, GitHub, GitLab, OpenAI, Anthropic, Google, Stripe, Slack, Discord, Telegram, SendGrid, Mailgun, Twilio, npm, PyPI, Hugging Face, DigitalOcean, Shopify, Supabase, Azure, Vercel, Cloudflare, PEM blocks, EVM keys, BIP39 phrases, database/basic-auth URLs, Authorization headers, entropy-gated generic assignments. Masked values with line numbers; optional redacted co+ - PII detector and redactor: finds emails, phone numbers (with country), payment cards (Luhn, brand), IBANs (mod-97), Aadhaar (Verhoeff), Indian PAN, US SSN, UK NI numbers, Nepal citizenship numbers, passport numbers, dates of birth, IP and wallet addresses in text (or a public url). Masked values with line numbers; optional redacted copy with stable placeholders ([EMAIL_1], [CARD_1]) so the text stays readable; types[] filter. Names and street addresses are not detected. Nothing stored. POST ht+ - MCP server audit: connects to a remote MCP server (initialize, tools/list, and resources/list + prompts/list when advertised) or takes tools[], resources[] and prompts[] arrays, and grades it A–F: tool poisoning in descriptions and parameters (hidden instructions, read files before use, hide from user, shadow other tools, consent claims), hidden Unicode, raw command/sql/path/url inputs, destructive tools without readOnlyHint/destructiveHint, misleading annotations, duplicate and shadowing name+ - Agent rules-file scanner: checks CLAUDE.md, AGENTS.md, GEMINI.md, .cursorrules, .cursor/rules, Copilot instructions, .windsurfrules, .clinerules, .mcp.json and .claude/settings.json for hidden Unicode instructions (rules-file backdoor), instructions in HTML comments, curl|sh and encoded commands, skip-permission flags, credential access, planted scripts, silent changes, risky URLs and leaked secrets; ordinary instructions are not flagged. Verdict clean / review / dangerous with line numbers an+ - Skill Check: scans an OpenClaw / ClawHub, Claude Code or Codex skill (SKILL.md plus its scripts, up to 30 files) before install, from a ClawHub link or slug, a GitHub folder or repo, a raw URL or pasted files. Flags the 2026 ClawHub malware tricks: paste-in-Terminal set-up steps, download-and-run, password-protected archives, macOS quarantine bypass, password prompts, Keychain/browser/wallet/agent-key theft, reverse shells, env dumps sent out, encoded blobs, bundled binaries, hidden Unicode. V+ - Name Check: business or startup name availability. name_check: .com .io .ai .co .app .dev (RDAP + DNS), GitHub, npm, Bluesky, YouTube handles, X/LinkedIn links, USPTO/WIPO search links, verdict — POST https://api.exepal.com/v1/name-check $0.02. name_check_report: adds .net .org .xyz, Instagram, TikTok and a Google check for businesses using the name — $0.25. name_check_ideas: 10 names for an idea with .com/.ai/.io and handles checked — $0.50. REST and MCP.
Showing the first 40 of each.