{"as_of":"2026-08-07T10:28:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c35d0dc959bcc3ca11009251e3ad8dd6a100dbd68facdfc4682e1945c6fa6888","coverage":[{"denominator":17,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T20:05:47.661367Z","state":"measured"},{"denominator":22,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":22,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-28T04:57:23.595251Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T10:46:52.261801Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"cited_work":{"arxiv_id":"2507.06250","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.06250","snapshot_observed_at":"2026-07-02T10:46:52.261801Z","title":"We urgently need privilege management in mcp: A measurement of api usage in mcp ecosystems","venue":null,"work_id":"70f58549-1129-4d59-95a8-dabbebfb62a8","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2507.06250","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:418d15aa3ecbb5d08ae47a4ec71583f3debdf9963b5a39a41c396e73204a822a","observation_id":"31334405-a484-447f-a088-a6a4e090f5f3","resolution":{"observed_at":"2026-05-18T18:46:45.296720Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"cited_work":{"arxiv_id":"2507.06250","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.06250","snapshot_observed_at":"2026-07-02T10:46:52.261801Z","title":"We urgently need privilege management in mcp: A measurement of api usage in mcp ecosystems","venue":null,"work_id":"70f58549-1129-4d59-95a8-dabbebfb62a8","year":2025},"citing_paper":{"arxiv_id":"2510.14133","last_updated":"2026-04-15T13:47:37Z","snapshot_observed_at":"2026-07-06T22:32:47.087967Z","submitted_at":"2025-10-15T22:02:30Z","title":"Formalizing the Safety, Security, and Functional Properties of Agentic AI Systems","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-18T06:38:40.544764Z"},"links":{"cited_paper":"/paper/2507.06250","citing_paper":"/paper/2510.14133"},"observation_digest":"sha256:0a6eff87f0a38c28788dec8689dacd15876297d47e3600da55e3b7d69ca7e345","observation_id":"00230d23-e33d-4167-ac83-b0582ccd737a","resolution":{"observed_at":"2026-05-18T06:41:00.523216Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"cited_work":{"arxiv_id":"2507.06250","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.06250","snapshot_observed_at":"2026-07-02T10:46:52.261801Z","title":"We urgently need privilege management in mcp: A measurement of api usage in mcp ecosystems","venue":null,"work_id":"70f58549-1129-4d59-95a8-dabbebfb62a8","year":2025},"citing_paper":{"arxiv_id":"2510.21236","last_updated":"2026-04-24T09:59:19Z","snapshot_observed_at":"2026-07-06T22:33:58.663508Z","submitted_at":"2025-10-24T08:10:36Z","title":"AgentBound: Securing Execution Boundaries of AI Agents","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-18T05:12:23.542793Z"},"links":{"cited_paper":"/paper/2507.06250","citing_paper":"/paper/2510.21236"},"observation_digest":"sha256:2a329cbf8ee51283c74b4957cfa970c560e7fd038053c164d804722a6aac4a0d","observation_id":"e3cd4559-8020-4c5e-a1ab-e4037b4d1923","resolution":{"observed_at":"2026-05-18T05:15:54.520159Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"cited_work":{"arxiv_id":"2507.06250","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.06250","snapshot_observed_at":"2026-07-02T10:46:52.261801Z","title":"We urgently need privilege management in mcp: A measurement of api usage in mcp ecosystems","venue":null,"work_id":"70f58549-1129-4d59-95a8-dabbebfb62a8","year":2025},"citing_paper":{"arxiv_id":"2605.14312","last_updated":"2026-05-14T03:23:51Z","snapshot_observed_at":"2026-08-02T14:41:28.516568Z","submitted_at":"2026-05-14T03:23:51Z","title":"Making OpenAPI Documentation Agent-Ready: Detecting Documentation and REST Smells with a Multi-Agent LLM System","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-15T02:44:01.980796Z"},"links":{"cited_paper":"/paper/2507.06250","citing_paper":"/paper/2605.14312"},"observation_digest":"sha256:cc63636e452def591d8034bffeb03706f1360cd97a17e590d9be9ee215ef3f27","observation_id":"f97a35ec-dee7-4206-98bf-1a21ddf27724","resolution":{"observed_at":"2026-05-15T02:48:33.928089Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"cited_work":{"arxiv_id":"2507.06250","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.06250","snapshot_observed_at":"2026-07-02T10:46:52.261801Z","title":"We urgently need privilege management in mcp: A measurement of api usage in mcp ecosystems","venue":null,"work_id":"70f58549-1129-4d59-95a8-dabbebfb62a8","year":2025},"citing_paper":{"arxiv_id":"2606.05339","last_updated":"2026-06-03T18:28:20Z","snapshot_observed_at":"2026-08-03T22:52:09.519428Z","submitted_at":"2026-06-03T18:28:20Z","title":"A Taxonomy of Runtime Faults in Model Context Protocol Servers","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-28T04:57:23.595251Z"},"links":{"cited_paper":"/paper/2507.06250","citing_paper":"/paper/2606.05339"},"observation_digest":"sha256:e0d755aeddf6455da7edf89c62af2e0c1568b8fd6c782ac15101ee86f0615128","observation_id":"f20b5a9f-a185-4974-8b64-a720f1959ad2","resolution":{"observed_at":"2026-07-02T10:46:52.263539Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.06250/citation-record","integrity":"/paper/2507.06250/integrity","json":"/paper/2507.06250/citation-record.json","paper":"/paper/2507.06250"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:48.027531Z","title":"Introducing the model context protocol,","venue":null,"work_id":"c44c6ff3-6aab-4b75-93f9-8c8238a70018","year":2024},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.574323Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:e445093cd71aa659610800cab983fb143c2d6429940c022d9958222d177004dd","observation_id":"b197b347-9a74-4b97-81dd-449b9fc29178","resolution":{"observed_at":"2026-08-06T20:05:48.034084Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:48.007091Z","title":"Model context protocol specification (latest) - protocol revision: 2024- 11-05,","venue":null,"work_id":"b4f48909-a297-4970-8144-64978b524c00","year":2024},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.580349Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:37421b995a0998789c052b3ccc4da36dddd087f3c414a58c42311df39a2b9804","observation_id":"5d4f3a01-939d-4746-ac5f-f87f08c086ea","resolution":{"observed_at":"2026-08-06T20:05:48.012926Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:47.990448Z","title":"DEMO: starving permission-hungry android apps using securank,","venue":null,"work_id":"e96b9a4f-c5c5-42a5-ae63-44c3f06f0b4d","year":2016},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.585642Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:e5501e000b6307f477d747b16b89ee9ec9c57bde3c72a6016a6b331e66834acd","observation_id":"1982c0ef-9375-45f1-b88d-0f7220890b6d","resolution":{"observed_at":"2026-08-06T20:05:47.995392Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:47.974272Z","title":"Autocog: Measuring the description-to-permission fidelity in android applica- tions,","venue":null,"work_id":"50047d9f-70c3-4edf-92e3-36621872a283","year":2014},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.590408Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:111f0ddc3afe4463dc745c844d49c7cac0226cb99641a0caf209c27c7ce14f4c","observation_id":"2a680c13-77c6-4a86-b513-037f3c5bb5ec","resolution":{"observed_at":"2026-08-06T20:05:47.979429Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:47.955935Z","title":"Vetting undesirable behaviors in android apps with permission use analysis,","venue":null,"work_id":"274656e8-45f2-4ec0-ab42-5c7a4fa32c47","year":2013},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.595384Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:225f1e71520d9c5e24889c350124f943aa98a90f8bf021e7457a00863dd0901f","observation_id":"bce1e17e-d910-470c-ba82-2fa59a08f426","resolution":{"observed_at":"2026-08-06T20:05:47.961656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:47.918101Z","title":"Pscout: analyzing the android permission specification,","venue":null,"work_id":"9295383d-239b-42cd-8807-24fa3b8f1cad","year":2012},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.605914Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:9896397b111ef068a6055554966c04e93ab9c4eaa58f9834628db8796c69d001","observation_id":"c2054a7c-e3fe-4ecb-b3a1-4d5bf7ee2264","resolution":{"observed_at":"2026-08-06T20:05:47.923797Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:47.893245Z","title":"Android per- missions demystified,","venue":null,"work_id":"2d47ea48-a077-4d14-8aac-70a009112e69","year":2011},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.611238Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:d399b29bffdae59cf90a0873bdd3a9ce92362d95587bee169334ec549c62a4fa","observation_id":"a00f76ce-8a64-4962-918b-0cbc1a98e351","resolution":{"observed_at":"2026-08-06T20:05:47.900526Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:47.871438Z","title":"A methodology for empirical analysis of permission-based security models and its application to android,","venue":null,"work_id":"91aca6a8-4284-4319-946b-3f645d0db071","year":2010},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.616207Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:9da9d73bd6b18b951a036bb13daa2570d8e7d4094daa52f6ae8a9e778a49104c","observation_id":"be0704c0-4595-40a4-b78c-99e8ab4b1839","resolution":{"observed_at":"2026-08-06T20:05:47.876510Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:47.852131Z","title":"Fine-grained in-context permission classification for android apps using control-flow graph embedding,","venue":null,"work_id":"3f862e38-5776-4568-a915-5be4e822a61a","year":2023},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.620510Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:512071edc768a35392b3b86298bbff70ff5c92628d29ae9e93135f7ea7f445b3","observation_id":"1f67783d-4327-49a9-b446-30388508bc79","resolution":{"observed_at":"2026-08-06T20:05:47.859095Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:47.832162Z","title":"Right to know, right to refuse: Towards UI perception- based automated fine-grained permission controls for android apps,","venue":null,"work_id":"ff62a8f3-37d4-4045-8205-82c70fc126cc","year":2022},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.625341Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:d018d30888c248bc2c297ae4f22ee974b462d4e6f72d76173c4e70502746f7c2","observation_id":"a8e20e85-9266-41d8-ab6b-8b53e0937e1c","resolution":{"observed_at":"2026-08-06T20:05:47.837117Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:47.815303Z","title":"Flow permissions for android,","venue":null,"work_id":"375e02a0-6e2c-434d-8089-221d19da9e93","year":2013},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.630627Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:819448f2932641c309a0aa5e4883243ce452d7e04fdc48006b4f59c7e907060f","observation_id":"18f87c1b-423f-4d4d-80fc-60ed151e6365","resolution":{"observed_at":"2026-08-06T20:05:47.820510Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:47.796602Z","title":"Automatically securing permission-based software by reducing the attack surface: an application to android,","venue":null,"work_id":"da8a31ca-2518-4fe1-aef1-93540e3f5e3c","year":2012},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.636654Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:f8d2afcadf579273a57ee5c55737f1601b7dd22b90c01e64fba70dcfcd337187","observation_id":"6a19cdce-7356-417a-bbca-6aadc8ecef58","resolution":{"observed_at":"2026-08-06T20:05:47.802902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:47.775491Z","title":"A survey on model context protocol: Architecture, state-of- the-art, challenges and future directions,","venue":null,"work_id":"1499231b-f31b-4fc2-ae72-7f2d5e8406db","year":2025},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.643069Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:6f95a6151b67da4fd6cb3008bb3a43a35b94b615ce8769f313529bbf5ce6bc30","observation_id":"ddd4208a-becd-491d-9da1-4fd96d8d0a01","resolution":{"observed_at":"2026-08-06T20:05:47.783954Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:47.754062Z","title":"Model context protocol (mcp): Landscape, security threats, and future research directions,","venue":null,"work_id":"f407f79b-dbfa-41d3-b6ac-22e04920e32e","year":2025},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.648056Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:be71186276170b7ec556d45cc9ff47f5db7dac97e16d88d41571a2e2918c5655","observation_id":"fbae95d5-c41c-4d1a-80f0-ef6075ece676","resolution":{"observed_at":"2026-08-06T20:05:47.761538Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-05T17:22:12.116167Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-06T20:05:47.655253Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.655253Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:7a313ef3f492402f388a5f1a66b8e03214c668fe6f5bbdb961acc554ee6d20cd","observation_id":"ba3c1b54-0aad-4e56-a913-9674a18e3a44","resolution":{"observed_at":"2026-08-06T20:05:47.655253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.08623","last_updated":"2025-05-02T18:26:39Z","snapshot_observed_at":"2026-08-06T13:22:03.038270Z","submitted_at":"2025-04-11T15:25:58Z","title":"Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.08623","snapshot_observed_at":"2026-08-06T20:05:47.661367Z","title":"Enterprise-grade security for the model context protocol (mcp): Frameworks and mitigation strategies,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.661367Z"},"links":{"cited_paper":"/paper/2504.08623","citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:cb0330fdf8859c09eb5cbddadf7d8407d9b1378ca784ebd66d8b65c6aad6bd58","observation_id":"6270d863-8ccf-46a0-92eb-7578ef17b02a","resolution":{"observed_at":"2026-08-06T20:05:47.661367Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T20:05:47.936826Z","title":null,"venue":null,"work_id":"6109b6ad-262f-4564-9e94-3840d63d4fd1","year":2013},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":2013,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.600550Z"},"links":{"citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:27c15c4ff0a5edae7d4b6c567ab15836cd7e025e7d1c0719dd107f8cdfefcda3","observation_id":"86251c0a-c2b7-4861-93e7-86e08d008314","resolution":{"observed_at":"2026-08-06T20:05:47.943268Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems"},"reference_resolution":{"displayed":17,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":2,"verified_exact":0,"verified_fuzzy":14},"total_outbound_references":17},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 17 of 17 outbound references and 5 inbound Pith citation observations for arXiv:2507.06250."}