{"as_of":"2026-08-06T18:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:04b50ddffdca2f8772bcc620d1377545e0d3d9c87d273899aac2cce8979fc5eb","coverage":[{"denominator":57,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":57,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-18T18:43:35.072919Z","state":"measured"},{"denominator":74,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":74,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T17:42:06.620914Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":1,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-07-06T21:00:55.979837Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-05-13T09:02:40.294491Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2503.23278"},"observation_digest":"sha256:2ee1f64bb49bf2a80e665f98f91b6b6298ff7c55704691530a6fef03bb2a36c4","observation_id":"54b3469d-bec5-4716-9ef6-e33ad0102de9","resolution":{"observed_at":"2026-05-13T09:02:40.444229Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2602.11327","last_updated":"2026-04-17T15:12:16Z","snapshot_observed_at":"2026-07-06T22:45:34.674215Z","submitted_at":"2026-02-11T19:58:23Z","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-16T05:05:16.370606Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2602.11327"},"observation_digest":"sha256:c3c3fd80bf37bb0111443f975d6b9c0ab3f0046611824c23b7965bb5a3fc90c3","observation_id":"1e0c3268-2297-4bb0-a7de-6757463c13d1","resolution":{"observed_at":"2026-05-16T05:07:20.797224Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Mind your server: A systematic study of parasitic toolchain attacks on the mcp ecosystem.arXiv preprint arXiv:2509.06572, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-05T14:07:36.314157Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:29179a970eb1f9f96982a9e45b9c71deaa81b3abb6ecc58e6a37cc7dc04a98e9","observation_id":"c86c3cb7-258c-4d38-81df-99d8141d6b39","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2604.01905","last_updated":"2026-05-19T08:31:57Z","snapshot_observed_at":"2026-07-06T22:51:40.181565Z","submitted_at":"2026-04-02T11:22:07Z","title":"From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-05-21T10:41:17.307952Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2604.01905"},"observation_digest":"sha256:66a930e656e11210b9a220da3521e7306d13646fd261e71e3754a203adc627a9","observation_id":"d49b879c-3882-4b6c-850e-eeb3ae5ff61a","resolution":{"observed_at":"2026-05-21T10:44:07.972874Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2604.07551","last_updated":"2026-04-08T19:53:26Z","snapshot_observed_at":"2026-07-06T22:55:46.307881Z","submitted_at":"2026-04-08T19:53:26Z","title":"MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-05-10T17:10:50.283791Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2604.07551"},"observation_digest":"sha256:f68faf5439b165c6e62d2340ed5a421583500484c079e17db279331b07d8a2c0","observation_id":"2875605b-9765-4f7b-a552-79b777177a3e","resolution":{"observed_at":"2026-05-10T21:10:46.822231Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:581b2b4b34935bc870c23b2c02e90e88ae07f1efad12dbd69a90aea3419604a9","observation_id":"a1de31ae-6599-4eb0-944e-38f7290205a7","resolution":{"observed_at":"2026-05-11T11:46:33.759350Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2605.07836","last_updated":"2026-05-08T15:03:51Z","snapshot_observed_at":"2026-07-31T10:42:12.328845Z","submitted_at":"2026-05-08T15:03:51Z","title":"Unsafe by Flow: Uncovering Bidirectional Data-Flow Risks in MCP Ecosystem","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-05-11T02:19:52.113212Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2605.07836"},"observation_digest":"sha256:d67efe68c16cbdb5b2e100b94552f43c8abec3ecca16d8e15391ca83292b671e","observation_id":"85b94be2-15be-43e2-9cd9-a2c431b88b33","resolution":{"observed_at":"2026-05-11T02:20:52.278884Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2605.11770","last_updated":"2026-05-12T08:41:09Z","snapshot_observed_at":"2026-07-06T23:23:34.924221Z","submitted_at":"2026-05-12T08:41:09Z","title":"Behavioral Integrity Verification for AI Agent Skills","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-13T05:54:34.922851Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2605.11770"},"observation_digest":"sha256:2cac2ee9418568354363f8e38272191fc8bb422288b708cdd239793f980f45dd","observation_id":"b9ab4f36-a3e4-4d6b-9b0f-87d68eb58838","resolution":{"observed_at":"2026-05-13T05:57:22.746167Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:bdee159bebbe279972a6c4e77c396fd9cc081e01f340df7361d58f6543a2ea12","observation_id":"777c753c-176a-4cea-b74c-5b3f5dfa0606","resolution":{"observed_at":"2026-05-22T05:41:09.230627Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2606.05339","last_updated":"2026-06-03T18:28:20Z","snapshot_observed_at":"2026-08-03T22:52:09.519428Z","submitted_at":"2026-06-03T18:28:20Z","title":"A Taxonomy of Runtime Faults in Model Context Protocol Servers","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-06-28T04:57:23.595251Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2606.05339"},"observation_digest":"sha256:8b55eef3252f845f573c6f78433d9a3b9e3f7063fb7cb3ca10ac190c6077ce8a","observation_id":"bec08fc9-cc78-43bf-8e4f-2f40125561a7","resolution":{"observed_at":"2026-07-02T10:46:52.293973Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":250,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:bdeaff009cecaccd3b9e9b2d0eee6a229751b78e0b136ee63481828531ae78b9","observation_id":"17e7685f-acb6-42cb-9328-98cf88ecd7fb","resolution":{"observed_at":"2026-06-27T13:20:56.735607Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:7910f60c00961b5ffe1fb422ea2fb52696ed0c3be97f2c9abd5f2ac689435c9a","observation_id":"5757a4e7-4d94-4aaf-af46-14e0f79845cb","resolution":{"observed_at":"2026-07-04T06:49:38.256456Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2606.27027","last_updated":"2026-06-25T13:35:28Z","snapshot_observed_at":"2026-07-07T00:01:15.803410Z","submitted_at":"2026-06-25T13:35:28Z","title":"ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-26T04:07:14.506108Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2606.27027"},"observation_digest":"sha256:f23bb8fb1a7b0233dfbf0c76dec07d9ee62892b227cf2a6a20c674ca0c4096ed","observation_id":"e54c5080-5f76-46df-9d41-c7695efedf26","resolution":{"observed_at":"2026-07-04T14:19:54.273818Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-07-14T07:09:56.559355Z","title":"MD5\": The exact MD5 string provided in the in- put. •","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11086","last_updated":"2026-07-13T04:55:16Z","snapshot_observed_at":"2026-08-05T22:43:13.293006Z","submitted_at":"2026-07-13T04:55:16Z","title":"Rethinking MCP Security: A Large-Scale Study of Runtime MCP Servers and Security Scanner Reliability","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-07-14T07:09:56.559355Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2607.11086"},"observation_digest":"sha256:80095d8477e8a88faa86960e1c01bc4b43543c626913c73848ea20a29117b892","observation_id":"6c9b1a18-b51f-4185-90b8-598a6d872a4f","resolution":{"observed_at":"2026-07-14T07:09:56.559355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-06T00:42:50.398803Z","title":"”Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00997","last_updated":"2026-08-04T23:19:10Z","snapshot_observed_at":"2026-08-06T18:02:06.835097Z","submitted_at":"2026-08-02T04:54:06Z","title":"Registry Descriptions Go Stale Unevenly: An 89-Day Measurement of Model Context Protocol Drift, and Why Drift-Ranked Re-Auditing Under-Covers It","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T00:42:50.398803Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2608.00997"},"observation_digest":"sha256:f8370267eceb9553d157e2e7437506fc6352735090b19aba8420f083e2af4225","observation_id":"4b5021b5-59a3-4246-8f14-5f95ba04e168","resolution":{"observed_at":"2026-08-06T00:42:50.398803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-06T04:15:57.769042Z","title":"”Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00997","last_updated":"2026-08-04T23:19:10Z","snapshot_observed_at":"2026-08-06T18:02:06.835097Z","submitted_at":"2026-08-02T04:54:06Z","title":"Registry Descriptions Go Stale Unevenly: An 89-Day Measurement of Model Context Protocol Drift, and Why Drift-Ranked Re-Auditing Under-Covers It","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T04:15:57.769042Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2608.00997"},"observation_digest":"sha256:c296d78792e8dff848e3bde56a8323592a7a82b658268afab2b75a6eb3d29083","observation_id":"c56cf9dd-d3ee-4f6d-8f7d-0bac6645526b","resolution":{"observed_at":"2026-08-06T04:15:57.769042Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-06T17:42:06.620914Z","title":"Mind your server: A systematic study of parasitic toolchain attacks on the mcp ecosystem.arXiv preprint arXiv:2509.06572(2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04741","last_updated":"2026-08-05T12:08:16Z","snapshot_observed_at":"2026-08-06T17:41:52.429267Z","submitted_at":"2026-08-05T12:08:16Z","title":"LoginTrap: Uncovering Task-Agnostic Phishing-Style Indirect Prompt Injection Attacks against LLM-based Web Agents","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T17:42:06.620914Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2608.04741"},"observation_digest":"sha256:2946fa58f96190c17d41e4cbd24b77e6545412a79786bf7a3303ad08b78794b9","observation_id":"234e6629-8eba-4481-9c64-4bcaa4b15888","resolution":{"observed_at":"2026-08-06T17:42:06.620914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2509.06572/citation-record","integrity":"/paper/2509.06572/integrity","json":"/paper/2509.06572/citation-record.json","paper":"/paper/2509.06572"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"65d38e49-0530-4857-b1e0-3feb8f8d27f7","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:544639216ce2bca248a38f345a47a011ae099d01e77d6e46a0e67dde6d0d73a3","observation_id":"d40b77c1-1196-4251-acf2-6d38ea73f26f","resolution":{"observed_at":"2026-05-18T18:52:49.762546Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"6bffa85a-03ce-4f10-a3f1-9f1b05e015b8","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:3d27db9f6198436e28dd79bb23e212b53525ae1679eb99c337b21e811cfd0fab","observation_id":"d37c4715-0168-49f9-a84b-cb14dcfa213a","resolution":{"observed_at":"2026-05-18T18:52:49.768129Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"fa24d53b-11c2-4214-bf10-b5d9b60a8009","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:2561977d11af0332bd0b874ad20aaee4b2af9c711594e6256d658cf3159c3a03","observation_id":"c81aa366-d772-4142-8c1f-a6984c25dffb","resolution":{"observed_at":"2026-05-18T18:52:49.798140Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://secresearcher100.github.io/, Accessed: 2025-11-09","venue":null,"work_id":"7840ecee-7a99-40a4-addb-5c10bddab44a","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:9c5c65feafde4e5988447fb4a4870d5126b2f4fe58f2554118a0e3c0112abe8e","observation_id":"726c0b0f-a649-48ba-9f55-4545718792b6","resolution":{"observed_at":"2026-05-18T18:52:49.856096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://github.com/punkpeye/awesome-mcp-servers/blob/main/README.md, Ac- cessed: 2025-11-13","venue":null,"work_id":"f9db7990-c38c-424e-acf0-78df817e7835","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:9b81354889c2096f10d92a5890424ffb8a624dd3370c49f087653fa2a0a79c15","observation_id":"3d9714d7-a4d9-44c5-b558-c3e14c4176cb","resolution":{"observed_at":"2026-05-18T18:52:49.851963Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"58323f76-c9ab-44d1-9066-3719c1abd6eb","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:8d397eb6833334c7a80858b0fc1c5a069661865df5c300de4acde3f0acd87083","observation_id":"2e651b36-9c0f-48e2-a0ff-107b5a1d668f","resolution":{"observed_at":"2026-05-18T18:52:49.858685Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"407b23a2-54f6-45f3-b32b-63115653fa04","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:fb06aaadc506c38cfe0ef70c50c1252fe6c54cc0901ac6e751c2a227fd4ce960","observation_id":"d21d9ce2-31fe-4e5b-b966-38d1a4449085","resolution":{"observed_at":"2026-05-18T18:52:49.849013Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"5ba0fab7-ca69-4e2c-9ca5-caaf1ac25ab5","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:5d45f461d8b4b23c292f1b108ab8dfe100647f1945432c9ae5b72b6cba39603e","observation_id":"d8a2cd2a-b8f0-4bcc-a688-c809735473d4","resolution":{"observed_at":"2026-05-18T18:52:49.843291Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"88ad1900-1c8e-456b-9cf1-8dcbefc686b4","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:1eb1baf595b98c8fab66b458c7d0d5d947eb0eff1236cd25939d62b5aa4ffc53","observation_id":"8d0b1e84-638f-4115-a84f-015882ed3e4d","resolution":{"observed_at":"2026-05-18T18:52:49.845889Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://github.com/baranwang/mcp-trends-hub, Accessed: 2025-11- 13","venue":null,"work_id":"9a267a3f-f3b1-4905-9497-74eeb3a1553a","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:588afc8d6bd0e311dc41130d5697ae08395f26c42941e5d2b1d48d3090aa51ea","observation_id":"d91d72ee-73ab-4c44-8fcc-566c3e6140f2","resolution":{"observed_at":"2026-05-18T18:52:49.864120Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://github.com/brightdata/brightdata-mcp, Accessed: 2025-11- 13","venue":null,"work_id":"dee208c6-c915-408e-aebf-703354f3c221","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:3f2eeff3db9e4a250a8ade91675792e9b1a26712c36980dd778f6fb0f6ed4ce4","observation_id":"57a8bcb1-e40d-4f51-8840-4f086441864a","resolution":{"observed_at":"2026-05-18T18:52:49.867251Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://github.com/cswkim/discogs-mcp-server, Accessed: 2025- 11-13","venue":null,"work_id":"05cc4898-bb82-4091-8382-ec9f9f8ba1c9","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:440979de77054785173e84fb905dd848f52d98048d4431420d1839cd812a37a1","observation_id":"55e5a7f9-3583-4c69-94d9-7f95d4d781fd","resolution":{"observed_at":"2026-05-18T18:52:49.846134Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"3c2e9fc2-775d-459e-9386-b8c647528850","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:253bdeedaa370cb433bc884a118488f7510063aec9008339f46d359220819f48","observation_id":"630a20f7-f561-4040-89f0-998caa73cffa","resolution":{"observed_at":"2026-05-18T18:52:49.840324Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"928cdbf4-f43f-48c8-967f-b444a6a66881","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:69acbd6d331ead3b892aba5b71b3f6d768a95535faeca8ba2c3ffaea439f982d","observation_id":"3032f0a0-fd76-4375-b6cb-28852dc65df4","resolution":{"observed_at":"2026-05-18T18:52:49.872984Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"abf62913-8b9b-4c23-8c85-ad3ee4316cd7","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:a5cb65faa9354acf66be5ecede9484e615ae4d39e6c301c59ede8c9b0791244a","observation_id":"e75d1e54-344d-4d83-92a7-88839426100e","resolution":{"observed_at":"2026-05-18T18:52:49.829395Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"386f3ec9-43df-4ba2-b5ef-e00e16b8e8a4","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:9e8f776984c34ab6f648e3e964f3d15288ee6539b499440e74b80cb4a6c0efad","observation_id":"d17c512b-73e7-4235-bc3d-79c673188bba","resolution":{"observed_at":"2026-05-18T18:52:49.819688Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://github.com/modelcontextprotocol/python-sdk, Ac- cessed: 2025-11-13","venue":null,"work_id":"3fff31d3-ada6-40a2-b1c9-a3b9f4fd3ae3","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:ff208ccef56c1b24d6bc82e99c2ab7b55b34fcb2e452afb6a1e98ec25bb99969","observation_id":"a96ae741-8472-40d2-8874-9161f5116896","resolution":{"observed_at":"2026-05-18T18:52:49.822662Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"17 Mind Your Server: A Systematic Study of Parasitic Attacks on the MCP Ecosystem","venue":null,"work_id":"9c62ffe0-7dad-46cf-881b-6b38ba16a5fa","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:82b9477ecfb20f42751f58a4b3909f99b8abea6608b24e82352fe6e17a3c1b34","observation_id":"bd0b2735-0d55-4f35-96be-327ab85523f9","resolution":{"observed_at":"2026-05-18T18:52:49.814205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://github.com/pimzino/agentic-tools-mcp, Accessed: 2025- 11-13","venue":null,"work_id":"c8ce893b-11ec-4fb2-a377-c9277ff54e4c","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:622e54af048819db78042879ef131dc88e61260f06937170df388d7b02b5ba0e","observation_id":"99a7be1b-1828-458f-ad2e-63fd5647d3fb","resolution":{"observed_at":"2026-05-18T18:52:49.816750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://github.com/wonderwhy-er/ DesktopCommanderMCP, Accessed: 2025-11-13","venue":null,"work_id":"218faf6a-c926-434b-b9e9-601823ee93f1","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:82c7d099f8d974cad5aaf0e599903fb6435f9e4f385dd3d9d879f42fa68e1d70","observation_id":"a5345ba4-a4e9-42cc-b4e8-20ad608fc566","resolution":{"observed_at":"2026-05-18T18:52:49.843049Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://modelcontextprotocol.io/docs/getting-started/intro, Accessed: 2025-11-13","venue":null,"work_id":"7e44f09d-508d-431e-94c3-e259e92ace50","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:c3eb2ca16762d67637d9f49385cadbce215a52c40d392ade44cdca6fc52d6b7a","observation_id":"e3db6e7a-04c4-4ec7-b497-12791241009b","resolution":{"observed_at":"2026-05-18T18:52:49.870263Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://invariantlabs.ai/blog/mcp-security- notification-tool-poisoning-attacks, Accessed: 2025-11-13","venue":null,"work_id":"d0730003-59bd-495e-8f40-0134246ea692","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:3e6f777d7a794a1175670cd65ca0d6d8ecd78663fad211f9bd51c3f7ec551168","observation_id":"55de0e05-cc25-44d0-a365-3de2c72f2767","resolution":{"observed_at":"2026-05-18T18:52:49.825970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"7f445a06-79df-4097-bff4-782b377d9041","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:95e13bee9d43b34632b2a2b75cb984cbc40f4d055ac6f225a8a566b007eb451b","observation_id":"0ad6e549-3013-4fef-a93a-be56d6cb20d8","resolution":{"observed_at":"2026-05-18T18:52:49.848748Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"6941e579-e551-440b-b6ce-67670368051e","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:621c08e1e1c7e9c750b6b60f1bdaea0af2652bab9370646756ee7b3ea1a5acef","observation_id":"50c76853-6bac-4307-af1a-4818d0bc0b3e","resolution":{"observed_at":"2026-05-18T18:52:49.861271Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"2d6efb78-e07b-4c13-99e1-6aa24ef8e1cb","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:e0c1bcf4d7bbc4ad93deab17ea017a697d96975a9972ae316a936056bd81ba75","observation_id":"d4f20ebe-81cc-4d0a-b78d-ecbc0ae75b12","resolution":{"observed_at":"2026-05-18T18:52:49.787905Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Can llm-generated misinformation be detected? In NeurIPS 2023 Workshop on Regulatable ML","venue":null,"work_id":"55ecb069-9897-45e9-ae4d-77a07033abfa","year":2023},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:9336a69b7144995717ec52c7bf8c8931b0de95dc21bac9d53ea61a038d0b0b20","observation_id":"b516e5c2-b6a0-4547-b3fb-e39193e23811","resolution":{"observed_at":"2026-05-18T18:52:49.831812Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Bias and unfairness in information retrieval systems: New challenges in the llm era","venue":null,"work_id":"70e4f86c-df36-489a-baf0-64138e82b6d8","year":2024},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:767c36872c3081f358d39064e29c73822558cee0693ac57e6997ecc932e14a3a","observation_id":"0996be34-e99b-40d4-9cec-ea6ff530112b","resolution":{"observed_at":"2026-05-18T18:52:49.825508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"they are uncultured","venue":null,"work_id":"dc9761d9-e5fb-4c5e-8539-274f6f4f2134","year":2024},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:9bc92e1998365ab48a17ccddb68c9ad076850cd30fcf01137ddecc0a8352811c","observation_id":"57558486-8723-47fb-813b-5a8be74628b6","resolution":{"observed_at":"2026-05-18T18:52:49.823091Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Realtoxicityprompts: Evaluating neural toxic degeneration in language models","venue":null,"work_id":"ce70ac93-7cde-4834-ab1c-a1d8484ee07d","year":2020},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:6872e9abd1cfb1f2287a92a3022d104645ab8b3bf26bb318902349c86863b88d","observation_id":"a3128b8c-aad2-411d-9ad6-892f5ac0d8c4","resolution":{"observed_at":"2026-05-18T18:52:49.840681Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.12538","last_updated":"2026-05-25T07:08:19Z","snapshot_observed_at":"2026-08-05T19:27:11.696122Z","submitted_at":"2025-08-18T00:23:41Z","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","version":2},"cited_work":{"arxiv_id":"2508.12538","doi":"10.48550/arxiv.2508.12538","metadata_source":"pith","pith_arxiv_id":"2508.12538","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Systematic analysis of mcp security","venue":"cs.CR","work_id":"8fd13327-e45c-448a-b5b9-5157ef86072d","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2508.12538","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:05dade61c7a475e26c105b636f78e2a7ff8e2531878c5d9d0b9f2849c00d64d0","observation_id":"4283ea3c-e819-4d61-aa17-6e462aba5228","resolution":{"observed_at":"2026-05-26T03:04:03.989565Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Stabletoolbench: Towards stable large-scale benchmarking on tool learning of large language models","venue":null,"work_id":"3ec8488e-8fa7-44dd-8abf-c326b0bfc089","year":2024},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:3614538ed0993374740e6369204500fb249516c9d022faf94ea0aa323f13a9d5","observation_id":"887c4a3f-6c38-4855-a20e-901601ab78ee","resolution":{"observed_at":"2026-05-18T18:52:49.828669Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.13538","last_updated":"2026-04-13T03:45:24Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-06-16T14:26:37Z","title":"Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers","version":5},"cited_work":{"arxiv_id":"2506.13538","doi":"10.48550/arxiv.2506.13538","metadata_source":"pith","pith_arxiv_id":"2506.13538","snapshot_observed_at":"2026-07-11T02:47:50.715137Z","title":"Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers","venue":"cs.SE","work_id":"c7825b29-3cba-435a-a713-36c73899e542","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2506.13538","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:4df232999e2afb45e221de719d8b71b4ed2a945e5698306a999ad95251397a52","observation_id":"2005466c-431b-4fef-85ad-be46de5d4702","resolution":{"observed_at":"2026-05-18T18:46:45.292162Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-07-06T21:00:55.979837Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"cited_work":{"arxiv_id":"2503.23278","doi":"10.48550/arxiv.2503.23278","metadata_source":"pith","pith_arxiv_id":"2503.23278","snapshot_observed_at":"2026-07-11T02:47:49.588216Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","venue":"cs.CR","work_id":"3eff6b57-ab58-474f-afd9-4e115a5818a9","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2503.23278","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:26e142182cad09eeac65c4da44ba7847e1cc5eabefa0e137078f110bfb83b730","observation_id":"31ef4e6f-6c64-4d88-b4cc-6de68f225064","resolution":{"observed_at":"2026-05-18T18:46:45.250493Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-05-24T11:23:19.786497+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T11:23:19.786497+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards mitigating llm hallucination via self reflection","venue":null,"work_id":"ca4aaf83-d94a-4e07-85e8-4b5f94614a4c","year":2023},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:8ee4527360de2dfd85ac3db8785309dde75936b39f410a54040a8d83766a4dcc","observation_id":"8a158a09-d814-4ba4-b490-1064ba8e0c44","resolution":{"observed_at":"2026-05-18T18:52:49.811185Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-05T17:22:12.116167Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:65d7749225592581df892b16d052bcee0b4b4d0b4357d915c3408eb740cee631","observation_id":"99173f03-881c-4052-9cc9-4e303f6c987f","resolution":{"observed_at":"2026-05-18T18:46:45.310412Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-07-06T21:54:05.316043Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"cited_work":{"arxiv_id":"2507.06250","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.06250","snapshot_observed_at":"2026-07-02T10:46:52.261801Z","title":"We urgently need privilege management in mcp: A measurement of api usage in mcp ecosystems","venue":null,"work_id":"70f58549-1129-4d59-95a8-dabbebfb62a8","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2507.06250","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:7ebf55c3d2a42f28ce097db10c1e4673426dfa429a2e7c3b1a6cf02cb16f61de","observation_id":"31334405-a484-447f-a088-a6a4e090f5f3","resolution":{"observed_at":"2026-05-18T18:46:45.296720Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Is your code generated by chatgpt really correct? rigorous evaluation of large language models for code generation","venue":null,"work_id":"fbe84daa-0fc3-462e-8a39-9e28e581b6b6","year":2023},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:ad5c4af9c5520122fb53d9aae111da76e6952f85188a4a3666eaa1a213c43f64","observation_id":"a5da9f4b-692c-4d21-9aea-6d19634cb24b","resolution":{"observed_at":"2026-05-18T18:52:49.788229Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.05374","last_updated":"2024-03-21T00:21:14Z","snapshot_observed_at":"2026-08-02T17:09:20.540788Z","submitted_at":"2023-08-10T06:43:44Z","title":"Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignment","version":2},"cited_work":{"arxiv_id":"2308.05374","doi":"10.3390/su15053939","metadata_source":"pith","pith_arxiv_id":"2308.05374","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignment","venue":"cs.AI","work_id":"d518ae99-5488-4834-83a4-63e88f9878dc","year":2023},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2308.05374","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:fd43e09b68be848afe1e0d2a2ccbfb8ebb49fd65742f3591952e209f78e91fd4","observation_id":"9425bf27-1adf-460c-9dd8-faba0bf5efc8","resolution":{"observed_at":"2026-05-18T18:46:45.269067Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.08623","last_updated":"2025-05-02T18:26:39Z","snapshot_observed_at":"2026-08-06T13:22:03.038270Z","submitted_at":"2025-04-11T15:25:58Z","title":"Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies","version":2},"cited_work":{"arxiv_id":"2504.08623","doi":"10.48550/arxiv.2504.08623","metadata_source":"pith","pith_arxiv_id":"2504.08623","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Enterprise-grade security for the model context protocol (mcp): Frameworks and mitigation strategies","venue":"cs.CR","work_id":"80489713-f98e-4575-ab22-f0756c10a0b1","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2504.08623","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:9651ba2d08cce5afdac4e50d112967c70e9270ca5729872c75e120c837b9ba86","observation_id":"5e7e8c14-4d85-44ba-a246-7cf1b3268aac","resolution":{"observed_at":"2026-05-18T18:46:45.264261Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"{CodexLeaks}: Privacy leaks from code generation language models in {GitHub} copilot","venue":null,"work_id":"e72aa330-d3a4-45f6-93b1-f9d2fa357c29","year":2023},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:5822629c0c62a7d9bcc841531e2b754327c0e21e020b86f541b0acbe4bb635f2","observation_id":"587756a0-e7a7-4518-b57f-18dc52a8a4e7","resolution":{"observed_at":"2026-05-18T18:52:49.835014Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"On the risk of misinformation pollution with large language models","venue":null,"work_id":"45df1b6d-782c-409e-bc78-0a3b755315e2","year":2023},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:24ac023f98bd683d5dd6e4c3fd830799ed95cc75a169b1ae552020966cc46fe3","observation_id":"863f32c9-9e1d-47be-ae3c-2f76384b8a8f","resolution":{"observed_at":"2026-05-18T18:52:49.814610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Gorilla: Large language model connected with massive apis","venue":null,"work_id":"1fecbe6d-dba0-4841-b430-f3193512ba7c","year":2024},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:3ac23825279d059c2d0f6f5ffbd6694d071d15b44171540d9c55e76da332b4e9","observation_id":"c23901ef-b315-4d82-907b-ed4079e10334","resolution":{"observed_at":"2026-05-18T18:52:49.820387Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.03767","last_updated":"2025-04-11T16:59:05Z","snapshot_observed_at":"2026-08-04T11:49:52.391715Z","submitted_at":"2025-04-02T21:46:02Z","title":"MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits","version":2},"cited_work":{"arxiv_id":"2504.03767","doi":"10.48550/arxiv.2504.03767","metadata_source":"pith","pith_arxiv_id":"2504.03767","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp safety audit: Llms with the model context protocol allow major security exploits","venue":"cs.CR","work_id":"d5c42cc2-8444-459f-bcc5-f36d34de7a47","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2504.03767","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:7ea534a68d3f52d76a57112bafa907d8a72ed8c080111ed0988fce9fa9a5dd55","observation_id":"e76fb261-44b5-424a-8ec5-ce4a1d378dde","resolution":{"observed_at":"2026-05-18T18:46:45.273873Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Characteristics of harmful text: Towards rigorous benchmarking of language models","venue":null,"work_id":"92d980c0-033f-40b1-b5a4-7b5554490da7","year":2022},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:c9d0c61aacd45ad0369cd6101229df06ab0c5c1b509881ba239bf8dfa0ee2290","observation_id":"8a59a21f-4572-4cb6-9614-04784099159d","resolution":{"observed_at":"2026-05-18T18:52:49.811612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns","venue":null,"work_id":"b18dfc23-4975-405a-9a56-ed38da1b0c64","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:d207641228a46acf9dfa4b83832f78ce684532ac665d20d1af986f11229ae853","observation_id":"728eb273-d27c-47b2-a232-b261ae39c3bb","resolution":{"observed_at":"2026-05-18T18:52:49.782000Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.02040","last_updated":"2025-09-14T07:48:51Z","snapshot_observed_at":"2026-08-03T23:17:56.403566Z","submitted_at":"2025-05-31T08:01:11Z","title":"Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem","version":4},"cited_work":{"arxiv_id":"2506.02040","doi":"10.48550/arxiv.2506.02040","metadata_source":"pith","pith_arxiv_id":"2506.02040","snapshot_observed_at":"2026-07-11T02:47:51.130321Z","title":"Beyond the protocol: Unveiling attack vectors in the model context protocol ecosystem","venue":"cs.CR","work_id":"899e620a-990a-4612-88fb-8dfed87e3238","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2506.02040","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:79fb9292eda660fe2ec610f5553e50fc17823f44f379336f5f48e2e83e1a1bd8","observation_id":"5c021a82-9ab4-40ae-8712-81bc745fd582","resolution":{"observed_at":"2026-05-18T18:46:45.245428Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Language models don’t always say what they think: Unfaithful explanations in chain-of-thought prompting","venue":null,"work_id":"cd97329b-b9c5-4ddb-99c1-f406a025d96e","year":2023},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:bc19be2a91abae419e8c165de7e41b79082ced1a688c5e69754a4035ecf2ec5d","observation_id":"a9a04f6f-909b-4b69-a963-2b992e8d9b2d","resolution":{"observed_at":"2026-05-18T18:52:49.837967Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.14925","last_updated":"2025-08-19T10:12:35Z","snapshot_observed_at":"2026-08-05T18:59:41.612871Z","submitted_at":"2025-08-19T10:12:35Z","title":"MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers","version":1},"cited_work":{"arxiv_id":"2508.14925","doi":"10.48550/arxiv.2508.14925","metadata_source":"pith","pith_arxiv_id":"2508.14925","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Wang, MCPTox: A systematic benchmark for MCP server security, arXiv preprint arXiv:2508.14925 (2025)","venue":"cs.CR","work_id":"53c44cac-ba71-4460-afef-2280250ee899","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2508.14925","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:a44a67b2d768b3f37e35803fd879c779e9ba2906cbc8574999452be0fb6bb554","observation_id":"63e9ffe8-108a-41c2-89b7-9223ea87983a","resolution":{"observed_at":"2026-05-18T18:46:45.305941Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2505.11154","doi":"10.48550/arxiv.2505.11154","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mpma: Preference manipulation attack against model context protocol","venue":"ArXiv.org","work_id":"a2dcd840-29d4-4ee6-b5dc-2eff7e281fb5","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:57726454e4f1c6839172ab675ec63cfbd8eb998d4d9757f66208056c52cd4536","observation_id":"32f91a35-1179-4478-a429-bc2d427c7971","resolution":{"observed_at":"2026-05-18T18:46:45.254990Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.05755","last_updated":"2026-06-28T05:20:23Z","snapshot_observed_at":"2026-08-05T05:09:38.175982Z","submitted_at":"2025-09-06T15:48:49Z","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","version":6},"cited_work":{"arxiv_id":"2509.05755","doi":"10.48550/arxiv.2509.05755","metadata_source":"pith","pith_arxiv_id":"2509.05755","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"On the security of tool-invocation prompts for llm-based agentic systems: An empirical risk assessment","venue":"cs.CR","work_id":"a4731da9-0223-47b1-a697-e45bf22632b5","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2509.05755","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:7c7f0e0226310d168a8d9276148f912fc645f7201d889bad5b61c08ae86e35b0","observation_id":"9d74020d-4276-44f4-972a-d140ebd224d1","resolution":{"observed_at":"2026-06-30T02:16:09.705257Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2508.13220","doi":"10.48550/arxiv.2508.13220","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcpsecbench: A systematic security benchmark and playground for testing model context protocols","venue":"arXiv (Cornell University)","work_id":"4a91f798-a23b-4420-afe8-5230f40ee3e1","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:0887d0da0058e06ece923cfe1540551f8ffe557ed0e2b01500483fbbb0ec7fa8","observation_id":"e607b093-071c-4251-92a7-6fabe6081358","resolution":{"observed_at":"2026-05-18T18:46:45.301125Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01469","last_updated":"2024-08-04T16:26:14Z","snapshot_observed_at":"2026-08-06T01:14:15.953789Z","submitted_at":"2023-10-02T17:01:56Z","title":"LLM Lies: Hallucinations are not Bugs, but Features as Adversarial Examples","version":3},"cited_work":{"arxiv_id":"2310.01469","doi":"10.48550/arxiv.2310.01469","metadata_source":"arxiv_reference","pith_arxiv_id":"2310.01469","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"LLM lies: Hallucinations are not bugs, but features as adversarial examples","venue":"arXiv (Cornell University)","work_id":"cadc8a4b-182f-4389-9d2e-1ab43b34859b","year":2023},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2310.01469","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:ee2f3c6e9ec0db5cfac28262fdf2aa3b6cbaed864f52594433776ee938732970","observation_id":"82dcc78f-23a4-4c8a-a9df-c0c2f75bfebb","resolution":{"observed_at":"2026-05-18T18:46:45.287895Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"React: Synergizing reasoning and acting in language models","venue":null,"work_id":"e3662af1-e2d3-41e3-a5ae-f7f35c6f264c","year":2023},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:e4bb0d868014a81ee489568accd909f3972cde27df949de1bb4063e6cd400c05","observation_id":"daf4f25a-562c-4057-bc1a-7d9803011af0","resolution":{"observed_at":"2026-05-18T18:52:49.807245Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"How johnny can persuade llms to jailbreak them: Rethinking persuasion to challenge ai safety by humanizing llms","venue":null,"work_id":"d4ac613c-78cf-4f8e-abb0-c9f588aaf9fd","year":2024},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:7dea7999067b9fbaea2967c69b9b339ba163931d4a919f46021e943f67d87fd1","observation_id":"b8fbcb23-7b80-4887-a5c6-b3569a9fcc23","resolution":{"observed_at":"2026-05-18T18:52:49.804304Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"On large language models’ resilience to coercive interrogation","venue":null,"work_id":"c5660b7e-e65f-4e72-9254-b0c54d7c01c9","year":2024},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:5300cae7269684bbfe679d96277f67cf722b6e0127f842d5507b5fca1fca447d","observation_id":"25a145fe-029a-4bba-9111-2c404aa8d64e","resolution":{"observed_at":"2026-05-18T18:52:49.804001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2509.24272","doi":"10.48550/arxiv.2509.24272","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"When mcp servers attack: Taxonomy, feasibility, and mitigation","venue":"ArXiv.org","work_id":"4df473ca-7315-4733-8c17-9a74916114e4","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:ddfa2e1552734b092173629a60d298be880fd910b2479e68b7f6be5282ed32be","observation_id":"b3011f98-0994-4c8c-b364-91448d24138f","resolution":{"observed_at":"2026-05-18T18:46:45.278413Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":"2307.15043","doi":"10.48550/arxiv.2307.15043","metadata_source":"pith","pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","venue":"cs.CL","work_id":"3322fa86-1768-4677-8425-dd326b45e078","year":2023},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:20f67791180769d8c004fc9a1b8898e37e47ed5d03568b784596e3bbfde3498d","observation_id":"d8160a8a-3033-44f2-9619-4ae8d587ccbb","resolution":{"observed_at":"2026-05-18T18:46:45.259368Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T23:50:40.271168+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","latest_version":5,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem"},"reference_resolution":{"displayed":57,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":14,"verified_exact":16,"verified_fuzzy":27},"total_outbound_references":57},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 17 inbound Pith citation observations for arXiv:2509.06572."}