{"as_of":"2026-08-11T06:10:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c628618113abe7298206ef1b75103d8458adb60e922f3f0fe8e3c946cb4612ff","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-28T05:57:36.882346Z","state":"measured"},{"denominator":39,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":39,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T00:33:06.049201Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-11T00:33:06.252146Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"cited_work":{"arxiv_id":"2606.04769","doi":null,"metadata_source":"pith","pith_arxiv_id":"2606.04769","snapshot_observed_at":"2026-08-11T00:33:06.252146Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","venue":"cs.CR","work_id":"9ee21adc-a0b5-4372-92e6-0dd7aeaa17ec","year":2026},"citing_paper":{"arxiv_id":"2608.07639","last_updated":"2026-08-07T16:04:21Z","snapshot_observed_at":"2026-08-11T05:15:36.153931Z","submitted_at":"2026-08-07T16:04:21Z","title":"SkillConsist: Detecting Inconsistencies in Agent Skills via Bidirectional Graph Alignment","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T00:33:06.049201Z"},"links":{"cited_paper":"/paper/2606.04769","citing_paper":"/paper/2608.07639"},"observation_digest":"sha256:5b4650cf9408916562145b534c65c20ea8fa1096e559b8b511e5545eb07bcb31","observation_id":"8b85e22e-28ed-412a-9ec1-c9d4423fd544","resolution":{"observed_at":"2026-08-11T00:33:06.256748Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2606.04769/citation-record","integrity":"/paper/2606.04769/integrity","json":"/paper/2606.04769/citation-record.json","paper":"/paper/2606.04769"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"5764.362398","doi":"10.1145/3605764.3623985","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec @ CCS 2023)","venue":null,"work_id":"0b235739-d106-431c-aed9-3675d531c886","year":2023},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:65d25c084c7f055cd3711b6ca1d244358d1cae6d254e03472f229ac2c1301909","observation_id":"b527b921-ffee-47ce-af22-7e802105795b","resolution":{"observed_at":"2026-06-28T06:01:40.875003Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-07-12T05:19:17.163767+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T05:19:17.163767+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":"2306.05499","doi":"10.48550/arxiv.2306.05499","metadata_source":"pith","pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Prompt Injection attack against LLM-integrated Applications","venue":"cs.CR","work_id":"977b4683-bba6-49d6-8f3d-496c41cb7fac","year":2023},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:a38a76dc3defcb2fa94ec6f80d66eb0f44f9429748c23bd79f0249de3c3f129c","observation_id":"241a798c-1843-4740-9139-8f66f52ead0b","resolution":{"observed_at":"2026-07-02T08:36:47.844618Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"MCP Security Notification: Tool Poisoning Attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:bf688745d8e21b6dbfb6908d05f570c2e6b5f87dc816505a4beb51ecb2bc55ba","observation_id":"4e806344-5943-4a59-9189-e67a7e0ae610","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Available: https://invariantlabs.ai/blog/mcp-security-notif ication-tool-poisoning-attacks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:8bc82c68e7557569453fe37410c0d7c6e6a67b7eec539a64d85f678aef5505eb","observation_id":"2d2db524-9c5c-4598-963e-12ce1e64cf0a","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.14925","last_updated":"2025-08-19T10:12:35Z","snapshot_observed_at":"2026-08-08T10:31:54.102871Z","submitted_at":"2025-08-19T10:12:35Z","title":"MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers","version":1},"cited_work":{"arxiv_id":"2508.14925","doi":"10.48550/arxiv.2508.14925","metadata_source":"pith","pith_arxiv_id":"2508.14925","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Wang, MCPTox: A systematic benchmark for MCP server security, arXiv preprint arXiv:2508.14925 (2025)","venue":"cs.CR","work_id":"53c44cac-ba71-4460-afef-2280250ee899","year":2025},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"cited_paper":"/paper/2508.14925","citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:0684d242a754e5351a2dfb66a9c1a7a180e609ab00c5ab0b6cffee16401d5d47","observation_id":"30496f84-987f-4837-977d-f10af2c875f5","resolution":{"observed_at":"2026-07-02T08:36:47.849562Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Towards understanding sycophancy in language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:97f61e7dddc3d360e8e6d8ea987ac24c018e52e29f3f5aceca59b0ef9eeb9f15","observation_id":"d473a5b6-1489-4d8e-a30b-0602dce26792","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Survey of hallucination in natural language generation,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:391b62bc4a17bddde8fcb37daa0395588a2d563667b79f55c1e8a7418daca732","observation_id":"95412900-5460-4d1a-b0b9-c5f4b5399e5d","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3571730","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T13:37:06.800059Z","title":"Survey of Hallucination in Natural Language Generation","venue":"ACM Computing Surveys","work_id":"aa2fb99f-beb8-463c-8cd4-c575e96e2512","year":2023},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:278821d0e0f9652a4d0d7be89edf2a1594f1aed46f9a336a8fb07aac2ccefed1","observation_id":"1917f0ef-0550-410e-bdac-eb14116e6b4a","resolution":{"observed_at":"2026-06-28T06:01:40.870213Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-04T01:08:06.897682+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-04T01:08:06.897682+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Model context protocol speci- fication,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:7b20834360921a899cf4c808701fac0567ebaaf7ced5752125c79f86aed020d3","observation_id":"0423a22d-6dc2-4012-b7d8-e30c20d9291a","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Agent2Agent (A2A) Protocol,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:fa8a0df8367e6831a560d7d1d9a8f201bfe21c843df6bf3bb0abaca72ed87b6c","observation_id":"f540c73b-1531-4503-923e-447bbce8ea8c","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.03580","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.125563Z","title":"Don’t believe everything you read: Understanding and measuring mcp behavior under misleading tool descriptions","venue":null,"work_id":"c231d6ea-d803-48e3-b274-3663b7e97f52","year":2026},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:a2510d3303f9c7796dc0b50babd100945aedc6ee405241a47827c66939ad0b9a","observation_id":"c108268a-bc9e-4e86-8331-bacdb71894de","resolution":{"observed_at":"2026-07-02T08:36:47.842256Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Snyk Agent Scan,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:138feffc6757d5f0936717ea63d00664964c97c99d0e79933c0ff605d06d1884","observation_id":"b95a40be-06a6-414f-b2cc-685d1b0a45c2","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"MCP-Shield: Security scanner for MCP servers,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:76e277f07bba0aed79b9ee8d928242f49e5d697e28e60ab15a028a128825fbd6","observation_id":"941057bb-373f-4c8d-8d30-b457ce81ce52","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Semgrep: Lightweight static analysis for many languages,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:a6cb679e45ea89568b9c78180f30b4f1328b6b05fe7a4d2e59e43a1ba22b95e9","observation_id":"fdc85ce0-2f3f-46aa-be45-c7b2ffcf8000","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Bandit: A tool designed to find common security issues in python code,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:5d87601ab2a68a41cb48f82da1594290f756e2f2d2828d562a9e73f66dbddae5","observation_id":"c1ea047f-a3e4-4ba2-ba4b-d0c8e0e2b18d","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2509.25292","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-02T10:46:52.256497Z","title":"A measurement study of model context protocol ecosystem","venue":null,"work_id":"7f64dbec-0608-4fc6-9535-59eec11545d5","year":2025},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:cbbdcabb198162f4ce51febbd38eae283eed4f35ef30e42de2af947f0bced671","observation_id":"ecc09e96-ed5c-4afe-8c12-af8c62ab80aa","resolution":{"observed_at":"2026-07-02T08:36:47.839277Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2512.06556","last_updated":"2026-05-21T13:44:50Z","snapshot_observed_at":"2026-07-06T22:37:59.340166Z","submitted_at":"2025-12-06T20:07:58Z","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","version":2},"cited_work":{"arxiv_id":"2512.06556","doi":"10.48550/arxiv.2512.06556","metadata_source":"pith","pith_arxiv_id":"2512.06556","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Jamshidi, K","venue":"cs.CR","work_id":"8168d04b-f6d5-4f3f-baf2-37fc3f0fc458","year":2025},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"cited_paper":"/paper/2512.06556","citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:a5f58a94ab12266038be41afcc7ad2a8e93bff8faccf05c0792067c1c3cdc727","observation_id":"36b0980e-3489-4089-b730-860f30d3c53d","resolution":{"observed_at":"2026-07-02T08:36:47.846945Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2508.13220","doi":"10.48550/arxiv.2508.13220","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcpsecbench: A systematic security benchmark and playground for testing model context protocols","venue":"arXiv (Cornell University)","work_id":"4a91f798-a23b-4420-afe8-5230f40ee3e1","year":2025},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:892b26a46d208cd812f0b3e1385d07e061e318ae0c41df6a925e4bf69bb327e6","observation_id":"8a8a39ea-d60a-45fb-ad9a-9ce30cd88341","resolution":{"observed_at":"2026-07-02T08:36:47.833388Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/2508859.2","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:01:40.865427Z","title":"Vetting undesirable behaviors in Android apps with permission use analysis,","venue":null,"work_id":"91326487-420f-47cd-851a-753be4958cba","year":2013},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:17131151ceabf25aa3213fd550892e5eae195bffa11a229ee3bf3d4a06f7e7a7","observation_id":"9bb324af-bd3f-40f5-ac7b-d8ce77031f5a","resolution":{"observed_at":"2026-06-28T06:01:40.866659Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"0003.351005","doi":"10.1145/3510003.3510050","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"DescribeCtx: Context-aware description synthesis for sensitive behaviors in mobile apps,","venue":"Proceedings of the 44th International Conference on Software Engineering","work_id":"46ed4058-35d7-4c71-bc5b-1a8b6e8d59b0","year":2022},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:57107aa495429be45a76fbfbea75a3185e3f9ea6b9b8b5dae2eddf3657f6487b","observation_id":"1c6b2476-a0da-4e89-92a1-2579d8e9292a","resolution":{"observed_at":"2026-06-28T06:01:40.871958Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s10207-020-00536-1","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Attention: There is an inconsistency between Android permissions and application metadata!","venue":"International Journal of Information Security","work_id":"ecc1555b-7d88-4b7c-b834-ee9fd6421d65","year":2021},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:5be49e9c7c6d3f4011d52b81941cc7200e3870a0f8a4bc62801162030d18307d","observation_id":"a16fa01d-a777-40b3-b0f7-cd883bbc8631","resolution":{"observed_at":"2026-06-28T06:01:40.868730Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"What’s done is not what’s claimed: Detecting and interpreting inconsistencies in app behaviors,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:ea7ab07283bba0d77c2869dbc1657028e18541a048474589b0d853eb1aa5c81c","observation_id":"fc6975ed-a271-4204-b3dd-f0be61f9d2a6","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.10620","last_updated":"2024-04-10T08:41:22Z","snapshot_observed_at":"2026-07-06T16:08:29.285279Z","submitted_at":"2023-08-21T10:37:49Z","title":"Large Language Models for Software Engineering: A Systematic Literature Review","version":6},"cited_work":{"arxiv_id":"2308.10620","doi":"10.48550/arxiv.2308.10620","metadata_source":"arxiv_reference","pith_arxiv_id":"2308.10620","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2308.10620 (2023)","venue":"arXiv (Cornell University)","work_id":"95a41a91-71b5-4995-9900-0c80aa0d96a6","year":2024},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"cited_paper":"/paper/2308.10620","citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:b07012527df8526b94ae4a73f363a4ec849aac1e6703eea054f2b62cae49841b","observation_id":"fbe21da0-c42a-4690-80f8-b9061a8657f6","resolution":{"observed_at":"2026-07-02T08:36:47.836172Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.07049","last_updated":"2025-02-12T23:19:23Z","snapshot_observed_at":"2026-08-10T16:01:02.658381Z","submitted_at":"2025-02-10T21:33:38Z","title":"LLMs in Software Security: A Survey of Vulnerability Detection Techniques and Insights","version":2},"cited_work":{"arxiv_id":"2502.07049","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.07049","snapshot_observed_at":"2026-07-02T08:36:47.828856Z","title":"LLMs in software security: A survey of vulnerability detection techniques and insights","venue":null,"work_id":"be333fc5-29b1-492a-b2c0-e09c79bbe870","year":2025},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"cited_paper":"/paper/2502.07049","citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:b444da9e8ea403a77664f4988cabe4fa50d8c16cee73cad4e7cca2d92008c30d","observation_id":"f68b66d7-c856-41d7-9d39-4fd5b8135ad1","resolution":{"observed_at":"2026-07-02T08:36:47.830593Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Judging LLM-as-a-judge with MT-Bench and Chatbot Arena,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:56cbbc2e52e7092261afe7f8b12c2bb2c19e9279bfc71c4270518b5c17952f19","observation_id":"ccb2cd31-0c9c-4298-8604-0969f7769f1f","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Improving factuality and reasoning in language models through multiagent debate,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:97aa1637912dbce534e170eecea3c1f1c325f7552f7bd51726d56224aedc733f","observation_id":"08e84bc7-0ad6-487c-9e18-8eb8a68d1f85","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Encouraging divergent thinking in large language models through multi-agent debate,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:a2b7170de0ea21d53fbcf792315368f0c0f9d645ea7bf5fa6aeddf6eae8f1288","observation_id":"a8e9b919-9704-40d8-9c04-e347dccc617f","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Self-refine: Iterative refinement with self-feedback,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:3788e9bd2bd6ffad43ff42852f22e98e51e4b8d65d28b980b86704ad87802491","observation_id":"f92b3fa6-6240-4a53-ba71-57422e2b75b6","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"- SM: Permanent state alteration (writes) when description implies read-only","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:43bf887eb9f18366fab6c47e0ce5ec243ce068b410710f2711206b7448d7833d","observation_id":"0c61fbdf-3640-42f1-8cc3-dce50aae2b38","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"- Func-Un: The implementation includes additional functional features not mentioned","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:d9b2eaead223ae5f70d0a1133bdeb4137235b1e18f1a6bbf1408c3da738e665b","observation_id":"6d108180-a380-48be-8ea7-b1e7cb2d3d9e","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Code Implementation","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:2bd68c8146d8285bc3572c24094edece38ba681f6b5a891e413cba40b919dd6e","observation_id":"2ffa6fd8-8f89-4d0a-ad2d-8111ee34a75a","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"- Func-Un: Implementation includes additional functional features not mentioned","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:e359bd2952adf32ce046912ed5f28e251c361ff699768d15c1f356d7d65ebc7f","observation_id":"3fc83df9-ae0f-48f1-8e19-8b21dd70a7a5","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"- SM: Permanent state alteration (writes) when description implies read-only","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:60867142b64c7c12b351bf73879672a3e9a22ff43dfd28167fdf29f9dad7c5ca","observation_id":"567b5eac-961d-438e-ab75-14d7b56c9a75","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:3cb472788428e5aecaebe0f24cd0cb273b087a4ce07587712f4275922fe26b6f","observation_id":"e05179a4-7584-4870-9923-d21a58ae3ac0","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Does the alleged inconsistency actually exist? Is it a significant violation or a trivial nitpick?","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:571d6a2de7359bf2fe25dbc0b300848b1c23e22a080b9b23943a112738c46470","observation_id":"088d4669-2747-429f-9cf9-fe6cbbf13c81","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Does it reasonably explain the behavior?","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:ff8dbbba102094715c735077da04f02c9502ea0f338f422f3d0aa3987b3fa296","observation_id":"821a9d76-13cc-4c2e-9c7f-164b5ee340ca","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"A pair should be marked inconsistent only when the evidence shows a meaningful functional mismatch, an undeclared side effect, or an unfulfilled descriptive commitment","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:6df6bcd0ac3a825a65eeea6df4f57d86ad177d69712ab62ca7f58298f52d37f5","observation_id":"12506b88-6b9f-4e8e-82a5-087583ca47db","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T05:57:36.882346Z","title":"Consistent","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-06-28T05:57:36.882346Z"},"links":{"citing_paper":"/paper/2606.04769"},"observation_digest":"sha256:85f79f3bd08935397671be74bc61fac1fd8671ef4933a755b75fb7f2eb76320b","observation_id":"382bddac-0260-482a-a721-e7e152ff71b3","resolution":{"observed_at":"2026-06-28T05:57:36.882346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.04769","last_updated":"2026-06-03T11:51:32Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T05:41:54.273885Z","submitted_at":"2026-06-03T11:51:32Z","title":"Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implications"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":1,"metadata_mismatch":5,"parse_uncertain":0,"unresolved":24,"verified_exact":8,"verified_fuzzy":0},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 1 inbound Pith citation observation for arXiv:2606.04769."}