What is Exa’s email format?
Format | Example (fictional name: Maya Chen) | Who uses it | Status |
|---|---|---|---|
{first}@exa.ai | maya@exa.ai | 31 of 33 staff addresses Exa’s people have published | Current, standard |
{f}{last}@exa.ai | mchen@exa.ai | Possibly one address | Rare |
{first}.{last}@exa.ai | maya.chen@exa.ai | No one we could find | Not used |
Exa’s code is public, and its staff sign their commits to Exa’s open-source SDKs and MCP server with their work addresses (GitHub). Of the 33 personal exa.ai addresses there and in its npm packages, from 2023 to November 2026, 31 are a first name alone. Most use their full given name, so an Alexander is usually alexander@, not alex@. No one uses first.last.
Before the January 2024 rename, staff used the same pattern on a Metaphor domain, and at least one person kept the same name at exa.ai. A pattern-based address is still a guess: run it through an email verifier before you send, because a bounce hurts your sender reputation.
Which domains does Exa use?
exa.ai: the website, the API (api.exa.ai), the dashboard, staff email and product email. Mail runs on Google Workspace, and the DMARC policy is reject, so mail that fakes exa.ai should be refused (DNS checked November 9, 2026).
metaphor.systems: the company’s domain as Metaphor. It now redirects to exa.ai and only forwards mail; it never sends any.
status.exa.ai shows outages, and trust.exa.ai holds Exa’s SOC 2 report and data processing agreement (Exa).
exa.com is not Exa’s: it redirects to Dassault Systèmes’ PowerFLOW simulation software.
Which emails come from Exa itself?
Billing receipts and invoices come from billing@exa.ai (Exa). Product emails, such as team invites and alerts, are sent from exa.ai, and marketing emails come through HubSpot on the same domain. Exa hires through Ashby; its open roles are listed on its careers page (Exa).
Is that email or package really from Exa?
Check the sender’s domain: everything from Exa comes from exa.ai, and its reject policy means a forged exa.ai address shouldn’t reach you. Exa’s security policy names phishing sites and unofficial “free” Exa proxies, including Discord bots, as sites it doesn’t own (Exa). Never paste your API key into them.
Developers should install Exa only from its official packages, exa-js, exa-py and exa-mcp-server, published by exa-labs. In May 2026 an npm package called pi-exa-mcp was flagged as malware (OSV); it isn’t Exa’s.
What is Exa’s official email address?
Need | Where to write |
|---|---|
Support and product questions | support@exa.ai (Exa) |
Sales and Enterprise, including HIPAA | sales@exa.ai, or the sales form (Exa) |
Partnerships | partnerships@exa.ai |
Billing | billing@exa.ai |
Press | press@exa.ai |
Security vulnerabilities | security@exa.ai, with [VDP] at the start of the subject; Exa pays $25 to $5,000 for valid reports and has no security.txt |
Privacy and data requests | privacy@exa.ai (Exa) |
Legal, terms and copyright notices | hello@exa.ai (Exa) |
Jobs | Exa’s careers page, on Ashby |
Developer community | Exa’s Discord |
Postal mail | Exa Labs, 430 Shotwell Street, San Francisco, CA 94110 |
Other companies called Exa
Several unrelated companies share the name: EXA Infrastructure, a European fibre and subsea network operator (exainfra.net); Exa Networks, a UK internet provider for schools (exa.net.uk); EXA Corporation, an IT services company in Japan; and Exasol and ExaGrid, a database and a backup company. exa is also an old command-line tool for listing files, now replaced by eza (GitHub).
Who owns Exa, its funding and its CEO: Exa in 2026: revenue, valuation, funding, CEO.
