Paper Citation Record · LEDGER

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications

As of 11 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 1 inbound Pith citation observation for arXiv:2606.04769.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2606.04769 v1

Coverage vector

measured 38 of 38 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-06-28T05:57:36.882346Z

measured 39 of 39 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-11T00:33:06.049201Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-11T00:33:06.252146Z

Reference resolution

38 of 38 outbound references displayed

verified exact8
verified fuzzy0
unresolved24
parse uncertain0
malformed identifier1
metadata mismatch5

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation b527b921-ffee-47ce-af22-7e802105795b · outbound

This paper cites InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec @ CCS 2023).

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec @ CCS 2023)

Reference 1

Resolution: metadata mismatch; arxiv_id, observed 2026-06-28T06:01:40.875003Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 241a798c-1843-4740-9139-8f66f52ead0b · outbound

This paper cites Prompt Injection attack against LLM-integrated Applications.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Prompt Injection attack against LLM-integrated Applications

Reference 2

Resolution: verified exact; local_arxiv, observed 2026-07-02T08:36:47.844618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 4e806344-5943-4a59-9189-e67a7e0ae610 · outbound

This paper cites MCP Security Notification: Tool Poisoning Attacks,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications MCP Security Notification: Tool Poisoning Attacks,

Reference 3

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2d2db524-9c5c-4598-963e-12ce1e64cf0a · outbound

This paper cites Available: https://invariantlabs.ai/blog/mcp-security-notif ication-tool-poisoning-attacks.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Available: https://invariantlabs.ai/blog/mcp-security-notif ication-tool-poisoning-attacks

Reference 4

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 30496f84-987f-4837-977d-f10af2c875f5 · outbound

This paper cites MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers

Reference 5

Resolution: verified exact; arxiv_id, observed 2026-07-02T08:36:47.849562Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation d473a5b6-1489-4d8e-a30b-0602dce26792 · outbound

This paper cites Towards understanding sycophancy in language models,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Towards understanding sycophancy in language models,

Reference 6

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 95412900-5460-4d1a-b0b9-c5f4b5399e5d · outbound

This paper cites Survey of hallucination in natural language generation,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Survey of hallucination in natural language generation,

Reference 7

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1917f0ef-0550-410e-bdac-eb14116e6b4a · outbound

This paper cites Survey of Hallucination in Natural Language Generation.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Survey of Hallucination in Natural Language Generation

Reference 8

Resolution: metadata mismatch; doi, observed 2026-06-28T06:01:40.870213Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 0423a22d-6dc2-4012-b7d8-e30c20d9291a · outbound

This paper cites Model context protocol speci- fication,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Model context protocol speci- fication,

Reference 9

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f540c73b-1531-4503-923e-447bbce8ea8c · outbound

This paper cites Agent2Agent (A2A) Protocol,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Agent2Agent (A2A) Protocol,

Reference 10

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c108268a-bc9e-4e86-8331-bacdb71894de · outbound

This paper cites Don’t believe everything you read: Understanding and measuring mcp behavior under misleading tool descriptions.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Don’t believe everything you read: Understanding and measuring mcp behavior under misleading tool descriptions

Reference 11

Resolution: verified exact; arxiv_id, observed 2026-07-02T08:36:47.842256Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation b95a40be-06a6-414f-b2cc-685d1b0a45c2 · outbound

This paper cites Snyk Agent Scan,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Snyk Agent Scan,

Reference 12

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 941057bb-373f-4c8d-8d30-b457ce81ce52 · outbound

This paper cites MCP-Shield: Security scanner for MCP servers,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications MCP-Shield: Security scanner for MCP servers,

Reference 13

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fdc85ce0-2f3f-46aa-be45-c7b2ffcf8000 · outbound

This paper cites Semgrep: Lightweight static analysis for many languages,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Semgrep: Lightweight static analysis for many languages,

Reference 14

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c1ea047f-a3e4-4ba2-ba4b-d0c8e0e2b18d · outbound

This paper cites Bandit: A tool designed to find common security issues in python code,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Bandit: A tool designed to find common security issues in python code,

Reference 15

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ecc09e96-ed5c-4afe-8c12-af8c62ab80aa · outbound

This paper cites A measurement study of model context protocol ecosystem.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications A measurement study of model context protocol ecosystem

Reference 16

Resolution: verified exact; arxiv_id, observed 2026-07-02T08:36:47.839277Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 36b0980e-3489-4089-b730-860f30d3c53d · outbound

This paper cites Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation

Reference 17

Resolution: metadata mismatch; local_arxiv, observed 2026-07-02T08:36:47.846945Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 8a8a39ea-d60a-45fb-ad9a-9ce30cd88341 · outbound

This paper cites Mcpsecbench: A systematic security benchmark and playground for testing model context protocols.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Mcpsecbench: A systematic security benchmark and playground for testing model context protocols

Reference 18

Resolution: verified exact; arxiv_id, observed 2026-07-02T08:36:47.833388Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 9bb324af-bd3f-40f5-ac7b-d8ce77031f5a · outbound

This paper cites Vetting undesirable behaviors in Android apps with permission use analysis,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Vetting undesirable behaviors in Android apps with permission use analysis,

Reference 19

Resolution: verified exact; doi, observed 2026-06-28T06:01:40.866659Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 1c6b2476-a0da-4e89-92a1-2579d8e9292a · outbound

This paper cites DescribeCtx: Context-aware description synthesis for sensitive behaviors in mobile apps,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications DescribeCtx: Context-aware description synthesis for sensitive behaviors in mobile apps,

Reference 20

Resolution: metadata mismatch; arxiv_id, observed 2026-06-28T06:01:40.871958Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation a16fa01d-a777-40b3-b0f7-cd883bbc8631 · outbound

This paper cites Attention: There is an inconsistency between Android permissions and application metadata!.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Attention: There is an inconsistency between Android permissions and application metadata!

Reference 21

Resolution: verified exact; doi, observed 2026-06-28T06:01:40.868730Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation fc6975ed-a271-4204-b3dd-f0be61f9d2a6 · outbound

This paper cites What’s done is not what’s claimed: Detecting and interpreting inconsistencies in app behaviors,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications What’s done is not what’s claimed: Detecting and interpreting inconsistencies in app behaviors,

Reference 22

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fbe21da0-c42a-4690-80f8-b9061a8657f6 · outbound

This paper cites Large Language Models for Software Engineering: A Systematic Literature Review.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Large Language Models for Software Engineering: A Systematic Literature Review

Reference 23

Resolution: metadata mismatch; arxiv_id, observed 2026-07-02T08:36:47.836172Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation f68b66d7-c856-41d7-9d39-4fd5b8135ad1 · outbound

This paper cites LLMs in Software Security: A Survey of Vulnerability Detection Techniques and Insights.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications LLMs in Software Security: A Survey of Vulnerability Detection Techniques and Insights

Reference 24

Resolution: verified exact; arxiv_id, observed 2026-07-02T08:36:47.830593Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation ccb2cd31-0c9c-4298-8604-0969f7769f1f · outbound

This paper cites Judging LLM-as-a-judge with MT-Bench and Chatbot Arena,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Judging LLM-as-a-judge with MT-Bench and Chatbot Arena,

Reference 25

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 08e84bc7-0ad6-487c-9e18-8eb8a68d1f85 · outbound

This paper cites Improving factuality and reasoning in language models through multiagent debate,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Improving factuality and reasoning in language models through multiagent debate,

Reference 26

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a8e9b919-9704-40d8-9c04-e347dccc617f · outbound

This paper cites Encouraging divergent thinking in large language models through multi-agent debate,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Encouraging divergent thinking in large language models through multi-agent debate,

Reference 27

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f92b3fa6-6240-4a53-ba71-57422e2b75b6 · outbound

This paper cites Self-refine: Iterative refinement with self-feedback,.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Self-refine: Iterative refinement with self-feedback,

Reference 28

Resolution: malformed identifier; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0c61fbdf-3640-42f1-8cc3-dce50aae2b38 · outbound

This paper cites - SM: Permanent state alteration (writes) when description implies read-only.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications - SM: Permanent state alteration (writes) when description implies read-only

Reference 30

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6d108180-a380-48be-8ea7-b1e7cb2d3d9e · outbound

This paper cites - Func-Un: The implementation includes additional functional features not mentioned.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications - Func-Un: The implementation includes additional functional features not mentioned

Reference 31

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2ffa6fd8-8f89-4d0a-ad2d-8111ee34a75a · outbound

This paper cites Code Implementation.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Code Implementation

Reference 32

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3fc83df9-ae0f-48f1-8e19-8b21dd70a7a5 · outbound

This paper cites - Func-Un: Implementation includes additional functional features not mentioned.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications - Func-Un: Implementation includes additional functional features not mentioned

Reference 33

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 567b5eac-961d-438e-ab75-14d7b56c9a75 · outbound

This paper cites - SM: Permanent state alteration (writes) when description implies read-only.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications - SM: Permanent state alteration (writes) when description implies read-only

Reference 34

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e05179a4-7584-4870-9923-d21a58ae3ac0 · outbound

This paper cites an unresolved cited work.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Unresolved cited work

Reference 35

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 088d4669-2747-429f-9cf9-fe6cbbf13c81 · outbound

This paper cites Does the alleged inconsistency actually exist? Is it a significant violation or a trivial nitpick?.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Does the alleged inconsistency actually exist? Is it a significant violation or a trivial nitpick?

Reference 36

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 821a9d76-13cc-4c2e-9c7f-164b5ee340ca · outbound

This paper cites Does it reasonably explain the behavior?.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Does it reasonably explain the behavior?

Reference 37

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 12506b88-6b9f-4e8e-82a5-087583ca47db · outbound

This paper cites A pair should be marked inconsistent only when the evidence shows a meaningful functional mismatch, an undeclared side effect, or an unfulfilled descriptive commitment.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications A pair should be marked inconsistent only when the evidence shows a meaningful functional mismatch, an undeclared side effect, or an unfulfilled descriptive commitment

Reference 38

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 382bddac-0260-482a-a721-e7e152ff71b3 · outbound

This paper cites Consistent.

Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications Consistent

Reference 39

Resolution: unresolved; no resolver link, observed 2026-06-28T05:57:36.882346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation 8b85e22e-28ed-412a-9ec1-c9d4423fd544 · inbound

SkillConsist: Detecting Inconsistencies in Agent Skills via Bidirectional Graph Alignment cites this paper.

SkillConsist: Detecting Inconsistencies in Agent Skills via Bidirectional Graph Alignment Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications

Reference 19

Resolution: metadata mismatch; local_arxiv, observed 2026-08-11T00:33:06.256748Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.