Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-05-18T18:43:35.072919Z
Paper Citation Record · LEDGER
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
As of 6 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 16 inbound Pith citation observations for arXiv:2509.06572.
A citation records a reference. It does not transfer a finding from one paper to another.
Coverage vector
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-06T06:34:29.942622+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links, observed 2026-08-06T04:15:57.769042Z
A source-named dated measurement, never combined with another source.
Source: pith, observed 2026-08-05T02:28:24.338817Z
Reference resolution
57 of 57 outbound references displayed
- verified exact16
- verified fuzzy27
- unresolved14
- parse uncertain0
- malformed identifier0
- metadata mismatch0
External citation measurements
1
pith, observed 2026-08-05T02:28:24.338817Z
Outbound references
Observation d40b77c1-1196-4251-acf2-6d38ea73f26f · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 1
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.762546Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation d37c4715-0168-49f9-a84b-cb14dcfa213a · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 2
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.768129Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation c81aa366-d772-4142-8c1f-a6984c25dffb · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 3
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.798140Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 726c0b0f-a649-48ba-9f55-4545718792b6 · outbound
This paper cites https://secresearcher100.github.io/, Accessed: 2025-11-09.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem https://secresearcher100.github.io/, Accessed: 2025-11-09
Reference 4
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.856096Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 3d9714d7-a4d9-44c5-b558-c3e14c4176cb · outbound
This paper cites https://github.com/punkpeye/awesome-mcp-servers/blob/main/README.md, Ac- cessed: 2025-11-13.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem https://github.com/punkpeye/awesome-mcp-servers/blob/main/README.md, Ac- cessed: 2025-11-13
Reference 5
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.851963Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 2e651b36-9c0f-48e2-a0ff-107b5a1d668f · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 6
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.858685Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation d21d9ce2-31fe-4e5b-b966-38d1a4449085 · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 7
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.849013Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation d8a2cd2a-b8f0-4bcc-a688-c809735473d4 · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 8
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.843291Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 8d0b1e84-638f-4115-a84f-015882ed3e4d · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 9
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.845889Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation d91d72ee-73ab-4c44-8fcc-566c3e6140f2 · outbound
This paper cites https://github.com/baranwang/mcp-trends-hub, Accessed: 2025-11- 13.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem https://github.com/baranwang/mcp-trends-hub, Accessed: 2025-11- 13
Reference 10
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.864120Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 57a8bcb1-e40d-4f51-8840-4f086441864a · outbound
This paper cites https://github.com/brightdata/brightdata-mcp, Accessed: 2025-11- 13.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem https://github.com/brightdata/brightdata-mcp, Accessed: 2025-11- 13
Reference 11
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.867251Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 55e5a7f9-3583-4c69-94d9-7f95d4d781fd · outbound
This paper cites https://github.com/cswkim/discogs-mcp-server, Accessed: 2025- 11-13.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem https://github.com/cswkim/discogs-mcp-server, Accessed: 2025- 11-13
Reference 12
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.846134Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 630a20f7-f561-4040-89f0-998caa73cffa · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 13
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.840324Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 3032f0a0-fd76-4375-b6cb-28852dc65df4 · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 14
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.872984Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation e75d1e54-344d-4d83-92a7-88839426100e · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 15
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.829395Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation d17c512b-73e7-4235-bc3d-79c673188bba · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 16
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.819688Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation a96ae741-8472-40d2-8874-9161f5116896 · outbound
This paper cites https://github.com/modelcontextprotocol/python-sdk, Ac- cessed: 2025-11-13.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem https://github.com/modelcontextprotocol/python-sdk, Ac- cessed: 2025-11-13
Reference 17
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.822662Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation bd0b2735-0d55-4f35-96be-327ab85523f9 · outbound
This paper cites 17 Mind Your Server: A Systematic Study of Parasitic Attacks on the MCP Ecosystem.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem 17 Mind Your Server: A Systematic Study of Parasitic Attacks on the MCP Ecosystem
Reference 18
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.814205Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 99a7be1b-1828-458f-ad2e-63fd5647d3fb · outbound
This paper cites https://github.com/pimzino/agentic-tools-mcp, Accessed: 2025- 11-13.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem https://github.com/pimzino/agentic-tools-mcp, Accessed: 2025- 11-13
Reference 19
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.816750Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation a5345ba4-a4e9-42cc-b4e8-20ad608fc566 · outbound
This paper cites https://github.com/wonderwhy-er/ DesktopCommanderMCP, Accessed: 2025-11-13.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem https://github.com/wonderwhy-er/ DesktopCommanderMCP, Accessed: 2025-11-13
Reference 20
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.843049Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation e3db6e7a-04c4-4ec7-b497-12791241009b · outbound
This paper cites https://modelcontextprotocol.io/docs/getting-started/intro, Accessed: 2025-11-13.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem https://modelcontextprotocol.io/docs/getting-started/intro, Accessed: 2025-11-13
Reference 21
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.870263Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 55de0e05-cc25-44d0-a365-3de2c72f2767 · outbound
This paper cites https://invariantlabs.ai/blog/mcp-security- notification-tool-poisoning-attacks, Accessed: 2025-11-13.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem https://invariantlabs.ai/blog/mcp-security- notification-tool-poisoning-attacks, Accessed: 2025-11-13
Reference 22
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.825970Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 0ad6e549-3013-4fef-a93a-be56d6cb20d8 · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 23
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.848748Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 50c76853-6bac-4307-af1a-4818d0bc0b3e · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 24
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.861271Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation d4f20ebe-81cc-4d0a-b78d-ecbc0ae75b12 · outbound
This paper cites an unresolved cited work.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Unresolved cited work
Reference 25
- Resolution
- unresolved
- raw_fallback, observed 2026-05-18T18:52:49.787905Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation b516e5c2-b6a0-4547-b3fb-e39193e23811 · outbound
This paper cites Can llm-generated misinformation be detected? In NeurIPS 2023 Workshop on Regulatable ML.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Can llm-generated misinformation be detected? In NeurIPS 2023 Workshop on Regulatable ML
Reference 26
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.831812Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 0996be34-e99b-40d4-9cec-ea6ff530112b · outbound
This paper cites Bias and unfairness in information retrieval systems: New challenges in the llm era.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Bias and unfairness in information retrieval systems: New challenges in the llm era
Reference 27
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.825508Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 57558486-8723-47fb-813b-5a8be74628b6 · outbound
This paper cites they are uncultured.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem they are uncultured
Reference 28
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.823091Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation a3128b8c-aad2-411d-9ad6-892f5ac0d8c4 · outbound
This paper cites Realtoxicityprompts: Evaluating neural toxic degeneration in language models.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Realtoxicityprompts: Evaluating neural toxic degeneration in language models
Reference 29
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.840681Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 4283ea3c-e819-4d61-aa17-6e462aba5228 · outbound
This paper cites MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security
Reference 30
- Resolution
- verified exact
- arxiv_id, observed 2026-05-26T03:04:03.989565Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 887c4a3f-6c38-4855-a20e-901601ab78ee · outbound
This paper cites Stabletoolbench: Towards stable large-scale benchmarking on tool learning of large language models.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Stabletoolbench: Towards stable large-scale benchmarking on tool learning of large language models
Reference 31
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.828669Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 2005466c-431b-4fef-85ad-be46de5d4702 · outbound
This paper cites Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers
Reference 32
- Resolution
- verified exact
- local_arxiv, observed 2026-05-18T18:46:45.292162Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 31ef4e6f-6c64-4d88-b4cc-6de68f225064 · outbound
This paper cites Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions
Reference 33
- Resolution
- verified exact
- local_arxiv, observed 2026-05-18T18:46:45.250493Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 8a158a09-d814-4ba4-b490-1064ba8e0c44 · outbound
This paper cites Towards mitigating llm hallucination via self reflection.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Towards mitigating llm hallucination via self reflection
Reference 34
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.811185Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 99173f03-881c-4052-9cc9-4e303f6c987f · outbound
This paper cites MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System
Reference 35
- Resolution
- verified exact
- arxiv_id, observed 2026-05-18T18:46:45.310412Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 31334405-a484-447f-a088-a6a4e090f5f3 · outbound
This paper cites We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems
Reference 36
- Resolution
- verified exact
- arxiv_id, observed 2026-05-18T18:46:45.296720Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation a5da9f4b-692c-4d21-9aea-6d19634cb24b · outbound
This paper cites Is your code generated by chatgpt really correct? rigorous evaluation of large language models for code generation.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Is your code generated by chatgpt really correct? rigorous evaluation of large language models for code generation
Reference 37
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.788229Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 9425bf27-1adf-460c-9dd8-faba0bf5efc8 · outbound
This paper cites Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignment.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignment
Reference 38
- Resolution
- verified exact
- local_arxiv, observed 2026-05-18T18:46:45.269067Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 5e7e8c14-4d85-44ba-a246-7cf1b3268aac · outbound
This paper cites Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies
Reference 39
- Resolution
- verified exact
- arxiv_id, observed 2026-05-18T18:46:45.264261Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 587756a0-e7a7-4518-b57f-18dc52a8a4e7 · outbound
This paper cites {CodexLeaks}: Privacy leaks from code generation language models in {GitHub} copilot.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem {CodexLeaks}: Privacy leaks from code generation language models in {GitHub} copilot
Reference 40
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.835014Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 863f32c9-9e1d-47be-ae3c-2f76384b8a8f · outbound
This paper cites On the risk of misinformation pollution with large language models.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem On the risk of misinformation pollution with large language models
Reference 41
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.814610Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation c23901ef-b315-4d82-907b-ed4079e10334 · outbound
This paper cites Gorilla: Large language model connected with massive apis.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Gorilla: Large language model connected with massive apis
Reference 42
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.820387Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation e76fb261-44b5-424a-8ec5-ce4a1d378dde · outbound
This paper cites MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits
Reference 43
- Resolution
- verified exact
- arxiv_id, observed 2026-05-18T18:46:45.273873Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 8a59a21f-4572-4cb6-9614-04784099159d · outbound
This paper cites Characteristics of harmful text: Towards rigorous benchmarking of language models.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Characteristics of harmful text: Towards rigorous benchmarking of language models
Reference 44
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.811612Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 728eb273-d27c-47b2-a232-b261ae39c3bb · outbound
This paper cites HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns
Reference 45
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.782000Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 5c021a82-9ab4-40ae-8712-81bc745fd582 · outbound
This paper cites Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 46
- Resolution
- verified exact
- arxiv_id, observed 2026-05-18T18:46:45.245428Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation a9a04f6f-909b-4b69-a963-2b992e8d9b2d · outbound
This paper cites Language models don’t always say what they think: Unfaithful explanations in chain-of-thought prompting.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Language models don’t always say what they think: Unfaithful explanations in chain-of-thought prompting
Reference 47
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.837967Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 63e9ffe8-108a-41c2-89b7-9223ea87983a · outbound
This paper cites MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers
Reference 48
- Resolution
- verified exact
- arxiv_id, observed 2026-05-18T18:46:45.305941Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 32f91a35-1179-4478-a429-bc2d427c7971 · outbound
This paper cites Mpma: Preference manipulation attack against model context protocol.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Mpma: Preference manipulation attack against model context protocol
Reference 49
- Resolution
- verified exact
- arxiv_id, observed 2026-05-18T18:46:45.254990Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 9d74020d-4276-44f4-972a-d140ebd224d1 · outbound
This paper cites Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
Reference 50
- Resolution
- verified exact
- arxiv_id, observed 2026-06-30T02:16:09.705257Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation e607b093-071c-4251-92a7-6fabe6081358 · outbound
This paper cites Mcpsecbench: A systematic security benchmark and playground for testing model context protocols.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Mcpsecbench: A systematic security benchmark and playground for testing model context protocols
Reference 51
- Resolution
- verified exact
- arxiv_id, observed 2026-05-18T18:46:45.301125Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 82dcc78f-23a4-4c8a-a9df-c0c2f75bfebb · outbound
This paper cites LLM Lies: Hallucinations are not Bugs, but Features as Adversarial Examples.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem LLM Lies: Hallucinations are not Bugs, but Features as Adversarial Examples
Reference 52
- Resolution
- verified exact
- arxiv_id, observed 2026-05-18T18:46:45.287895Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation daf4f25a-562c-4057-bc1a-7d9803011af0 · outbound
This paper cites React: Synergizing reasoning and acting in language models.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem React: Synergizing reasoning and acting in language models
Reference 53
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.807245Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation b8fbcb23-7b80-4887-a5c6-b3569a9fcc23 · outbound
This paper cites How johnny can persuade llms to jailbreak them: Rethinking persuasion to challenge ai safety by humanizing llms.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem How johnny can persuade llms to jailbreak them: Rethinking persuasion to challenge ai safety by humanizing llms
Reference 54
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.804304Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 25a145fe-029a-4bba-9111-2c404aa8d64e · outbound
This paper cites On large language models’ resilience to coercive interrogation.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem On large language models’ resilience to coercive interrogation
Reference 55
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-05-18T18:52:49.804001Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation b3011f98-0994-4c8c-b364-91448d24138f · outbound
This paper cites When mcp servers attack: Taxonomy, feasibility, and mitigation.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem When mcp servers attack: Taxonomy, feasibility, and mitigation
Reference 56
- Resolution
- verified exact
- arxiv_id, observed 2026-05-18T18:46:45.278413Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation d8160a8a-3033-44f2-9619-4ae8d587ccbb · outbound
This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Universal and Transferable Adversarial Attacks on Aligned Language Models
Reference 57
- Resolution
- verified exact
- local_arxiv, observed 2026-05-18T18:46:45.259368Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Pith citing papers
Observation 54b3469d-bec5-4716-9ef6-e33ad0102de9 · inbound
Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions cites this paper.
Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 82
- Resolution
- metadata mismatch
- local_arxiv, observed 2026-05-13T09:02:40.444229Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 1e0c3268-2297-4bb0-a7de-6757463c13d1 · inbound
Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP cites this paper.
Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 51
- Resolution
- verified exact
- local_arxiv, observed 2026-05-16T05:07:20.797224Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation c86c3cb7-258c-4d38-81df-99d8141d6b39 · inbound
Combating Data Laundering in LLM Training cites this paper.
Combating Data Laundering in LLM Training Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 76
- Resolution
- unresolved
- no resolver link, observed 2026-07-13T14:08:35.474488Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d49b879c-3882-4b6c-850e-eeb3ae5ff61a · inbound
From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers cites this paper.
From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 76
- Resolution
- verified exact
- local_arxiv, observed 2026-05-21T10:44:07.972874Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 2875605b-9765-4f7b-a552-79b777177a3e · inbound
MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security cites this paper.
MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 67
- Resolution
- verified exact
- local_arxiv, observed 2026-05-10T21:10:46.822231Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation a1de31ae-6599-4eb0-944e-38f7290205a7 · inbound
MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems cites this paper.
MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 10
- Resolution
- verified exact
- local_arxiv, observed 2026-05-11T11:46:33.759350Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 85b94be2-15be-43e2-9cd9-a2c431b88b33 · inbound
Unsafe by Flow: Uncovering Bidirectional Data-Flow Risks in MCP Ecosystem cites this paper.
Unsafe by Flow: Uncovering Bidirectional Data-Flow Risks in MCP Ecosystem Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 66
- Resolution
- verified exact
- local_arxiv, observed 2026-05-11T02:20:52.278884Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation b9ab4f36-a3e4-4d6b-9b0f-87d68eb58838 · inbound
Behavioral Integrity Verification for AI Agent Skills cites this paper.
Behavioral Integrity Verification for AI Agent Skills Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 17
- Resolution
- verified exact
- local_arxiv, observed 2026-05-13T05:57:22.746167Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 777c753c-176a-4cea-b74c-5b3f5dfa0606 · inbound
A First Measurement Study on Authentication Security in Real-World Remote MCP Servers cites this paper.
A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 33
- Resolution
- verified exact
- local_arxiv, observed 2026-05-22T05:41:09.230627Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation bec08fc9-cc78-43bf-8e4f-2f40125561a7 · inbound
A Taxonomy of Runtime Faults in Model Context Protocol Servers cites this paper.
A Taxonomy of Runtime Faults in Model Context Protocol Servers Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 41
- Resolution
- verified exact
- local_arxiv, observed 2026-07-02T10:46:52.293973Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 17e7685f-acb6-42cb-9328-98cf88ecd7fb · inbound
Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation cites this paper.
Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 250
- Resolution
- metadata mismatch
- local_arxiv, observed 2026-06-27T13:20:56.735607Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 5757a4e7-4d94-4aaf-af46-14e0f79845cb · inbound
"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers cites this paper.
"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 37
- Resolution
- metadata mismatch
- local_arxiv, observed 2026-07-04T06:49:38.256456Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation e54c5080-5f76-46df-9d41-c7695efedf26 · inbound
ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP cites this paper.
ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 33
- Resolution
- verified exact
- local_arxiv, observed 2026-07-04T14:19:54.273818Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.
Observation 6c9b1a18-b51f-4185-90b8-598a6d872a4f · inbound
Rethinking MCP Security: A Large-Scale Study of Runtime MCP Servers and Security Scanner Reliability cites this paper.
Rethinking MCP Security: A Large-Scale Study of Runtime MCP Servers and Security Scanner Reliability Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 68
- Resolution
- unresolved
- no resolver link, observed 2026-07-14T07:09:56.559355Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4b5021b5-59a3-4246-8f14-5f95ba04e168 · inbound
Registry Descriptions Go Stale Unevenly: An 89-Day Measurement of Model Context Protocol Drift, and Why Drift-Ranked Re-Auditing Under-Covers It cites this paper.
Registry Descriptions Go Stale Unevenly: An 89-Day Measurement of Model Context Protocol Drift, and Why Drift-Ranked Re-Auditing Under-Covers It Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 3
- Resolution
- unresolved
- no resolver link, observed 2026-08-06T00:42:50.398803Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c56cf9dd-d3ee-4f6d-8f7d-0bac6645526b · inbound
Registry Descriptions Go Stale Unevenly: An 89-Day Measurement of Model Context Protocol Drift, and Why Drift-Ranked Re-Auditing Under-Covers It cites this paper.
Registry Descriptions Go Stale Unevenly: An 89-Day Measurement of Model Context Protocol Drift, and Why Drift-Ranked Re-Auditing Under-Covers It Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem
Reference 3
- Resolution
- unresolved
- no resolver link, observed 2026-08-06T04:15:57.769042Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.