{"as_of":"2026-08-11T17:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:bf426bc6dc507b2e5eeaee9c44ab204b8204475f39ae6a23334c6829ab0ee153","coverage":[{"denominator":21,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":21,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T01:16:24.431891Z","state":"measured"},{"denominator":21,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":21,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.00150/citation-record","integrity":"/paper/2608.00150/integrity","json":"/paper/2608.00150/citation-record.json","paper":"/paper/2608.00150"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:22.537261Z","title":"Introducing the model context protocol,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:22.537261Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:c32e19b1f62263e4a783ecefd38b4863f1f11fe03a0436a1c4b17f9b772a60ab","observation_id":"8b4993f0-b7c0-4d98-a776-8b18c057e0af","resolution":{"observed_at":"2026-08-04T01:16:22.537261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:22.615652Z","title":"Internet-wide scan: Model Context Protocol server exposure,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:22.615652Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:2700350f91388fa37daa26230384a53b66449a1f1b8ec5ba1892c51f40d9c2f1","observation_id":"09fd96ea-d081-4010-83be-9c3b0af5abfd","resolution":{"observed_at":"2026-08-04T01:16:22.615652Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.03767","last_updated":"2025-04-11T16:59:05Z","snapshot_observed_at":"2026-08-09T15:33:11.934104Z","submitted_at":"2025-04-02T21:46:02Z","title":"MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.03767","snapshot_observed_at":"2026-08-04T01:16:22.706810Z","title":"MCP safety audit: LLMs with the model context protocol allow major security exploits,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:22.706810Z"},"links":{"cited_paper":"/paper/2504.03767","citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:526371bc365eaa6dba3faaa26eae96ae7d922f0f4eb8619e2d020188d96f6b1d","observation_id":"7b253efc-dca1-4ed9-b37e-87efd1d6609b","resolution":{"observed_at":"2026-08-04T01:16:22.706810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-07-06T21:00:55.979837Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.23278","snapshot_observed_at":"2026-08-04T01:16:22.814821Z","title":"Model context protocol (MCP): Landscape, security threats, and future research directions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:22.814821Z"},"links":{"cited_paper":"/paper/2503.23278","citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:8ccf44c5e553983eb1b250c524c5ab971adb663a1c5df8db9bbd9a33ffd9589b","observation_id":"d46524ab-eb84-4eff-9581-272641045702","resolution":{"observed_at":"2026-08-04T01:16:22.814821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:22.952820Z","title":"Not what you’ve signed up for: Compromising real-world LLM- integrated applications with indirect prompt injection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:22.952820Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:275a66fd483a3377acb2d7f5249b9adcc85ebc5683f0a0f72070773f78f8d540","observation_id":"38f89dd0-be7a-413d-b310-a3c1048ceef6","resolution":{"observed_at":"2026-08-04T01:16:22.952820Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.22333","last_updated":"2026-05-21T11:22:21Z","snapshot_observed_at":"2026-07-06T23:32:39.761431Z","submitted_at":"2026-05-21T11:22:21Z","title":"A First Measurement Study on Authentication Security in Real-World Remote MCP Servers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.22333","snapshot_observed_at":"2026-08-04T01:16:23.004816Z","title":"A first measurement study on authentication security in real-world remote MCP servers,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:23.004816Z"},"links":{"cited_paper":"/paper/2605.22333","citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:55738ba2833396bda587220da92c7e77929cd30d7179ef576ec35cfd86e48a29","observation_id":"43561540-e1fc-4e87-bb2c-e736097c79aa","resolution":{"observed_at":"2026-08-04T01:16:23.004816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.16558","last_updated":"2026-04-27T18:24:07Z","snapshot_observed_at":"2026-07-06T22:33:28.866887Z","submitted_at":"2025-10-18T16:09:05Z","title":"A First Look at the Security Issues in the Model Context Protocol Ecosystem","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.16558","snapshot_observed_at":"2026-08-04T01:16:23.082669Z","title":"A first look at the security issues in the MCP ecosystem,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:23.082669Z"},"links":{"cited_paper":"/paper/2510.16558","citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:aa3428cf0f325e2cff1db416e8a03138e0bbc9ec16ad588ceee617b7340297b3","observation_id":"56e1eabe-a63c-4ce7-9c50-c44c25363155","resolution":{"observed_at":"2026-08-04T01:16:23.082669Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.21392","last_updated":"2026-05-20T16:46:51Z","snapshot_observed_at":"2026-08-09T14:55:09.608616Z","submitted_at":"2026-05-20T16:46:51Z","title":"VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.21392","snapshot_observed_at":"2026-08-04T01:16:23.187009Z","title":"VIPER- MCP: Detecting and exploiting taint-style vulnerabilities in MCP servers,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:23.187009Z"},"links":{"cited_paper":"/paper/2605.21392","citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:04b0ad9e3391e4f9257830e2becee2935611853bf3a2ed8f57386edf3da4947d","observation_id":"f9a8732b-42dd-41fb-9475-40a7c3d6da33","resolution":{"observed_at":"2026-08-04T01:16:23.187009Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.13538","last_updated":"2026-04-13T03:45:24Z","snapshot_observed_at":"2026-08-11T16:37:51.228728Z","submitted_at":"2025-06-16T14:26:37Z","title":"Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.13538","snapshot_observed_at":"2026-08-04T01:16:23.317217Z","title":"MCP at first glance: Studying the security and maintainability of MCP servers,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:23.317217Z"},"links":{"cited_paper":"/paper/2506.13538","citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:b812b15a754120066458980f6c07f9ba7d54fcd49ae3c7d7a2d8d1ab1ceaa817","observation_id":"d989c0e7-d94c-4fff-ba8f-c5204220b8ce","resolution":{"observed_at":"2026-08-04T01:16:23.317217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:23.367451Z","title":"Small world with high risks: A study of security threats in the npm ecosystem,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:23.367451Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:47b49092c1d33698b641c0070a85c9f6651ee7e54b76cf7fa1142ad5258c8994","observation_id":"2e6fde08-44e2-4074-ad2c-341772c9a330","resolution":{"observed_at":"2026-08-04T01:16:23.367451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:23.428798Z","title":"Thou shalt not depend on me: Analysing the use of outdated third-party libraries on the web,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:23.428798Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:86ea6fbeb2f577afa293e641950a62cd0ad6ef737ad740c4bcb73a4f26be553a","observation_id":"e00b7df5-d81a-4c8f-830b-5876a859a08d","resolution":{"observed_at":"2026-08-04T01:16:23.428798Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:23.491290Z","title":"ZMap: Fast internet- wide scanning and its security applications,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:23.491290Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:91b6a5ba9aaa01e6430e44169f413a7444f2cad1a45d80ab2621651bf5abcde1","observation_id":"b1f80160-f0d3-4b88-83b2-857cc111a809","resolution":{"observed_at":"2026-08-04T01:16:23.491290Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:23.610972Z","title":"OWASP top ten 2021,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:23.610972Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:fe736a059c16f791323acfbb4d1352549bab2d28268708cafde6b18fd458ae33","observation_id":"c9f27bb6-2528-4353-a269-b0b597aaad08","resolution":{"observed_at":"2026-08-04T01:16:23.610972Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:23.884599Z","title":"OW ASP API security top 10 2023,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:23.884599Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:7548de6bb36b0669e3ea6582117b25f713b8555974df687a66bdafd778175286","observation_id":"c914ec56-8084-4a89-a653-f637ceb2d1f9","resolution":{"observed_at":"2026-08-04T01:16:23.884599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:23.995670Z","title":"Petrel: MCP internet scanner and fingerprinter,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:23.995670Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:afe32b5decef4091802b7740bb5f6b9568b77f675e9d1a347916464a4a7c9615","observation_id":"f96a3de1-1b2d-4b12-b0fe-7c2f0b588ac4","resolution":{"observed_at":"2026-08-04T01:16:23.995670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:24.055376Z","title":"Corvus: Dynamic security testing framework for MCP servers,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:24.055376Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:1d75eed912c0f0c4136bd1f41e2173d690e4bb2d6fe345e2f2f0b08f69e3469b","observation_id":"67c6acab-5fcb-44f6-bc5f-f6c86186b4b6","resolution":{"observed_at":"2026-08-04T01:16:24.055376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:24.107077Z","title":"Vulnerability disclosure FAQ,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:24.107077Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:3b67baa84169d4a6951ca05eec016323441d7cd6c5da202751dd11e92244e405","observation_id":"82944581-ef87-4b69-89ef-41b5161bd503","resolution":{"observed_at":"2026-08-04T01:16:24.107077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:24.250237Z","title":"Complete guide to Shodan,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:24.250237Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:d7db771327581a6139e59ac7046a348718b5751820825520ab0fb8df9840af33","observation_id":"5d830ca2-1517-43fd-b808-ba501b7a4b2c","resolution":{"observed_at":"2026-08-04T01:16:24.250237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:24.334256Z","title":"Understanding the Mirai botnet,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:24.334256Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:8eadc052a7a470208f3e804a4ba85310ef54bfd308a7781dec779d8d6e3d9536","observation_id":"c5407d28-0be9-4392-a70e-561a86841fb0","resolution":{"observed_at":"2026-08-04T01:16:24.334256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:24.431891Z","title":"The Menlo report: Ethical principles guiding information and communication technology research,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:24.431891Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:c25be7f3e064f3db4dbf93753b78bfb604065c89d4c368c4fa61be0e85bf7224","observation_id":"271e408c-1b1d-4ddb-981b-8fee81f64b60","resolution":{"observed_at":"2026-08-04T01:16:24.431891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:16:23.689560Z","title":"Available: https://owasp.org/www-project-top-ten/","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-04T01:16:23.689560Z"},"links":{"citing_paper":"/paper/2608.00150"},"observation_digest":"sha256:62788615f660f77745add3b6e0046e44fe4743f1ce816e96de14be233a1e7c9b","observation_id":"665f012e-914b-47bb-835f-9c0edca52fb3","resolution":{"observed_at":"2026-08-04T01:16:23.689560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.00150","last_updated":"2026-07-31T16:46:19Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T15:33:50.268133Z","submitted_at":"2026-07-31T16:46:19Z","title":"Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale"},"reference_resolution":{"displayed":21,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":21,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":21},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 21 of 21 outbound references and 0 inbound Pith citation observations for arXiv:2608.00150."}