{"as_of":"2026-08-13T00:03:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f7e87da5ff2f26eba37fab96d1cca7793942890fd6bbbbf8a456cfef1dcb2ca9","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:49:20.613796Z","state":"measured"},{"denominator":36,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":36,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:34:17.754752Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":1,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-08-12T15:09:08.519195Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-13T09:02:40.294491Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2503.23278"},"observation_digest":"sha256:b3362680287b62797303add24ef05071224d831df698552d72e06a4b90f6f8e5","observation_id":"3ca54d74-5d7b-4e17-ac50-f1636edb7229","resolution":{"observed_at":"2026-05-13T09:02:40.440560Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-07T00:34:17.754752Z","title":"Etdi: Mitigating tool squatting and rug pull attacks in model context protocol (mcp) by using oauth-enhanced tool definitions and policy-based access control,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13590","last_updated":"2025-06-16T15:18:24Z","snapshot_observed_at":"2026-08-11T17:18:41.760014Z","submitted_at":"2025-06-16T15:18:24Z","title":"Agent Capability Negotiation and Binding Protocol (ACNBP)","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T00:34:17.754752Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2506.13590"},"observation_digest":"sha256:fcc7deab1001ae6122d5c837a174bf19f9d6f5de5569577ff6967017921b3c62","observation_id":"61c7e0f5-e44f-4b26-be3e-19a274bb778d","resolution":{"observed_at":"2026-08-07T00:34:17.754752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2512.06556","last_updated":"2026-05-21T13:44:50Z","snapshot_observed_at":"2026-08-12T03:33:38.326781Z","submitted_at":"2025-12-06T20:07:58Z","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-22T12:46:44.819224Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2512.06556"},"observation_digest":"sha256:32855e25975b51ca0101f1d4f7ecc8152116ced919c8cac9cacb8ed3533dd8f3","observation_id":"1c0eb83b-9e89-4d1e-b4a7-54a202db73e8","resolution":{"observed_at":"2026-05-22T12:51:33.402622Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-07-14T23:21:58.911407Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2603.10749","last_updated":"2026-06-10T06:18:26Z","snapshot_observed_at":"2026-07-14T23:21:58.266403Z","submitted_at":"2026-03-11T13:23:46Z","title":"AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-14T23:21:58.911407Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2603.10749"},"observation_digest":"sha256:78592f9dec7868b9098aabfc40f86d20b268e81692d22bd5f1192aa39210602b","observation_id":"245002be-fb54-4a57-85a5-3b7704576304","resolution":{"observed_at":"2026-07-14T23:21:58.911407Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-12T23:07:40.593927Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:ac60c4ff14011a48226a8044eb842e3e30e804882c611942af012148a6334a24","observation_id":"3a7bd041-7041-4307-8f64-4cff778e1ffc","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2604.01905","last_updated":"2026-05-19T08:31:57Z","snapshot_observed_at":"2026-07-06T22:51:40.181565Z","submitted_at":"2026-04-02T11:22:07Z","title":"From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-21T10:41:17.307952Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2604.01905"},"observation_digest":"sha256:687dbf43a98399a6e55ed158fc767bc9805dbb1fb816a1866b1a9673e2478219","observation_id":"190d6d1c-89dd-4dd9-8611-b51cacb5e869","resolution":{"observed_at":"2026-05-21T10:44:07.968019Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2604.05969","last_updated":"2026-04-07T15:02:47Z","snapshot_observed_at":"2026-08-02T15:20:05.549688Z","submitted_at":"2026-04-07T15:02:47Z","title":"A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T19:39:27.982512Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2604.05969"},"observation_digest":"sha256:6ffd55a37550a6e72f17c29400da2938a694be455be607ae446838f105e08b50","observation_id":"666f9a37-60a7-4324-9829-bf91c5e60374","resolution":{"observed_at":"2026-05-10T22:40:50.315174Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2605.07836","last_updated":"2026-05-08T15:03:51Z","snapshot_observed_at":"2026-08-11T18:33:39.629835Z","submitted_at":"2026-05-08T15:03:51Z","title":"Unsafe by Flow: Uncovering Bidirectional Data-Flow Risks in MCP Ecosystem","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-11T02:19:52.113212Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2605.07836"},"observation_digest":"sha256:ccf414da6b36a943ffefea85ee33eb787486ca7347b0fc84b448b53d64319e80","observation_id":"755f1830-60c5-4c18-899b-11cc474e7b96","resolution":{"observed_at":"2026-05-11T02:20:52.295077Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-07-11T06:26:53.148158Z","title":"2506.01333 , archivePrefix=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.05518","last_updated":"2026-07-06T18:00:49Z","snapshot_observed_at":"2026-08-12T23:27:02.506526Z","submitted_at":"2026-07-06T18:00:49Z","title":"aiAuthZ: Off-Host, Identity-Bound Authorization for AI Agents","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-07-11T06:26:53.148158Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2607.05518"},"observation_digest":"sha256:bab387e78b3535ebd37c4aac5ac507c7afb0731882152d63cce844deda49aff6","observation_id":"a759f43e-cf63-4d4b-a121-e569bbbfc37b","resolution":{"observed_at":"2026-07-11T06:26:53.148158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2607.05744","last_updated":"2026-07-07T02:01:44Z","snapshot_observed_at":"2026-08-12T14:58:43.423438Z","submitted_at":"2026-07-07T02:01:44Z","title":"Unicode TAG-Block Concealment of Tool-Metadata Payloads in the Model Context Protocol: An Approval-View Fidelity Gap Across Three Independent Server Implementations","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-07-11T02:40:13.068295Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2607.05744"},"observation_digest":"sha256:e6ab503b709a29b4fa519c47c4d932626fa2f3b35f6a0e9c1e9a5b85993c5f42","observation_id":"007934fa-2349-496f-b37e-a30d47134543","resolution":{"observed_at":"2026-07-11T02:47:51.186585Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2607.08288","last_updated":"2026-07-09T09:32:03Z","snapshot_observed_at":"2026-08-06T13:22:34.232413Z","submitted_at":"2026-07-09T09:32:03Z","title":"From Legacy Documentation to OSCAL: An MCP-Based Agent Pipeline for Threat-Informed Continuous Compliance in Critical Infrastructure","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-10T10:00:19.465944Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2607.08288"},"observation_digest":"sha256:63933f39a879840cf7cf0d6e8697891a22520bdca63d0221b41270cf11281d6e","observation_id":"f95f48ac-37b7-4c98-9eac-80bdac932ef6","resolution":{"observed_at":"2026-07-10T10:07:01.028882Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.01333/citation-record","integrity":"/paper/2506.01333/integrity","json":"/paper/2506.01333/citation-record.json","paper":"/paper/2506.01333"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:26.611173Z","title":"Model Context Protocol Specification,","venue":null,"work_id":"003e6894-7787-4387-acfd-0218cfdb3c74","year":2025},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:16.988288Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:35fcb45b7ed8369d34dd0dd150c883dfe3626754068206367df57803386df907","observation_id":"f33f15f5-9bbd-49d1-87aa-56ef48f8664e","resolution":{"observed_at":"2026-08-07T11:49:26.690555Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:26.382240Z","title":"MCP is a powerful new AI cod- ing technology: Understand the risks,","venue":null,"work_id":"ad38aa40-b901-4c73-9f0f-e5c870baf587","year":2024},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:17.135449Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:9b398a59ba5d66ec89b4c9dcc9eb9bff2781c4a2531814ea94fb63e9ad82d41a","observation_id":"db7352a8-29bd-4505-8887-a2136f709ad2","resolution":{"observed_at":"2026-08-07T11:49:26.517081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:26.101198Z","title":"Model Context Protocol has prompt injec- tion security problems,","venue":null,"work_id":"b32698bb-961e-4ac8-8d11-95e4b1cc5b0c","year":2024},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:17.310460Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:c2618cb57b19794f70e1792d1150cb55cc2d4a5f1e6fd8528306a398c2fde129","observation_id":"ef7c512b-1a66-40e4-9d1b-61e62334cf61","resolution":{"observed_at":"2026-08-07T11:49:26.284651Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.03221","last_updated":"2024-05-06T07:30:31Z","snapshot_observed_at":"2026-08-12T23:18:20.694766Z","submitted_at":"2024-05-06T07:30:31Z","title":"Spatial and Surface Correspondence Field for Interaction Transfer","version":1},"cited_work":{"arxiv_id":"2405.03221","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.03221","snapshot_observed_at":"2026-08-07T11:49:21.016395Z","title":"Spatial and Surface Correspondence Field for Interaction Transfer","venue":"cs.CV","work_id":"b62279ad-a8b7-4332-8c6f-ddc05bb4c700","year":2024},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:17.481181Z"},"links":{"cited_paper":"/paper/2405.03221","citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:2b3afb1f22abbb4460cd4b8e5a4ef2a9d17676f30d4f805be67d7aa8add5bb90","observation_id":"951b7460-74e7-40b8-845a-9f64ffe4487a","resolution":{"observed_at":"2026-08-07T11:49:21.168080Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:25.954268Z","title":"The oauth 2.0 authorization framework,","venue":null,"work_id":"e3585af0-fb2c-42d8-a958-cb9b36bf14b2","year":2012},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:17.663710Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:28ff59445d94675dfc94f28333982d0e5ac4bccfa7561d98e0942772e3980643","observation_id":"3d23eb70-b091-4406-94c0-f3012c6f2386","resolution":{"observed_at":"2026-08-07T11:49:26.034986Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:25.648855Z","title":"Json web token (jwt),","venue":null,"work_id":"b10114c5-9326-4fd9-ba59-acfd5416a0f8","year":2015},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:17.831579Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:89e323b26c5cc6b44b103e09b3e185d2bcf96a41bd7e7f50955cfd133e9a8c01","observation_id":"02e0e438-7b08-4420-91ff-0b7d32a86638","resolution":{"observed_at":"2026-08-07T11:49:25.826163Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:25.381315Z","title":"Json web signature (jws),","venue":null,"work_id":"0e2b07c1-381d-4a92-9306-a28ef93767ec","year":2015},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:17.993455Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:e62a080d1638f8c60dd49d3dc1aeb0969a60ef028e7ff8b8d753b1a391a65eea","observation_id":"77766c96-ca34-49b7-8490-ac62f6c2a322","resolution":{"observed_at":"2026-08-07T11:49:25.497481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:25.070831Z","title":"How We Built Cedar: A Verification-Guided Approach to Authorization,","venue":null,"work_id":"1b7b70cd-68cf-4678-9a2f-23fc2521d343","year":2024},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.128610Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:8524fd4012b3b34dde44a88354bc6dd8ecaf8b07c1a570b21d5606f8e25dc62c","observation_id":"d154320d-9833-412a-bc19-026cf030e9a7","resolution":{"observed_at":"2026-08-07T11:49:25.253399Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:24.818425Z","title":"Introduction to Open Pol- icy Agent,","venue":null,"work_id":"f05407e8-09e4-44fb-829b-65d90f1f0ede","year":null},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.235175Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:e9549fdf15550777297c3c5b1c8e95d43dcd74deb69e2f543ec85e4607d46256","observation_id":"a4e7ad5c-c430-4d33-89c2-cf0dd5baec90","resolution":{"observed_at":"2026-08-07T11:49:24.909460Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-07T11:49:18.396852Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.396852Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:20cc8ff8830ee3626becba580983d4f0371100fcfb24ba87f73b6b32094bfa0e","observation_id":"dc863da8-ffee-40a7-ba5f-6536273d983a","resolution":{"observed_at":"2026-08-07T11:49:18.396852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:24.503744Z","title":"Best Practices for Authorization in Microser- vices,","venue":null,"work_id":"a34f2688-4826-463d-bf7a-f8773e324ec8","year":2023},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.520915Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:7f3a03f09f05376d28303019f26b8d36cbd959d950561096cdaf4509b5ae5cfc","observation_id":"3ce302e7-c177-48e8-855e-7e1109d4b722","resolution":{"observed_at":"2026-08-07T11:49:24.664690Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:24.215443Z","title":"Android Permissions: User Attention, Comprehension, and Behavior,","venue":null,"work_id":"100861bb-51da-426a-a89c-f1e255269635","year":2012},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.692262Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:36257d061e2eba0aade5c4711207724c194144f97d75fc47c22f0d9763027a00","observation_id":"98c30bca-e75d-4440-9328-22126a5cf502","resolution":{"observed_at":"2026-08-07T11:49:24.362040Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:18.790300Z","title":"Persistent attacks on large language models beyond user injection,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.790300Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:1587653479f5518c73d70027bcefe267ab86247a394abb5dd12c37bcc0ae12ce","observation_id":"80b8e38d-bb34-40ec-9484-e7733db553ef","resolution":{"observed_at":"2026-08-07T11:49:18.790300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:24.021943Z","title":"Formalizing and benchmarking prompt injection attacks and defenses,","venue":null,"work_id":"f649bd94-f084-499e-9faa-c059d7d02820","year":2024},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.900055Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:b7260f1f9e2c734a49c17be6bc21c11b9b4752673fed257cbc9c856511d9e8b2","observation_id":"1193d196-3ff0-4d31-8981-047c5bcbdd2a","resolution":{"observed_at":"2026-08-07T11:49:24.093755Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.08623","last_updated":"2025-05-02T18:26:39Z","snapshot_observed_at":"2026-08-07T16:06:28.979271Z","submitted_at":"2025-04-11T15:25:58Z","title":"Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.08623","snapshot_observed_at":"2026-08-07T11:49:19.002067Z","title":"Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:19.002067Z"},"links":{"cited_paper":"/paper/2504.08623","citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:ce743de50cbab98692c8bed5b33bb5db6e4be5e1363d513631f52dbdc13404d7","observation_id":"eba585a5-e2cf-4623-8610-e4bb00368685","resolution":{"observed_at":"2026-08-07T11:49:19.002067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:23.729064Z","title":"A comprehensive formal security analysis of oauth 2.0,","venue":null,"work_id":"e8fed90a-0e5a-42ac-bedc-e1892790f63a","year":2016},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:19.197167Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:d99e66451f7f0008bdff9a902e8a03a401b3f0d3975dcc49e57a547d24b3fd20","observation_id":"7d371ea2-96f1-476b-a899-bc0d84734cfc","resolution":{"observed_at":"2026-08-07T11:49:23.874565Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:23.235507Z","title":"Reports on api security,","venue":null,"work_id":"39c73131-8d14-4010-863e-8f79d3bb19a7","year":2025},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:19.506012Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:23f28d7f429d143ea3aac254c1e58679e070c9b0c2045bd8953d9004872c0485","observation_id":"4dc10100-0935-40fb-ae05-13b1d95bf1bc","resolution":{"observed_at":"2026-08-07T11:49:23.361900Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:22.911051Z","title":"A new tool wants to save open source from supply chain attacks,","venue":null,"work_id":"b16f0ad1-68fa-447d-b9bd-cf622a2b44ed","year":null},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:19.619978Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:e6af35dc8b0550f1f082eab7754452903fa8cd82e3796a65c4c0a1f60f13930b","observation_id":"7bfaac96-e971-497d-a3fd-548b700df164","resolution":{"observed_at":"2026-08-07T11:49:23.038394Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:22.276491Z","title":"7 container security best practices,","venue":null,"work_id":"f227d2cb-2b09-406b-ae61-fdf974c43860","year":null},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:20.021886Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:b87578a4ddb3e2d8197d9e06c38498b4c0527ad468da907bfe2cd8c296078dd7","observation_id":"bda61746-8268-4aa8-9e36-cf60d2baf92b","resolution":{"observed_at":"2026-08-07T11:49:22.479520Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:21.774842Z","title":"A method for obtaining digital signatures and public-key cryptosys- tems,","venue":null,"work_id":"ac01c635-f300-45e4-816d-fa39586478a0","year":1978},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:20.341572Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:0ec510e15fc06341bb9440cd5fd28b7f1a8192ff73b063a2cfc48b3ee485a60b","observation_id":"90b13210-7cba-4c95-ae31-90106c1455af","resolution":{"observed_at":"2026-08-07T11:49:21.903061Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:21.590941Z","title":"Katz and Y","venue":null,"work_id":"50b34811-768c-4bc3-bd2c-fe3c09fb4791","year":2014},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:20.461147Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:1b8111d26cf928fde6400d4e5734cb84b73fcad8221102aa6021a93e46c9cd17","observation_id":"8feff0a2-4485-412a-ae49-eb9826536078","resolution":{"observed_at":"2026-08-07T11:49:21.671610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:21.315656Z","title":"Decentralized identifiers (dids) v1.0,","venue":null,"work_id":"ea32bfc3-c733-4df2-ae3e-c7811810438c","year":2021},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:20.613796Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:52b28283dc99d865de63452d1148b374fb195d3aa4f8e47f12c8023fc4981dcc","observation_id":"ccc344f3-e708-4550-9889-7bfe14834440","resolution":{"observed_at":"2026-08-07T11:49:21.457414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:23.494498Z","title":"Available: https://publ.sec.uni-stuttgart","venue":null,"work_id":"112c86c8-443e-4caa-a271-616b0a3f964e","year":2016},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:19.372792Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:1a430fb7c016f72b1b79e53e3b113d94081b63c16f4da0f0db4442e3b94bd237","observation_id":"f5029ff7-d659-4d66-a27f-26cd38dd3ce8","resolution":{"observed_at":"2026-08-07T11:49:23.598164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:22.612152Z","title":"Available: https://www.wired.com/story/ sigstore-open-source-supply-chain-code-signing/","venue":null,"work_id":"14932264-7442-4a43-9e1e-3611bc9a0f62","year":null},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:19.762747Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:51bab8b7a30ec613013aeebc88b9e02c29f8ff57d5ac8976d2466ae0c8a72f5b","observation_id":"b1bc3ab7-1089-4bbd-b29c-ebf100d3347f","resolution":{"observed_at":"2026-08-07T11:49:22.784999Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:22.056811Z","title":"Available: https://www.reversinglabs","venue":null,"work_id":"94636ea3-619d-44e3-8fe0-ebed49ffef33","year":null},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:20.125465Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:7885ed6fb0ccfbc4564fe562adcfbf2308d225937facc0b7c4d2b19b8b4ca4b9","observation_id":"d5a8a00d-7487-41c5-bcf7-6f6af194a472","resolution":{"observed_at":"2026-08-07T11:49:22.193015Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":3,"verified_exact":0,"verified_fuzzy":21},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 11 inbound Pith citation observations for arXiv:2506.01333."}