{"as_of":"2026-08-05T18:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:aee58f447fc6c00fd0565c67011c6573901787ea9daba5fae5f2cfeaa8c1146f","coverage":[{"denominator":37,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":37,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-26T14:07:59.170493Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.21338/citation-record","integrity":"/paper/2606.21338/integrity","json":"/paper/2606.21338/citation-record.json","paper":"/paper/2606.21338"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:fd77a9ee543bad79db32521d4341d41038197bb80014b9120bed2c6881baa899","observation_id":"00c6f613-b3a7-4b36-aa9a-ad9e33c6d300","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:822244bf40ce041241f6878351899ddd506829224e93503cf01093f1cfdf2ce6","observation_id":"21390bdc-c856-4e49-bb36-d76971389a55","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: 2023 ACM/IEEE International Sym- posium on Empirical Software Engineering and Measurement (ESEM)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:131d5db9b33787d713beaea513b609acd26f4d729fc8c8bdebbd968bff0265c7","observation_id":"c30c1ef2-4af3-47a9-8ac7-03ec75858d36","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.19880","last_updated":"2025-07-26T09:22:40Z","snapshot_observed_at":"2026-07-06T22:03:15.296567Z","submitted_at":"2025-07-26T09:22:40Z","title":"Trivial Trojans: How Minimal MCP Servers Enable Cross-Tool Exfiltration of Sensitive Data","version":1},"cited_work":{"arxiv_id":"2507.19880","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.19880","snapshot_observed_at":"2026-07-04T06:49:38.274709Z","title":"arXiv preprint arXiv:2507.19880 (2025) Detecting Privacy Leakage Risks in MCP Servers 17","venue":null,"work_id":"d4fe7c40-2f65-4c58-8098-0db24270e933","year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"cited_paper":"/paper/2507.19880","citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:8ba7b647674641baebe99594ef091f489034fe0bf53272ba51a2ea80600cee74","observation_id":"43beff70-9422-43f1-9aba-185150d5f304","resolution":{"observed_at":"2026-07-04T06:49:38.276638Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"Advances in Neural Information Processing Systems37, 82895–82920 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:c131e5c773989aadb35594b906fa4003362f34ccc8605593aba410530b0f2baa","observation_id":"6b5598a1-c2a1-4e95-8c27-7a3f1d12b15e","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: Proceedings 2025 Network and Distributed System Security Symposium","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:b0d32ea8444c02451332fd161f128067738308cf759cf75a7279c2902a10e896","observation_id":"c6e1ff54-9df2-4472-9bac-0565927f6bb5","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: 2025 IEEE World AI IoT Congress (AIIoT)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:3075bcbf8518c61f6d85fb4ed5989a45270000191bf53b2ae06d0e40caf3de83","observation_id":"9e49fb2b-1a2d-4ad5-b066-365e4556355d","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: 2025 IEEE World AI IoT Congress (AIIoT)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:db6e4dbccdd58c110d89e3866ada4f76b6aa3803276c861840796a9b9aea8826","observation_id":"3ecdc18c-2075-4ab4-b3bf-4c419156f172","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.13666","last_updated":"2025-06-16T16:24:31Z","snapshot_observed_at":"2026-08-02T21:36:14.525228Z","submitted_at":"2025-06-16T16:24:31Z","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","version":1},"cited_work":{"arxiv_id":"2506.13666","doi":"10.48550/arxiv.2506.13666","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.13666","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"We should identify and mitigate third-party safety risks in mcp-powered agent systems","venue":"ArXiv.org","work_id":"b22353cd-1606-4671-a46c-a3a4e0f90410","year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"cited_paper":"/paper/2506.13666","citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:aa507025cdf3e3eb9ab6a7b83b438ad625789502f3f463a7f9deb25201db073b","observation_id":"6bfb7f42-7003-402d-9b36-9ebc80aaad4c","resolution":{"observed_at":"2026-07-04T06:49:38.283917Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: NDSS","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:a6f6846d4b19fbd2d0306410c9fa4abdb2c34856e0fcc18eb7c94a10b0e22428","observation_id":"e75f0bc9-1f15-4206-9750-710f9c3a2544","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"IEEE transactions on software engineering49(2), 902–923 (2022)","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:36b3d35da5786e3423bc1e848bf359e882ebc988bcad9d27b68e61bf4bc718d5","observation_id":"1ec14d67-27a8-4f5e-80e6-4fd6375ef292","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.12538","last_updated":"2026-05-25T07:08:19Z","snapshot_observed_at":"2026-07-06T22:14:11.645062Z","submitted_at":"2025-08-18T00:23:41Z","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","version":2},"cited_work":{"arxiv_id":"2508.12538","doi":"10.48550/arxiv.2508.12538","metadata_source":"pith","pith_arxiv_id":"2508.12538","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Systematic analysis of mcp security","venue":"cs.CR","work_id":"8fd13327-e45c-448a-b5b9-5157ef86072d","year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"cited_paper":"/paper/2508.12538","citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:4ab599cbdd4125ba457f6ada5350e9aeedf5687de7eb69bb60ad1a1657971562","observation_id":"6f61d9ff-6aaa-4345-812c-b1e59f6f36a2","resolution":{"observed_at":"2026-07-04T06:49:38.287614Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"IEEE Transactions on Information Forensics and Security19, 722–734 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:9de41f5398401f746ba9258ce9af8d5fb12f8d98a2efb8d580d061c91e803061","observation_id":"7b27db7f-a75a-453c-a433-1a27e3720b46","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.14878","last_updated":"2026-05-31T05:10:10Z","snapshot_observed_at":"2026-08-02T23:04:25.658810Z","submitted_at":"2026-02-16T16:10:11Z","title":"Model Context Protocol (MCP) Tool Descriptions Are Smelly! Towards Improving AI Agent Efficiency with Augmented MCP Tool Descriptions","version":3},"cited_work":{"arxiv_id":"2602.14878","doi":null,"metadata_source":"pith","pith_arxiv_id":"2602.14878","snapshot_observed_at":"2026-07-04T06:49:38.271685Z","title":"Model context protocol (mcp) tool descriptions are smelly! towards improving ai agent efficiency with augmented mcp tool descriptions","venue":"cs.SE","work_id":"d6451e03-9e7d-44ad-bf04-310249b15336","year":2026},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"cited_paper":"/paper/2602.14878","citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:b6a807b007cf4be8c4bd93c768b4b9c8ba0f8e7855fc29c5d767e4d49e5a5a12","observation_id":"5702ac6d-e2db-4eb0-9f26-981ef991bfc1","resolution":{"observed_at":"2026-07-04T06:49:38.274201Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"ACM Transactions on Software Engineering and Methodology (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:9a83338d51e4a9b46af94a05c70df50e26ee4e6303f81f82ec050468ba6d9d25","observation_id":"0a2fb3ff-dd3a-4152-a839-8018a608e4fd","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"Journal of Computer Science and Digital Technolo- gies1(1), 50–59 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:96976a174143e1c58b581c75a50e4d3542042cde494fe3c2f439b082118bfac3","observation_id":"0c109fc7-f689-4a63-b543-fc9b8a092468","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-05T17:22:12.116167Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:3b281b48bfa657a31fff292336331a4c490062ea4b9c8477e9731d9258226ac6","observation_id":"fea33fab-f610-492f-a84a-666f4bc8fcd7","resolution":{"observed_at":"2026-07-04T06:49:38.270421Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1404.7431","last_updated":"2014-04-29T17:01:24Z","snapshot_observed_at":"2026-07-06T03:42:22.835075Z","submitted_at":"2014-04-29T17:01:24Z","title":"I know what leaked in your pocket: uncovering privacy leaks on Android Apps with Static Taint Analysis","version":1},"cited_work":{"arxiv_id":"1404.7431","doi":null,"metadata_source":"pith","pith_arxiv_id":"1404.7431","snapshot_observed_at":"2026-07-04T06:49:38.264728Z","title":"I know what leaked in your pocket: uncovering privacy leaks on Android Apps with Static Taint Analysis","venue":"cs.SE","work_id":"dc4c2149-b98b-4ae4-bad1-7922425ddffe","year":2014},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"cited_paper":"/paper/1404.7431","citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:8ee7f917c891bd14077758928aea9d6cb46bfcedf3e2a80d9c4359a90743cca0","observation_id":"6237f64a-a6f9-41f2-80e3-1452fa0dccfc","resolution":{"observed_at":"2026-07-04T06:49:38.266832Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.03580","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T10:26:11.125563Z","title":"Don’t believe everything you read: Understanding and measuring mcp behavior under misleading tool descriptions","venue":null,"work_id":"c231d6ea-d803-48e3-b274-3663b7e97f52","year":2026},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:e7a05abd81e35abe56231d9ab5896e5a940808d01147420089b920d972362d07","observation_id":"b8310c55-efc4-4376-949d-64ed1220fb5d","resolution":{"observed_at":"2026-07-04T06:49:38.263418Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:af674d053311234c207fe76901adac300fac50a41818ab1b5e4d4bebcd5a0735","observation_id":"82d23ceb-37f7-43f0-a3ff-fe8c31657a7d","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: 33rd USENIX Security Symposium (USENIX Security 24)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:2a27edf57cd3f46fad5a9e0c95f92e1efc279820dcd35da00de2d4183c50f72d","observation_id":"68e34517-f955-40d3-8431-4c2041d62a42","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: 2025 IEEE Symposium on Security and Privacy (SP)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:0445475ae3d9b0b4f5024ea95427b8ac0a22a23303389263e5fb3032198b89a2","observation_id":"9fac06d8-a735-482e-bbb9-71a4f962ac3d","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:501d15ecfea35318bfbef3c49ccd3d7ae6b60eefe99b807a11ef3f8c820a066b","observation_id":"ed00b68e-546e-43ba-a27f-545d17d64d39","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"Accessed: 2026-04-18","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:3ff8e129139665ee25b9338739cb5ded427a46979ba3f9029e649d81d00a543b","observation_id":"9a9e5e91-ba41-49fe-b462-d1a088e65f80","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.03767","last_updated":"2025-04-11T16:59:05Z","snapshot_observed_at":"2026-08-04T11:49:52.391715Z","submitted_at":"2025-04-02T21:46:02Z","title":"MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits","version":2},"cited_work":{"arxiv_id":"2504.03767","doi":"10.48550/arxiv.2504.03767","metadata_source":"pith","pith_arxiv_id":"2504.03767","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp safety audit: Llms with the model context protocol allow major security exploits","venue":"cs.CR","work_id":"d5c42cc2-8444-459f-bcc5-f36d34de7a47","year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"cited_paper":"/paper/2504.03767","citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:26100eef91a37a3c17db9dad11bc453e5d96d8c9e318a8cf6b49f13111d34f1f","observation_id":"3b0b5e17-d9af-4567-b117-cbef1c7fe39c","resolution":{"observed_at":"2026-07-04T06:49:38.260056Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.02325","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T06:49:38.250491Z","title":"arXiv preprint arXiv:2510.02325 (2025)","venue":null,"work_id":"93fcfaab-88f3-49e9-bcc2-5c53a9b56d75","year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:8df6e164e1e0dedfcab401122ef2336416a80f2593c82cbab45bf2ad87690a38","observation_id":"682dcbd2-6458-4cbd-b729-2ae3b9127aa5","resolution":{"observed_at":"2026-07-04T06:49:38.252119Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"do anything now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:291aeebf402c98a434d57e1ed6ca54cbf3d04e19a6182ef06415e8d57f42393a","observation_id":"16581d4d-456a-428b-9ea4-5855f2d96b32","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: Proceedings of the 24th Workshop on Privacy in the Electronic Society","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:a3cfd109f999378514ec4fe19f45790a4d45f53ffdf5ea3094610f626424bd59","observation_id":"89cb100d-a9fd-433b-a4a2-f1bdc46a057f","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: 2025 3rd International Conference on Inventive Computing and Informatics (ICICI)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:ec2b80e22dc1cee16d8f1f4c6013c694ce00eb6de7a6cefe33fbf82b7b0d056c","observation_id":"1dd9e568-d010-413f-bd5d-d891b0f71191","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:b78c205e3b1ee5976ac6993d86ee2c2ab47a1fd056cca89e0fb66ad53607a226","observation_id":"aca05402-cb26-46ff-9fc4-a0af4499e135","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: 34rd USENIX Security Symposium (USENIX Security 25) (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:ccd88f04be0219df60f86174672771a863de5ecc950e7a3475a8f2ed667ea76c","observation_id":"97a3124f-e946-49dc-8c10-883fe58c02de","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: First conference on language modeling (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:40490294a0bd7cb1f09555c68c1e0f76fdb3f42ea13fc699a451970c749bf6aa","observation_id":"85110723-3509-42fb-9276-b7afd7dba1cf","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: 34rd USENIX Security Symposium (USENIX Security 25) (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:16d02b4ee9d6b074ba75a49afb66365c8900a411a15927d57dd8d79ef7513722","observation_id":"1dfef9d8-d08f-4dbd-b869-54cd2d517432","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:523679224c5861fcbd4e4e990e36adbacc7e3d48d27bccd78afe1a55f4046448","observation_id":"bdee3707-09d0-40e8-8936-d1f9b0274458","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T14:07:59.170493Z","title":"In: Findings of the As- sociation for Computational Linguistics: ACL 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:15e4f11d036d6d48e9b8c5d5e756fb09eac97e9d21a6e655d314ccf703147613","observation_id":"cde534fe-c364-438b-90e8-27c181489353","resolution":{"observed_at":"2026-06-26T14:07:59.170493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2411.01344","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-04T06:49:38.278214Z","title":"Can Humans Oversee Agents to Prevent Privacy Leakage? A Study on Privacy Awareness, Preferences, and Trust in Language Model Agents","venue":null,"work_id":"cc6a3db2-e762-4440-b744-ac09ea1decef","year":2024},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:3b77f76759cbbba7ea59e32ffc49054f06845760ae2d1da7a9f7981fc90e38db","observation_id":"95656585-c712-4ed7-921f-8378b2fb6295","resolution":{"observed_at":"2026-07-04T06:49:38.280420Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:71ff2ff5b0d5a8e6d56a448a659a561026427be8f7917208358bfd94c1fa89db","observation_id":"5757a4e7-4d94-4aaf-af46-14e0f79845cb","resolution":{"observed_at":"2026-07-04T06:49:38.256456Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers"},"reference_resolution":{"displayed":37,"state_counts":{"malformed_identifier":0,"metadata_mismatch":9,"parse_uncertain":0,"unresolved":26,"verified_exact":2,"verified_fuzzy":0},"total_outbound_references":37},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 0 inbound Pith citation observations for arXiv:2606.21338."}