{"as_of":"2026-08-11T08:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:dc975c125833fd4c480bb46f366e8a66031acd96fdf19fefa525ac5c43f4f197","coverage":[{"denominator":50,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":50,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-22T05:36:12.341248Z","state":"measured"},{"denominator":51,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":51,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T01:16:23.004816Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.22333","snapshot_observed_at":"2026-08-04T01:16:23.004816Z","title":"A first measurement study on authentication security in real-world remote MCP servers,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:23.004816Z"},"links":{"cited_paper":"/paper/2605.22333","citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:55738ba2833396bda587220da92c7e77929cd30d7179ef576ec35cfd86e48a29","observation_id":"43561540-e1fc-4e87-bb2c-e736097c79aa","resolution":{"observed_at":"2026-08-04T01:16:23.004816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2605.22333/citation-record","integrity":"/paper/2605.22333/integrity","json":"/paper/2605.22333/citation-record.json","paper":"/paper/2605.22333"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Building agents that reach production systems with MCP","venue":null,"work_id":"d9f894a8-ebd6-477a-a182-b85336aeb9d7","year":2026},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:120f2ad96c8c7c6bcfa8b2f365c1cc76f024a0da719edc5ad9fb96066578186c","observation_id":"bdf7df91-3d2b-44c5-bc4f-371b065da2f1","resolution":{"observed_at":"2026-05-22T06:06:09.657457Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.16558","last_updated":"2026-04-27T18:24:07Z","snapshot_observed_at":"2026-07-06T22:33:28.866887Z","submitted_at":"2025-10-18T16:09:05Z","title":"A First Look at the Security Issues in the Model Context Protocol Ecosystem","version":2},"cited_work":{"arxiv_id":"2510.16558","doi":null,"metadata_source":"pith","pith_arxiv_id":"2510.16558","snapshot_observed_at":"2026-07-01T19:36:09.172292Z","title":"A First Look at the Security Issues in the Model Context Protocol Ecosystem","venue":"cs.CR","work_id":"28e11de0-2c75-445f-ae40-ea1475754e9e","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"cited_paper":"/paper/2510.16558","citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:bea552fce8cb4eae05c0ad435a322cc9071e043c4c4d3bbf78767daceacde0b6","observation_id":"1905b964-8460-4d4e-8f30-7304e5ff192a","resolution":{"observed_at":"2026-05-22T05:41:09.278247Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.10163","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Compatibility at a cost: Systematic discovery and exploitation of mcp clause-compliance vulnerabilities","venue":null,"work_id":"98dd5d22-66ce-410b-b3c5-aa8443ae271c","year":2026},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:2037a7166c95ab2817b079796170efca59d5ca97f153613b4dfa8e5de7ba5511","observation_id":"cceeac17-b3e3-4fb7-8741-2cf98c84286f","resolution":{"observed_at":"2026-05-22T05:41:09.270708Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"When MCP meets OAuth: Common pitfalls lead- ing to one-click account takeover","venue":null,"work_id":"8ec36917-3752-4dc3-83ac-4d11733ad80f","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:5041823585375be4d0ceedce90b4959ece3fee078768392acfad7cccb8d4f9d2","observation_id":"fb87a1a5-bedf-437a-8662-3a65ebbcc570","resolution":{"observed_at":"2026-05-22T06:06:09.632222Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Authorization – model context protocol","venue":null,"work_id":"12e64f02-a0d0-4cbd-8507-7f32c209d49f","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:5fb834f3f344c5454c7b41263b9081c475611f7b5fe7a4970e18090ab9c72cbb","observation_id":"c2b9d6f2-a608-4fff-a750-26c474821369","resolution":{"observed_at":"2026-05-22T06:06:09.670568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Oauch: Exploring security compliance in the oauth 2.0 ecosystem","venue":null,"work_id":"c87c443c-396b-4c4c-aec2-a1030e45432f","year":2022},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:68b48f0052c755e66e37b3d928a74ee4fdaef9b71aa04dedd65928d8cdb54031","observation_id":"8e4d28f4-a155-4401-8b89-254d3236724b","resolution":{"observed_at":"2026-05-22T06:06:09.666978Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.12538","last_updated":"2026-05-25T07:08:19Z","snapshot_observed_at":"2026-08-05T19:27:11.696122Z","submitted_at":"2025-08-18T00:23:41Z","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","version":2},"cited_work":{"arxiv_id":"2508.12538","doi":"10.48550/arxiv.2508.12538","metadata_source":"pith","pith_arxiv_id":"2508.12538","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Systematic analysis of mcp security","venue":"cs.CR","work_id":"8fd13327-e45c-448a-b5b9-5157ef86072d","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"cited_paper":"/paper/2508.12538","citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:2304cff2557a3d92d5b29231f5116e7a37f41938055b23f45d31027f496d6760","observation_id":"ccb75537-29e3-4471-ab05-658b6ad09c31","resolution":{"observed_at":"2026-05-26T03:04:03.989565Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.03767","last_updated":"2025-04-11T16:59:05Z","snapshot_observed_at":"2026-08-09T15:33:11.934104Z","submitted_at":"2025-04-02T21:46:02Z","title":"MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits","version":2},"cited_work":{"arxiv_id":"2504.03767","doi":"10.48550/arxiv.2504.03767","metadata_source":"pith","pith_arxiv_id":"2504.03767","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp safety audit: Llms with the model context protocol allow major security exploits","venue":"cs.CR","work_id":"d5c42cc2-8444-459f-bcc5-f36d34de7a47","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"cited_paper":"/paper/2504.03767","citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:93261c1db1b69bf4d862c4112e95b9c6aa01d66e44c90db9a5d74c55a181d2f8","observation_id":"f53176d4-899f-4261-b3d2-1629136f5374","resolution":{"observed_at":"2026-05-22T05:41:09.226585Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.13538","last_updated":"2026-04-13T03:45:24Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-06-16T14:26:37Z","title":"Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers","version":5},"cited_work":{"arxiv_id":"2506.13538","doi":"10.48550/arxiv.2506.13538","metadata_source":"pith","pith_arxiv_id":"2506.13538","snapshot_observed_at":"2026-07-11T02:47:50.715137Z","title":"Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers","venue":"cs.SE","work_id":"c7825b29-3cba-435a-a713-36c73899e542","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"cited_paper":"/paper/2506.13538","citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:d62c6af8f1d74c9bdd01e9e25c025cd86d527985a95f11f25a81ec88616f7f78","observation_id":"9a007b49-1d5c-4251-9461-38133b23485a","resolution":{"observed_at":"2026-05-22T05:41:09.222313Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2509.24272","doi":"10.48550/arxiv.2509.24272","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"When mcp servers attack: Taxonomy, feasibility, and mitigation","venue":"ArXiv.org","work_id":"4df473ca-7315-4733-8c17-9a74916114e4","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:32c0752d53d085a61853652ace8eacbdac06417ce2578b5122ab7e7262c9caf2","observation_id":"1037b651-b499-45d5-b6e5-df4d3d627f03","resolution":{"observed_at":"2026-05-22T05:41:09.306072Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Model Context Protocol","venue":null,"work_id":"1669fa8c-9e0b-48ee-9407-a1c9104d4089","year":2024},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:0928ff31117b25c8856f0fb2570d6170722544b84eaaebf6d7304e0341cbdc0f","observation_id":"b8fdb540-da59-4479-8345-6824fa0165cc","resolution":{"observed_at":"2026-05-22T06:06:09.623685Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2511.20920","doi":"10.48550/arxiv.2511.20920","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Securing the model context protocol (mcp): Risks, controls, and governance","venue":"ArXiv.org","work_id":"5c1b3760-dc99-4f11-9c6c-d0bf7541ee86","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:00fc43a8c8e1c308605206d0f6b40de557ead1f57fac8bb6da97e27a8d61ce0f","observation_id":"eae5fcde-7207-4f19-bf26-811a9b2cf0cb","resolution":{"observed_at":"2026-05-22T05:41:09.295900Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.17549","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T09:19:43.635386Z","title":"Breaking the protocol: Security anal- ysis of the model context protocol specification and prompt in- jection vulnerabilities in tool-integrated llm agents","venue":null,"work_id":"1db9ca2d-eba6-4e2e-830a-47115aa4a474","year":2026},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:9297d43689097c82125bc408e807d668d01510932291d3fc000552655390ba25","observation_id":"524d8aa4-f486-41d0-9375-b026fc419167","resolution":{"observed_at":"2026-05-22T05:41:09.288529Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2512.08290","doi":"10.48550/arxiv.2512.08290","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Systematization of knowledge: Security and safety in the model context protocol ecosystem","venue":"arXiv (Cornell University)","work_id":"c486762b-10b5-48a3-9036-c648717ac8b6","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:09df0577ad4aed1e011337b11873070c92072cfb4a80e80ced175c43574e2b7f","observation_id":"e225d668-1e81-4957-b1fd-96946fab4fd2","resolution":{"observed_at":"2026-05-22T05:41:09.283471Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Authorization – model context protocol","venue":null,"work_id":"dcfd77c8-d883-43db-bfbd-a3008f2735dc","year":2024},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:6abe31d497994d6a44708259f3de36ce0c3d9812f0851d308021726662fc9bae","observation_id":"cf1f0306-6cb6-4d4a-8c8b-73ffbed652f5","resolution":{"observed_at":"2026-05-22T06:06:09.652548Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Authorization – model context protocol","venue":null,"work_id":"20e73d87-be5e-411b-aba2-8745faef5176","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:d3f8bb1f57fb817e20ba7ea8686ed7f81f9558e5872b3c20a74523b2a5c442de","observation_id":"4e7f25d3-3ead-484b-a16d-f682d20bbad2","resolution":{"observed_at":"2026-05-22T06:06:09.662754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Proof Key for Code Exchange by OAuth Public Clients","venue":null,"work_id":"f92cd064-1da0-44bb-b6a1-3a3900fcd2d5","year":2015},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:1697c8620db63b1ede3b4b29e9cd425f80cc72e68b7a50274d22ed4bcf09b832","observation_id":"dee71381-b23d-4d23-9f1b-b4da6cd01f41","resolution":{"observed_at":"2026-05-22T06:06:09.640383Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"OAuth 2.0 Dynamic Client Registration Protocol","venue":null,"work_id":"c522b9b9-f880-4349-82ce-40c75fbc6098","year":2015},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:551da23b6d06859036136bc7af2279f557723423e46855133747aa6becce818e","observation_id":"02976ed3-e006-4939-bda7-622e0234d491","resolution":{"observed_at":"2026-05-22T06:06:09.628303Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Authorization – model context protocol","venue":null,"work_id":"b67db75b-06b7-4325-8e99-6465a9f0f47a","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:8739d6ba02ee8642cfa4db220e18c7a973851f50a3848e051792203ab948333c","observation_id":"7b968592-b846-4d72-9e5a-ab791eaf44b4","resolution":{"observed_at":"2026-05-22T05:56:09.910746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"OAuth 2.0 Protected Resource Metadata","venue":null,"work_id":"fadd7ff8-a17f-44f7-8647-05d93abd47b9","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:ef09512401e8b5ccf235dd87632039fb7dbfe3bb9a210396f60f76d9b5a2558f","observation_id":"ce482bd6-5d38-4287-84c9-bb23c7dc73c9","resolution":{"observed_at":"2026-05-22T05:56:09.896493Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Resource Indicators for OAuth 2.0","venue":null,"work_id":"87f9b753-0d93-4697-8bbc-d8607eaeebee","year":2020},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:02626e2ce09975ee9559b5de00b3e9eb5db770907dd9efbfdfd625988f2cbfb4","observation_id":"80578468-0f11-4e89-9cca-137579ae4984","resolution":{"observed_at":"2026-05-22T05:56:09.906861Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2603.07473","last_updated":"2026-07-21T07:52:02Z","snapshot_observed_at":"2026-08-10T06:47:39.115673Z","submitted_at":"2026-03-08T05:24:16Z","title":"Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems","version":2},"cited_work":{"arxiv_id":"2603.07473","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2603.07473","snapshot_observed_at":"2026-07-22T03:22:05.785229Z","title":"Give them an inch and they will take a mile: Understand- ing and measuring caller identity confusion in mcp-based ai systems","venue":null,"work_id":"35c209f2-fb98-436d-ac35-d46599fae402","year":2026},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"cited_paper":"/paper/2603.07473","citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:26b2c756f82f00cf78b995b3bf199f46cf43d5dd97663c0cf7931ac199200fc4","observation_id":"7a0eca17-ea45-48bb-9273-9acb3a6e46ec","resolution":{"observed_at":"2026-07-22T03:22:05.785229Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.09674","last_updated":"2025-01-16T17:11:21Z","snapshot_observed_at":"2026-08-10T19:43:51.309273Z","submitted_at":"2025-01-16T17:11:21Z","title":"Authenticated Delegation and Authorized AI Agents","version":1},"cited_work":{"arxiv_id":"2501.09674","doi":"10.48550/arxiv.2501.09674","metadata_source":"pith","pith_arxiv_id":"2501.09674","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Authenticated delegation and authorized ai agents","venue":"cs.CY","work_id":"1182c8d2-0bc2-40cc-affb-db1ec9679a3c","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"cited_paper":"/paper/2501.09674","citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:b864a847b7b7f1dede11a8b5b5125e0ce2728359bed24e2654ae8a5f84424642","observation_id":"a17470c7-a59a-4bdc-a9c6-161799b96ebc","resolution":{"observed_at":"2026-05-22T05:41:09.257378Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.24775","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Aip: Agent identity protocol for verifiable delegation across mcp and a2a","venue":null,"work_id":"0a1ce50b-ea3d-420c-8117-bac980c5c125","year":2026},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:e62d66ea25e651e871b4c00ea99af3e77a25f8023e2387971136764bd28eb0cd","observation_id":"982119ae-38ff-418a-a3f5-77c35a367f89","resolution":{"observed_at":"2026-05-22T05:41:09.245390Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"FOFA Search Engine","venue":null,"work_id":"bb0735fa-874f-43f6-b72e-ef2346756f38","year":2026},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:e91e83660d8d90000f504da0f46acca18798c239e70ba6326b8a632f8555f8d2","observation_id":"b8259874-2924-4496-b799-3c47f490f5f4","resolution":{"observed_at":"2026-05-22T05:56:09.914310Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Shodan Search Engine","venue":null,"work_id":"c9866505-28ad-4411-b812-8e8bddfe8d6f","year":2026},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:a5e1465a4b878186a3adc35892264f7168121ffbb5bfb22e4de49cec4c91dd2a","observation_id":"111e7c74-d05e-41fe-aa26-fe1e355e48fb","resolution":{"observed_at":"2026-05-22T05:56:09.918176Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Empirical scanning analysis of censys and shodan","venue":null,"work_id":"78e8d3b4-c349-472c-98ff-db95f94c4cc1","year":2021},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:edc50448a51c2fac40b489cafd8d525cd9cc4c2990b6a71acbf4c40eef538828","observation_id":"87ffcc04-ecb3-488b-b58d-e16ffec7a066","resolution":{"observed_at":"2026-05-22T05:56:09.892885Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Burp Suite","venue":null,"work_id":"0058e7a3-b1ac-486a-b4a8-ea6baa67f2c5","year":2026},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:0ae39002619dc3b5ac9791f8d704cf15fcbb649b6929c1651e51533ae285142e","observation_id":"9ebbacca-5999-4097-8af6-bbe61db033c7","resolution":{"observed_at":"2026-05-22T05:56:09.900144Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"PortSwigger oauth-scan","venue":null,"work_id":"7d86bd85-1dd9-414a-97ca-cf260dcf19e3","year":2024},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:b37c9be94e10dc5b4f6245d063d03c8cf8d3a2cf8fa4cf5f746b02f319bc7a9f","observation_id":"99d58e09-34c3-4066-8763-6e8265d772fa","resolution":{"observed_at":"2026-05-22T05:56:09.889270Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Agent2Agent (A2A) Protocol","venue":null,"work_id":"6d9d9f54-3231-4216-88a3-d99e35f4a001","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:c6591151910f2d42329dabd74c8bd56a42f398b039cd779d157fdaf090474cd7","observation_id":"85ed821b-adaa-4e03-823f-db018cc98854","resolution":{"observed_at":"2026-05-22T05:56:09.903477Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.11327","last_updated":"2026-04-17T15:12:16Z","snapshot_observed_at":"2026-08-07T20:18:19.353329Z","submitted_at":"2026-02-11T19:58:23Z","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","version":2},"cited_work":{"arxiv_id":"2602.11327","doi":"10.48550/arxiv.2602.11327","metadata_source":"pith","pith_arxiv_id":"2602.11327","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","venue":"cs.CR","work_id":"53378fc1-d7c7-498a-8de3-bf0a8180b466","year":2026},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"cited_paper":"/paper/2602.11327","citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:88a6d61d29bfbd4ab1094da61e47ac26bf52073a86cdcfb1d4b203780a44d762","observation_id":"39dbc9b5-e533-4e00-bd99-213fafd3b929","resolution":{"observed_at":"2026-05-22T05:41:09.235247Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Model context protocol (mcp): Landscape, security threats, and future research directions","venue":null,"work_id":"9b690a29-83f4-46bf-ba7a-cc0060cfd375","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:05cea5ce5a41b956336664247b55fb1245cbdd4edc428f234285096189ec172c","observation_id":"8789f729-d684-46ca-ac42-65f48420e234","resolution":{"observed_at":"2026-05-22T05:56:09.921984Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:1a15c064f77ab841f51bd2f9c565982949377327b17ab3c793bf81f387e09069","observation_id":"777c753c-176a-4cea-b74c-5b3f5dfa0606","resolution":{"observed_at":"2026-05-22T05:41:09.230627Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Enterprise-grade security for the model context protocol (mcp): Frameworks and mitigation strategies","venue":null,"work_id":"bef36e16-6f8f-48da-8802-963bfd7891f3","year":2026},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:8c5bbcfa722e5fef50fd7a3469b721201edfb0ea09eb6fca846df8cbd1a20d68","observation_id":"514be7d5-2603-47ad-9405-c3a875dcd92f","resolution":{"observed_at":"2026-05-22T05:56:09.933708Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Etdi: Mitigating tool squat- ting and rug pull attacks in model context protocol (mcp) by using oauth-enhanced tool definitions and policy-based access control","venue":null,"work_id":"beee2f75-0a93-4b3e-bb65-5945490ebae5","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:836cd9172d9326ee21ce5533896a87d2eb3a36e45d65b917a3698a6b3ffc97ef","observation_id":"618c6f71-9f98-4752-8068-d129d6ab1446","resolution":{"observed_at":"2026-05-22T05:56:09.925959Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.25819","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T18:28:49.340049Z","title":"Identity management for agentic ai: The new frontier of authorization, authentication, and security for an ai agent world","venue":null,"work_id":"1a52e78c-b24d-480d-8269-878075a03ce0","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:44eb76eb42b4ec0eb5121a946c9ed74cb4693b1c0ad07172a22415d619d57890","observation_id":"4c0868a3-a3b7-4c67-a491-4e09737b4e98","resolution":{"observed_at":"2026-05-22T05:41:09.217665Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A comprehensive formal security analysis of oauth 2.0","venue":null,"work_id":"1318ec63-fd93-42e7-91b1-40e53450f8a9","year":2016},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:f32d4965e8cdd25430ebadd9cdc98dcf294e538c979ea59b7a7f41cb4a914964","observation_id":"56b7a1ce-3d67-466e-8774-5cf8d766e453","resolution":{"observed_at":"2026-05-22T05:56:09.929765Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The web sso standard openid connect: In-depth formal security analysis and security guidelines","venue":null,"work_id":"dbf20ea8-c51a-4ca3-9bc4-cbe6a9554a72","year":2017},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:28e76f4246c587bdbfe4b6623abbed6ff9f1f8da88286e2923e70ed526271b0f","observation_id":"d49369bf-7db2-4e48-8a9c-9432520fe3bc","resolution":{"observed_at":"2026-05-22T06:06:09.643747Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1901.11520","last_updated":"2019-01-31T18:42:38Z","snapshot_observed_at":"2026-08-06T15:18:32.460317Z","submitted_at":"2019-01-31T18:42:38Z","title":"An Extensive Formal Security Analysis of the OpenID Financial-grade API","version":1},"cited_work":{"arxiv_id":"1901.11520","doi":null,"metadata_source":"pith","pith_arxiv_id":"1901.11520","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"An Extensive Formal Security Analysis of the OpenID Financial-grade API","venue":"cs.CR","work_id":"67783302-da7e-4f89-9043-de330d7240d0","year":2019},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"cited_paper":"/paper/1901.11520","citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:941c2d97e2a3e72fbea9db85d1710e22bd96bdeb56bc4a70d4b921c437383fe0","observation_id":"51af3408-ad9a-421a-9a0f-f812003c0946","resolution":{"observed_at":"2026-05-22T05:41:09.300783Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Audience injection attacks: A new class of attacks on web-based authorization and authentication standards","venue":null,"work_id":"a1a402d3-6991-4941-becf-0870f683a554","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:3a46745671c0888d70be1bcd7f80076f9c7f287e5343eb17eef5e2117f91140d","observation_id":"af94f9b7-76d4-4a3d-9793-ce27220a725b","resolution":{"observed_at":"2026-05-22T05:56:09.958200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Revisiting OAuth 2.0 compliance: A two-year follow-up study","venue":null,"work_id":"43e691c4-993a-44f3-94ef-0d73e4671e43","year":2023},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:0a67dbd64c5d75871bb28d31048df35910daf950b30f7e6ad1b46fb2291a4779","observation_id":"37b5cfce-f156-4bc0-9471-069079a9968b","resolution":{"observed_at":"2026-05-22T06:06:09.678847Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Model-based security testing: An empirical study on OAuth 2.0 implementations","venue":null,"work_id":"021a843c-b6af-4123-855d-9d3da1f7fc57","year":2016},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:631f51c3ba4415ce1e3d0328ededbb967d8d4511d86e1157c754dc1313f8fa36","observation_id":"54e604be-270a-4aa7-b5a3-658e8b9d9077","resolution":{"observed_at":"2026-05-22T06:06:09.636593Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"SSOScan: Automated testing of web appli- cations for single sign-on vulnerabilities","venue":null,"work_id":"5d995aa1-adb0-4b09-86a4-382d43c9f303","year":2014},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:e7370712f27b25003ca1432370dd0f2fafdf867f49bfe7d6f64c9dca05028846","observation_id":"e568a7a1-12e1-47da-97cc-ee4be24e6080","resolution":{"observed_at":"2026-05-22T06:06:09.674596Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Vulnerability assessment of OAuth implementations in Android applications","venue":null,"work_id":"e193f7e1-a776-4318-aede-3f9d3c7991d9","year":2015},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:463be2b6729b1b60fbc9de8172cb98a925d14afd8febecde38f9b3cfbcc95b8f","observation_id":"d5eff0f6-a1d9-4b9e-ac35-136cd697eaaa","resolution":{"observed_at":"2026-05-22T05:56:09.942747Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The Achilles’ heel of OAuth: A multi-platform study of OAuth-based authentication","venue":null,"work_id":"9c443a32-0a17-402d-8fc6-954114c6829d","year":2016},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:d6efcad7919c8bc9b8001a61df7fe44bb40eb5d1cf4aba189ac271a82ec39601","observation_id":"96fd784c-aca0-46f1-8d72-d2287864b772","resolution":{"observed_at":"2026-05-22T05:56:09.946865Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Make redirection evil again: Url parser issues in oauth","venue":null,"work_id":"380e9045-154d-4ece-b1eb-6f90552cca76","year":2019},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:f37451d9af46ec1327bfdcac9b7f47648a8806757ddac3328e3cf63405de0ec7","observation_id":"5e37305e-3e5a-48ab-8059-8ca9ac472ca2","resolution":{"observed_at":"2026-05-22T05:56:09.937700Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Oauth 2.0 redirect uri validation falls short, literally","venue":null,"work_id":"4f705ddb-f563-497a-9ea9-a10ad045f210","year":2023},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:831e14779760cd7e755b6c29f148856ac19d27459997d35850e1da97fabbe3c3","observation_id":"1f557854-49b3-4881-8724-73bde20244e8","resolution":{"observed_at":"2026-05-22T06:06:09.618580Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Do (not) follow the white rabbit: Challenging the myth of harmless open redirection","venue":null,"work_id":"e428b557-c0a4-40a6-9bbf-222a27a4d53c","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:626475fdd7f2efb8cd354d4ab36d0b5478dfcb02f6950bf1de8f3c06e2bfafde","observation_id":"c032f17a-ead8-4b3c-8eab-caf41847d26d","resolution":{"observed_at":"2026-05-22T05:56:09.950730Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Universal cross-app attacks: Exploiting and securing{OAuth}2.0 in integration platforms","venue":null,"work_id":"090018e4-844e-4fde-afe1-0bb3e6951b20","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:08d5c1aec2ed37d11d537712bd661b0552eb0b0964f16bb1af04ec7a550ada71","observation_id":"7e08753e-2f98-4663-8c3c-aa48666cc874","resolution":{"observed_at":"2026-05-22T05:56:09.954597Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"“only as strong as the weakest link","venue":null,"work_id":"9fa2304f-a5b7-4ee0-be13-900f989e7082","year":2025},"citing_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-22T05:36:12.341248Z"},"links":{"citing_paper":"/paper/2605.22333"},"observation_digest":"sha256:f10f9370e7f25725f640f54ef1bbcda755757fd5d046a5ce4ab26af135c0280e","observation_id":"02ca944b-b237-4622-821a-e7fd5676012e","resolution":{"observed_at":"2026-05-22T06:06:09.683336Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers"},"reference_resolution":{"displayed":50,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":16,"verified_fuzzy":34},"total_outbound_references":50},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 1 inbound Pith citation observation for arXiv:2605.22333."}