Paper Citation Record · LEDGER

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers

As of 5 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 0 inbound Pith citation observations for arXiv:2606.21338.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2606.21338 v1

Coverage vector

measured 37 of 37 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-06-26T14:07:59.170493Z

measured 37 of 37 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-05T06:32:48.257954+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

37 of 37 outbound references displayed

verified exact2
verified fuzzy0
unresolved26
parse uncertain0
malformed identifier0
metadata mismatch9

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 00c6f613-b3a7-4b36-aa9a-ad9e33c6d300 · outbound

This paper cites an unresolved cited work.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers Unresolved cited work

Reference 1

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 21390bdc-c856-4e49-bb36-d76971389a55 · outbound

This paper cites an unresolved cited work.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers Unresolved cited work

Reference 2

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c30c1ef2-4af3-47a9-8ac7-03ec75858d36 · outbound

This paper cites In: 2023 ACM/IEEE International Sym- posium on Empirical Software Engineering and Measurement (ESEM).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: 2023 ACM/IEEE International Sym- posium on Empirical Software Engineering and Measurement (ESEM)

Reference 3

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 43beff70-9422-43f1-9aba-185150d5f304 · outbound

This paper cites Trivial Trojans: How Minimal MCP Servers Enable Cross-Tool Exfiltration of Sensitive Data.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers Trivial Trojans: How Minimal MCP Servers Enable Cross-Tool Exfiltration of Sensitive Data

Reference 4

Resolution: verified exact; arxiv_id, observed 2026-07-04T06:49:38.276638Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 6b5598a1-c2a1-4e95-8c27-7a3f1d12b15e · outbound

This paper cites Advances in Neural Information Processing Systems37, 82895–82920 (2024).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers Advances in Neural Information Processing Systems37, 82895–82920 (2024)

Reference 5

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c6e1ff54-9df2-4472-9bac-0565927f6bb5 · outbound

This paper cites In: Proceedings 2025 Network and Distributed System Security Symposium.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: Proceedings 2025 Network and Distributed System Security Symposium

Reference 6

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9e49fb2b-1a2d-4ad5-b066-365e4556355d · outbound

This paper cites In: 2025 IEEE World AI IoT Congress (AIIoT).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: 2025 IEEE World AI IoT Congress (AIIoT)

Reference 7

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3ecdc18c-2075-4ab4-b3bf-4c419156f172 · outbound

This paper cites In: 2025 IEEE World AI IoT Congress (AIIoT).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: 2025 IEEE World AI IoT Congress (AIIoT)

Reference 8

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6bfb7f42-7003-402d-9b36-9ebc80aaad4c · outbound

This paper cites We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems

Reference 9

Resolution: metadata mismatch; arxiv_id, observed 2026-07-04T06:49:38.283917Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation e75f0bc9-1f15-4206-9750-710f9c3a2544 · outbound

This paper cites In: NDSS.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: NDSS

Reference 10

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1ec14d67-27a8-4f5e-80e6-4fd6375ef292 · outbound

This paper cites IEEE transactions on software engineering49(2), 902–923 (2022).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers IEEE transactions on software engineering49(2), 902–923 (2022)

Reference 11

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6f61d9ff-6aaa-4345-812c-b1e59f6f36a2 · outbound

This paper cites MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security

Reference 12

Resolution: metadata mismatch; local_arxiv, observed 2026-07-04T06:49:38.287614Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 7b27db7f-a75a-453c-a433-1a27e3720b46 · outbound

This paper cites IEEE Transactions on Information Forensics and Security19, 722–734 (2023).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers IEEE Transactions on Information Forensics and Security19, 722–734 (2023)

Reference 13

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5702ac6d-e2db-4eb0-9f26-981ef991bfc1 · outbound

This paper cites Model Context Protocol (MCP) Tool Descriptions Are Smelly! Towards Improving AI Agent Efficiency with Augmented MCP Tool Descriptions.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers Model Context Protocol (MCP) Tool Descriptions Are Smelly! Towards Improving AI Agent Efficiency with Augmented MCP Tool Descriptions

Reference 14

Resolution: metadata mismatch; local_arxiv, observed 2026-07-04T06:49:38.274201Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 0a2fb3ff-dd3a-4152-a839-8018a608e4fd · outbound

This paper cites ACM Transactions on Software Engineering and Methodology (2025).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers ACM Transactions on Software Engineering and Methodology (2025)

Reference 15

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0c109fc7-f689-4a63-b543-fc9b8a092468 · outbound

This paper cites Journal of Computer Science and Digital Technolo- gies1(1), 50–59 (2025).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers Journal of Computer Science and Digital Technolo- gies1(1), 50–59 (2025)

Reference 16

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fea33fab-f610-492f-a84a-666f4bc8fcd7 · outbound

This paper cites MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System

Reference 17

Resolution: metadata mismatch; arxiv_id, observed 2026-07-04T06:49:38.270421Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 6237f64a-a6f9-41f2-80e3-1452fa0dccfc · outbound

This paper cites I know what leaked in your pocket: uncovering privacy leaks on Android Apps with Static Taint Analysis.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers I know what leaked in your pocket: uncovering privacy leaks on Android Apps with Static Taint Analysis

Reference 18

Resolution: metadata mismatch; local_arxiv, observed 2026-07-04T06:49:38.266832Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation b8310c55-efc4-4376-949d-64ed1220fb5d · outbound

This paper cites Don’t believe everything you read: Understanding and measuring mcp behavior under misleading tool descriptions.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers Don’t believe everything you read: Understanding and measuring mcp behavior under misleading tool descriptions

Reference 19

Resolution: metadata mismatch; arxiv_id, observed 2026-07-04T06:49:38.263418Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 82d23ceb-37f7-43f0-a3ff-fe8c31657a7d · outbound

This paper cites In: Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security

Reference 20

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 68e34517-f955-40d3-8431-4c2041d62a42 · outbound

This paper cites In: 33rd USENIX Security Symposium (USENIX Security 24).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: 33rd USENIX Security Symposium (USENIX Security 24)

Reference 21

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9fac06d8-a735-482e-bbb9-71a4f962ac3d · outbound

This paper cites In: 2025 IEEE Symposium on Security and Privacy (SP).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: 2025 IEEE Symposium on Security and Privacy (SP)

Reference 22

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ed00b68e-546e-43ba-a27f-545d17d64d39 · outbound

This paper cites an unresolved cited work.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers Unresolved cited work

Reference 23

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9a9e5e91-ba41-49fe-b462-d1a088e65f80 · outbound

This paper cites Accessed: 2026-04-18.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers Accessed: 2026-04-18

Reference 24

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3b0b5e17-d9af-4567-b117-cbef1c7fe39c · outbound

This paper cites MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits

Reference 25

Resolution: metadata mismatch; arxiv_id, observed 2026-07-04T06:49:38.260056Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 682dcbd2-6458-4cbd-b729-2ae3b9127aa5 · outbound

This paper cites arXiv preprint arXiv:2510.02325 (2025).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers arXiv preprint arXiv:2510.02325 (2025)

Reference 26

Resolution: verified exact; arxiv_id, observed 2026-07-04T06:49:38.252119Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 16581d4d-456a-428b-9ea4-5855f2d96b32 · outbound

This paper cites do anything now.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers do anything now

Reference 27

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 89cb100d-a9fd-433b-a4a2-f1bdc46a057f · outbound

This paper cites In: Proceedings of the 24th Workshop on Privacy in the Electronic Society.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: Proceedings of the 24th Workshop on Privacy in the Electronic Society

Reference 28

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1dd9e568-d010-413f-bd5d-d891b0f71191 · outbound

This paper cites In: 2025 3rd International Conference on Inventive Computing and Informatics (ICICI).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: 2025 3rd International Conference on Inventive Computing and Informatics (ICICI)

Reference 29

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation aca05402-cb26-46ff-9fc4-a0af4499e135 · outbound

This paper cites In: Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)

Reference 30

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 97a3124f-e946-49dc-8c10-883fe58c02de · outbound

This paper cites In: 34rd USENIX Security Symposium (USENIX Security 25) (2025).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: 34rd USENIX Security Symposium (USENIX Security 25) (2025)

Reference 31

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 85110723-3509-42fb-9276-b7afd7dba1cf · outbound

This paper cites In: First conference on language modeling (2024).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: First conference on language modeling (2024)

Reference 32

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1dfef9d8-d08f-4dbd-b869-54cd2d517432 · outbound

This paper cites In: 34rd USENIX Security Symposium (USENIX Security 25) (2025).

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: 34rd USENIX Security Symposium (USENIX Security 25) (2025)

Reference 33

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bdee3707-09d0-40e8-8936-d1f9b0274458 · outbound

This paper cites In: Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V

Reference 34

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cde534fe-c364-438b-90e8-27c181489353 · outbound

This paper cites In: Findings of the As- sociation for Computational Linguistics: ACL 2024.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers In: Findings of the As- sociation for Computational Linguistics: ACL 2024

Reference 35

Resolution: unresolved; no resolver link, observed 2026-06-26T14:07:59.170493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 95656585-c712-4ed7-921f-8378b2fb6295 · outbound

This paper cites Can Humans Oversee Agents to Prevent Privacy Leakage? A Study on Privacy Awareness, Preferences, and Trust in Language Model Agents.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers Can Humans Oversee Agents to Prevent Privacy Leakage? A Study on Privacy Awareness, Preferences, and Trust in Language Model Agents

Reference 36

Resolution: metadata mismatch; arxiv_id, observed 2026-07-04T06:49:38.280420Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Observation 5757a4e7-4d94-4aaf-af46-14e0f79845cb · outbound

This paper cites Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem.

"What Happens Locally, Leaks Globally": Detecting Privacy Leakage Risks in MCP Servers Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem

Reference 37

Resolution: metadata mismatch; local_arxiv, observed 2026-07-04T06:49:38.256456Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.

Pith citing papers

No inbound Pith citation observations are available.