{"as_of":"2026-08-11T17:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:73e0de5a075bfba0b1f0ac31459fe9b5efa346dba0d8ac45a453f0ee84afcdde","coverage":[{"denominator":20,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":20,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T12:56:37.815027Z","state":"measured"},{"denominator":23,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":23,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T01:12:23.894152Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"cited_work":{"arxiv_id":"2601.01241","doi":"10.48550/arxiv.2601.01241","metadata_source":"pith","pith_arxiv_id":"2601.01241","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","venue":"cs.CR","work_id":"1a9b27ff-9e9c-48a4-a79d-17a03dc6ebf2","year":2026},"citing_paper":{"arxiv_id":"2604.07551","last_updated":"2026-04-08T19:53:26Z","snapshot_observed_at":"2026-08-11T12:03:05.273144Z","submitted_at":"2026-04-08T19:53:26Z","title":"MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-10T17:10:50.283791Z"},"links":{"cited_paper":"/paper/2601.01241","citing_paper":"/paper/2604.07551"},"observation_digest":"sha256:2d16fa612d997f5ceb16e9c96dd60aff29418218c09b234bc78049b4a683e889","observation_id":"ed1db894-ad93-4d8e-83a0-b231967ef15b","resolution":{"observed_at":"2026-06-23T04:13:43.712185Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"cited_work":{"arxiv_id":"2601.01241","doi":"10.48550/arxiv.2601.01241","metadata_source":"pith","pith_arxiv_id":"2601.01241","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","venue":"cs.CR","work_id":"1a9b27ff-9e9c-48a4-a79d-17a03dc6ebf2","year":2026},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":166,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2601.01241","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:7ab41cf59bc08535cd5e8a8265b0b145c06f98dbc9d151dbcfaf776d047d12ff","observation_id":"5a41c41c-68f9-44bf-83ba-d80483b520d7","resolution":{"observed_at":"2026-06-27T13:20:56.864193Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.01241","snapshot_observed_at":"2026-08-02T01:12:23.894152Z","title":"MCP- SandboxScan: W ASM-based secure execution and runtime analysis for MCP tools,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.894152Z"},"links":{"cited_paper":"/paper/2601.01241","citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:7abbc61527a9a69a19ca83927dd99ad0dc564d21befd7f7b8ec9594ca0f222be","observation_id":"70707f31-365b-4b5a-91ef-abab78b83267","resolution":{"observed_at":"2026-08-02T01:12:23.894152Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2601.01241/citation-record","integrity":"/paper/2601.01241/integrity","json":"/paper/2601.01241/citation-record.json","paper":"/paper/2601.01241"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.757404Z","title":"Introducing the model context protocol","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.757404Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:3239a377a0da1534f218d7be37720cac6bbf72632d78e2cade5749946bf773bf","observation_id":"6c5b5c1a-e5af-48f2-852e-1f30ff8984c2","resolution":{"observed_at":"2026-08-03T12:56:37.757404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.761151Z","title":"Agent based modelling and simulation tools: A review of the state-of-art software,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.761151Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:fa72ef7b5ca735f75430d469113ff0e62c2100d372a3fb490f98bb578b4cfec0","observation_id":"dc2ce85d-f3d7-4003-8bb0-b165ef12929e","resolution":{"observed_at":"2026-08-03T12:56:37.761151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.03767","last_updated":"2025-04-11T16:59:05Z","snapshot_observed_at":"2026-08-09T15:33:11.934104Z","submitted_at":"2025-04-02T21:46:02Z","title":"MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.03767","snapshot_observed_at":"2026-08-03T12:56:37.766883Z","title":"Mcp safety audit: Llms with the model context protocol allow major security exploits,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.766883Z"},"links":{"cited_paper":"/paper/2504.03767","citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:df693d2a95ff781acd45fb96e0326b0834753c67d55f4682c2aec7b21d567bb5","observation_id":"2a5e6bf6-46fc-45a3-9196-61a3f0614b78","resolution":{"observed_at":"2026-08-03T12:56:37.766883Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.770369Z","title":"MCIP: Protecting MCP safety via model contextual integrity protocol,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.770369Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:800babc1fa80e0a6b3719de009ea63859d58b50a891e2c3c9ab4c428b2ff3948","observation_id":"48247f33-2864-46e3-9dce-e3834ef283c8","resolution":{"observed_at":"2026-08-03T12:56:37.770369Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.02040","last_updated":"2025-09-14T07:48:51Z","snapshot_observed_at":"2026-08-07T13:11:17.932068Z","submitted_at":"2025-05-31T08:01:11Z","title":"Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.02040","snapshot_observed_at":"2026-08-03T12:56:37.773738Z","title":"Beyond the protocol: Unveiling attack vectors in the model context protocol (mcp) ecosystem,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.773738Z"},"links":{"cited_paper":"/paper/2506.02040","citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:33ab22771d8b97d8aaaf89096c39afb2c16c1545326df85f5c49ea08e7d167a6","observation_id":"7710cfb9-551a-46ed-83ea-bac9a10370ca","resolution":{"observed_at":"2026-08-03T12:56:37.773738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.777268Z","title":"Mcpscan,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.777268Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:8a3359016a1d4850a5ae546ae582e848eaa2403c6454cdb8c0ed1d49696cba95","observation_id":"1e9127bc-7581-4138-8135-2b3b32451f1d","resolution":{"observed_at":"2026-08-03T12:56:37.777268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.780243Z","title":"Scansat: Unlocking static and dynamic scan obfuscation,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.780243Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:8543c7d9c8e0d5b0959df87560693a13150e132188ec59eea0f3c6407eb18ec7","observation_id":"b816419c-d77d-4e91-914f-029cd2f04888","resolution":{"observed_at":"2026-08-03T12:56:37.780243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.783379Z","title":"Wave: a verifiably secure webassembly sandboxing runtime,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.783379Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:7e32397330486fe109fd914d7b501ec71337a5c01e370b5dc6ee9b7b0930af87","observation_id":"af362f7a-3a24-41f5-b5e4-13e119abff33","resolution":{"observed_at":"2026-08-03T12:56:37.783379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.786645Z","title":"Mcp-sandboxscan (anonymous github repository),","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.786645Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:c67e3273eaedafecde08c49427391d41e244acec7e5e92499e5a492cb328d846","observation_id":"30e4925e-7a17-4116-aa3a-2b590c23223b","resolution":{"observed_at":"2026-08-03T12:56:37.786645Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.14925","last_updated":"2025-08-19T10:12:35Z","snapshot_observed_at":"2026-08-08T10:31:54.102871Z","submitted_at":"2025-08-19T10:12:35Z","title":"MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.14925","snapshot_observed_at":"2026-08-03T12:56:37.789590Z","title":"Mcptox: A benchmark for tool poisoning attack on real-world mcp servers,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.789590Z"},"links":{"cited_paper":"/paper/2508.14925","citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:b8bc549a42d9a95206b5ef328f304dc420bf0931f83d4ead6d2bccb13b0f752b","observation_id":"280f776d-be11-4d24-ac11-78371288c7bd","resolution":{"observed_at":"2026-08-03T12:56:37.789590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.792816Z","title":"(2025, May) Mcp: Untrusted servers and confused clients, plus a sneaky exploit","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.792816Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:8ee194ba140acc656cd0061cae44df28a600ca5932c11e02814c2c741a5452ae","observation_id":"7444a582-fad4-4f66-bc9a-7bb07a5a207c","resolution":{"observed_at":"2026-08-03T12:56:37.792816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.795677Z","title":"Model context protocol (mcp): Landscape, security threats, and future research directions,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.795677Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:7adc02b96232efc8601a282cff5173c952ab6b45a165697ffb5a405a68eecb17","observation_id":"6c9029d0-1fbb-491b-84c8-e4d153af2acc","resolution":{"observed_at":"2026-08-03T12:56:37.795677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.801880Z","title":"Defeating prompt injections by design,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.801880Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:e2440634b634636b514a3fe801462a1754d7250d42d5409e80bd1b19f6db0da3","observation_id":"904b91d8-d520-4a7c-8241-a59de5581ea2","resolution":{"observed_at":"2026-08-03T12:56:37.801880Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.804547Z","title":"toxic flows,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.804547Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:062ac53b886aca69881a378e579e9198b9c915c61f68b3846055446ede4e1ee3","observation_id":"02695385-888e-48b7-afce-4879b6fd0d5c","resolution":{"observed_at":"2026-08-03T12:56:37.804547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.807218Z","title":"Cheatsheet – a practical guide for securely using third-party mcp servers 1.0,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.807218Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:187f590147b5d4e3e1ad297e5a7628879a21dc5bb05a64e944b5929395ab54e4","observation_id":"915d489b-3776-463f-b502-91dc5ac9b88f","resolution":{"observed_at":"2026-08-03T12:56:37.807218Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.809750Z","title":"Wasmbox: A lightweight wasm-based runtime for trustworthy multi-tenant embedded systems,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.809750Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:dd066ada15336398ea89b8ce738171c6127de63a03e87159d4217f2e353ec173","observation_id":"e22bce47-ee37-42bb-9e4c-1d939a477d19","resolution":{"observed_at":"2026-08-03T12:56:37.809750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.812388Z","title":"Sledge: a serverless-first, light-weight wasm runtime for the edge,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.812388Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:f37a5f3879164aec0aa1c2a282f819978a2bacfb2746f2f0d69acfda52f7be9a","observation_id":"6d75229a-b35c-4666-9baf-573d65519fde","resolution":{"observed_at":"2026-08-03T12:56:37.812388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-03T12:56:37.815027Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.815027Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:fcd53975b7d350a760faa567ef0679fa0fa4edbf3ccdb569d9325285a8dcf79d","observation_id":"9880b784-3879-4a9b-a146-10b28cb8d448","resolution":{"observed_at":"2026-08-03T12:56:37.815027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.764045Z","title":"Available: https://www.sciencedirect.com/science/articl e/pii/S1574013716301198","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.764045Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:e3e98db6fcbd4afa8602aa09fbd25e4fdbb7b7a1ba1175db04476cf4bd6732b5","observation_id":"4fb683bb-6132-4a0d-8405-ca7826cc23ce","resolution":{"observed_at":"2026-08-03T12:56:37.764045Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-07-06T21:00:55.979837Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.23278","snapshot_observed_at":"2026-08-03T12:56:37.798775Z","title":"Available: https://arxiv.org/abs/2503.23278","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.798775Z"},"links":{"cited_paper":"/paper/2503.23278","citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:e7c8927e7a7e4c15da3277112a66464140073eca88cf7b8a65bb9e5aee519fbd","observation_id":"81bdfb01-99dd-437e-83f5-5b5b4e47af74","resolution":{"observed_at":"2026-08-03T12:56:37.798775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools"},"reference_resolution":{"displayed":20,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":20,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":20},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 20 of 20 outbound references and 3 inbound Pith citation observations for arXiv:2601.01241."}