Pith. sign in

Paper Citation Record · LEDGER

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers

As of 12 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 1 inbound Pith citation observation for arXiv:2605.22333.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2605.22333 v1

Coverage vector

measured 50 of 50 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-05-22T05:36:12.341248Z

measured 51 of 51 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-12T06:34:41.77262+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-04T01:16:23.004816Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

50 of 50 outbound references displayed

  • verified exact16
  • verified fuzzy34
  • unresolved0
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation bdf7df91-3d2b-44c5-bc4f-371b065da2f1 · outbound

This paper cites Building agents that reach production systems with MCP.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Building agents that reach production systems with MCP

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.657457Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:415ba7bca590d1c81b5aeaf53e3966c9a592224928263f15e06818220fa1e6ce

Observation 1905b964-8460-4d4e-8f30-7304e5ff192a · outbound

This paper cites A First Look at the Security Issues in the Model Context Protocol Ecosystem.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers A First Look at the Security Issues in the Model Context Protocol Ecosystem

Reference 2

Resolution
verified exact
local_arxiv, observed 2026-05-22T05:41:09.278247Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:f5bd698eb1aefe50e9aec940c0bee82f158bb8a14b59701814990a46fb3b2cdc

Observation cceeac17-b3e3-4fb7-8741-2cf98c84286f · outbound

This paper cites Compatibility at a cost: Systematic discovery and exploitation of mcp clause-compliance vulnerabilities.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Compatibility at a cost: Systematic discovery and exploitation of mcp clause-compliance vulnerabilities

Reference 3

Resolution
verified exact
arxiv_id, observed 2026-05-22T05:41:09.270708Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:642a71fcd27b57353564f636d838967dbc604f1d7158bd61eafc8db6707e00c1

Observation fb87a1a5-bedf-437a-8662-3a65ebbcc570 · outbound

This paper cites When MCP meets OAuth: Common pitfalls lead- ing to one-click account takeover.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers When MCP meets OAuth: Common pitfalls lead- ing to one-click account takeover

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.632222Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:b4f4fa772971f15be1a8ec92da6bdb6d9ad25bb5f8b2e7308a8a3df578bd13fd

Observation c2b9d6f2-a608-4fff-a750-26c474821369 · outbound

This paper cites Authorization – model context protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Authorization – model context protocol

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.670568Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:e885cdbeea680a4e0b21298da2e3ea42430efb3d88cc474bc47715903900f787

Observation 8e4d28f4-a155-4401-8b89-254d3236724b · outbound

This paper cites Oauch: Exploring security compliance in the oauth 2.0 ecosystem.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Oauch: Exploring security compliance in the oauth 2.0 ecosystem

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.666978Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:64a21a9ae08808726eab97b2f38323bbeb4e5d5932abeb59e52ce521618e673d

Observation ccb75537-29e3-4471-ab05-658b6ad09c31 · outbound

This paper cites MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security

Reference 7

Resolution
verified exact
arxiv_id, observed 2026-05-26T03:04:03.989565Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:d7364977914d39ea81d637f38a42a9f0bd83474898d8a23eee48ae2e50d1cc36

Observation f53176d4-899f-4261-b3d2-1629136f5374 · outbound

This paper cites MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits

Reference 8

Resolution
verified exact
arxiv_id, observed 2026-05-22T05:41:09.226585Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:c5a5224de0fef51b016330afbfeb4fb602f4db50c21fdbbc58397bfdf8f9e824

Observation 9a007b49-1d5c-4251-9461-38133b23485a · outbound

This paper cites Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers

Reference 9

Resolution
verified exact
local_arxiv, observed 2026-05-22T05:41:09.222313Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:5446c85278f07151b8c687d7de5323567eb9fd3bb5de75f5eefd3fd7e9c3d9a2

Observation 1037b651-b499-45d5-b6e5-df4d3d627f03 · outbound

This paper cites When mcp servers attack: Taxonomy, feasibility, and mitigation.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers When mcp servers attack: Taxonomy, feasibility, and mitigation

Reference 10

Resolution
verified exact
arxiv_id, observed 2026-05-22T05:41:09.306072Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:2ba110f37bd5814ff3cdf1103400f79fe5a7df1dbbc64a22964684ad4586bbe5

Observation b8fdb540-da59-4479-8345-6824fa0165cc · outbound

This paper cites Model Context Protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Model Context Protocol

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.623685Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:fb25d5d09a80baac5fc93e56f387a5bf7402aed8ccd6bb030d226423379c0ba5

Observation eae5fcde-7207-4f19-bf26-811a9b2cf0cb · outbound

This paper cites Securing the model context protocol (mcp): Risks, controls, and governance.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Securing the model context protocol (mcp): Risks, controls, and governance

Reference 12

Resolution
verified exact
arxiv_id, observed 2026-05-22T05:41:09.295900Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:468e66b0c9b3ef7278b108aac3b87d9ea1c203b45334aae47665ab63a10df535

Observation 524d8aa4-f486-41d0-9375-b026fc419167 · outbound

This paper cites Breaking the protocol: Security anal- ysis of the model context protocol specification and prompt in- jection vulnerabilities in tool-integrated llm agents.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Breaking the protocol: Security anal- ysis of the model context protocol specification and prompt in- jection vulnerabilities in tool-integrated llm agents

Reference 13

Resolution
verified exact
arxiv_id, observed 2026-05-22T05:41:09.288529Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:39565e63f3c9c7ffea650f7e205d082be53ae805802845728553398b778b9696

Observation e225d668-1e81-4957-b1fd-96946fab4fd2 · outbound

This paper cites Systematization of knowledge: Security and safety in the model context protocol ecosystem.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Systematization of knowledge: Security and safety in the model context protocol ecosystem

Reference 14

Resolution
verified exact
arxiv_id, observed 2026-05-22T05:41:09.283471Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:88cb72daf3e3705fa519b4585862064b591f62a0be282e6351acd8c3ba04cf52

Observation cf1f0306-6cb6-4d4a-8c8b-73ffbed652f5 · outbound

This paper cites Authorization – model context protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Authorization – model context protocol

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.652548Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:7e3245d4d16f87c12a7167821d9d2b809146dd852663ff65cb34f67fd32b8d5b

Observation 4e7f25d3-3ead-484b-a16d-f682d20bbad2 · outbound

This paper cites Authorization – model context protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Authorization – model context protocol

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.662754Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:6621037240670a384ab810b2b2dad1aa48d57f1b81f7c4f6d73565c06af19349

Observation dee71381-b23d-4d23-9f1b-b4da6cd01f41 · outbound

This paper cites Proof Key for Code Exchange by OAuth Public Clients.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Proof Key for Code Exchange by OAuth Public Clients

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.640383Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:bca5f134275f397ff0578bf13548cabf15e6de8810098dfcfd6d0b96b85be2ea

Observation 02976ed3-e006-4939-bda7-622e0234d491 · outbound

This paper cites OAuth 2.0 Dynamic Client Registration Protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers OAuth 2.0 Dynamic Client Registration Protocol

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.628303Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:ea05fff7d31a029f9730d2b90700154a1aca7ce3e782fe99f2288660f1b65f84

Observation 7b968592-b846-4d72-9e5a-ab791eaf44b4 · outbound

This paper cites Authorization – model context protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Authorization – model context protocol

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.910746Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:cbdce609fd988e6839b829c1a016f3c68bbe9a8be02221b783c35b77c4846ee8

Observation ce482bd6-5d38-4287-84c9-bb23c7dc73c9 · outbound

This paper cites OAuth 2.0 Protected Resource Metadata.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers OAuth 2.0 Protected Resource Metadata

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.896493Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:99779bc2e03a08f93b3e1af58f224e8df6828b9fe85db8eda871b534dc5eafba

Observation 80578468-0f11-4e89-9cca-137579ae4984 · outbound

This paper cites Resource Indicators for OAuth 2.0.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Resource Indicators for OAuth 2.0

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.906861Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:96677342aecd3c9520b6264b5d2999c1667b5af75a35714835ec4da72a43ea64

Observation 7a0eca17-ea45-48bb-9273-9acb3a6e46ec · outbound

This paper cites Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems

Reference 22

Resolution
verified exact
arxiv_id, observed 2026-07-22T03:22:05.785229Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:6e57721d8ecbb0c62350ef679e0e865ba1d7b537da7fc0ce47114f55f2631e57

Observation a17470c7-a59a-4bdc-a9c6-161799b96ebc · outbound

This paper cites Authenticated Delegation and Authorized AI Agents.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Authenticated Delegation and Authorized AI Agents

Reference 23

Resolution
verified exact
arxiv_id, observed 2026-05-22T05:41:09.257378Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:ce3344522babd0549fa8744c13bc45e92bbe7012f835bd4addc7c3a94d4fd588

Observation 982119ae-38ff-418a-a3f5-77c35a367f89 · outbound

This paper cites Aip: Agent identity protocol for verifiable delegation across mcp and a2a.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Aip: Agent identity protocol for verifiable delegation across mcp and a2a

Reference 24

Resolution
verified exact
arxiv_id, observed 2026-05-22T05:41:09.245390Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:341c438ed508237322ab715659ba6a18afb7b5e932ef6f0822b0cb46ceec7631

Observation b8259874-2924-4496-b799-3c47f490f5f4 · outbound

This paper cites FOFA Search Engine.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers FOFA Search Engine

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.914310Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:2740785bbf57f193ecea6646e04c108fc3014c62d33fd15e50c9b55c60d608f5

Observation 111e7c74-d05e-41fe-aa26-fe1e355e48fb · outbound

This paper cites Shodan Search Engine.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Shodan Search Engine

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.918176Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:b5dac7874359afc2ed83f61c923bc4b7e10f63b481c69130ce03a7938da05fae

Observation 87ffcc04-ecb3-488b-b58d-e16ffec7a066 · outbound

This paper cites Empirical scanning analysis of censys and shodan.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Empirical scanning analysis of censys and shodan

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.892885Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:30e38f4c46cea826460ef993ad138799b7a132ef634ab0d0eab293fa825c7d0f

Observation 9ebbacca-5999-4097-8af6-bbe61db033c7 · outbound

This paper cites Burp Suite.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Burp Suite

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.900144Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:5b87b989942d12e1fd6293dc68a373322569d3feaf6961e7463d55a2adde0fa6

Observation 99d58e09-34c3-4066-8763-6e8265d772fa · outbound

This paper cites PortSwigger oauth-scan.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers PortSwigger oauth-scan

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.889270Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:51f11fed3ac5f7952e311a3cd27c216727c5b26be6880bd4bd8be4b8a3488830

Observation 85ed821b-adaa-4e03-823f-db018cc98854 · outbound

This paper cites Agent2Agent (A2A) Protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Agent2Agent (A2A) Protocol

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.903477Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:a6be1e59ec75f2280990eda24785592540754d1d31b0d78c3a8a6c88f7bf3ff4

Observation 39dbc9b5-e533-4e00-bd99-213fafd3b929 · outbound

This paper cites Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP

Reference 31

Resolution
verified exact
local_arxiv, observed 2026-05-22T05:41:09.235247Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:4cd774dc7243115758dd370343ab0b3fbc1527743251874bc9547e8fcbd996af

Observation 8789f729-d684-46ca-ac42-65f48420e234 · outbound

This paper cites Model context protocol (mcp): Landscape, security threats, and future research directions.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Model context protocol (mcp): Landscape, security threats, and future research directions

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.921984Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:309c24fcef07636462445507d0b1daee8abbabd372ccc1f472f2db56973bf594

Observation 777c753c-176a-4cea-b74c-5b3f5dfa0606 · outbound

This paper cites Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem

Reference 33

Resolution
verified exact
local_arxiv, observed 2026-05-22T05:41:09.230627Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:e2cb13e4c77ca9948709b3696dd76aeec67913aceeed62cba639e6a1bc53ef6e

Observation 514be7d5-2603-47ad-9405-c3a875dcd92f · outbound

This paper cites Enterprise-grade security for the model context protocol (mcp): Frameworks and mitigation strategies.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Enterprise-grade security for the model context protocol (mcp): Frameworks and mitigation strategies

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.933708Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:02fa05bd5d84e4aaf98b2fe4844ad37134982bfff73b45a81214fe9151a2d8ef

Observation 618c6f71-9f98-4752-8068-d129d6ab1446 · outbound

This paper cites Etdi: Mitigating tool squat- ting and rug pull attacks in model context protocol (mcp) by using oauth-enhanced tool definitions and policy-based access control.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Etdi: Mitigating tool squat- ting and rug pull attacks in model context protocol (mcp) by using oauth-enhanced tool definitions and policy-based access control

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.925959Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:c6062af0d1db063393b3881d8601500ab8f24fae84a3ec5e581777f524d12582

Observation 4c0868a3-a3b7-4c67-a491-4e09737b4e98 · outbound

This paper cites Identity management for agentic ai: The new frontier of authorization, authentication, and security for an ai agent world.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Identity management for agentic ai: The new frontier of authorization, authentication, and security for an ai agent world

Reference 36

Resolution
verified exact
arxiv_id, observed 2026-05-22T05:41:09.217665Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:2c9689c3ca71580b455fe2df6cf5aa7989375a9cf8d9dcfc16c04932e804b48f

Observation 56b7a1ce-3d67-466e-8774-5cf8d766e453 · outbound

This paper cites A comprehensive formal security analysis of oauth 2.0.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers A comprehensive formal security analysis of oauth 2.0

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.929765Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:7202ab0179ee041dd4eb833b4ffd2afd8118e4fcd99bf6e8c21d69cf913dfac1

Observation d49369bf-7db2-4e48-8a9c-9432520fe3bc · outbound

This paper cites The web sso standard openid connect: In-depth formal security analysis and security guidelines.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers The web sso standard openid connect: In-depth formal security analysis and security guidelines

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.643747Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:fe6ad34713793dab6583351eb2c29654bdffea413d93d91d9ecd09e0b3b31156

Observation 51af3408-ad9a-421a-9a0f-f812003c0946 · outbound

This paper cites An Extensive Formal Security Analysis of the OpenID Financial-grade API.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers An Extensive Formal Security Analysis of the OpenID Financial-grade API

Reference 39

Resolution
verified exact
local_arxiv, observed 2026-05-22T05:41:09.300783Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:5bead55fbbf21f34b33fcd12fd1b12f90cb38da1cfc4b125eb6040b1a6a639eb

Observation af94f9b7-76d4-4a3d-9793-ce27220a725b · outbound

This paper cites Audience injection attacks: A new class of attacks on web-based authorization and authentication standards.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Audience injection attacks: A new class of attacks on web-based authorization and authentication standards

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.958200Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:2d9080b3352cd599b731abeaa1a2ebbd393d44c9f7280af0a0986f150d9dfa4b

Observation 37b5cfce-f156-4bc0-9471-069079a9968b · outbound

This paper cites Revisiting OAuth 2.0 compliance: A two-year follow-up study.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Revisiting OAuth 2.0 compliance: A two-year follow-up study

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.678847Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:0d30e0e0840794c1086dbdd8a891d7211d08038d30d21791d1c01aef4850b777

Observation 54e604be-270a-4aa7-b5a3-658e8b9d9077 · outbound

This paper cites Model-based security testing: An empirical study on OAuth 2.0 implementations.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Model-based security testing: An empirical study on OAuth 2.0 implementations

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.636593Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:58a96e931fdbea4902899c901c67acd9f60cde6e8938bbc3cbe559f4fc7476be

Observation e568a7a1-12e1-47da-97cc-ee4be24e6080 · outbound

This paper cites SSOScan: Automated testing of web appli- cations for single sign-on vulnerabilities.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers SSOScan: Automated testing of web appli- cations for single sign-on vulnerabilities

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.674596Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:24438dff605d8ff89ac2e28de289353469548d44f10810b2cbd440af632d375a

Observation d5eff0f6-a1d9-4b9e-ac35-136cd697eaaa · outbound

This paper cites Vulnerability assessment of OAuth implementations in Android applications.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Vulnerability assessment of OAuth implementations in Android applications

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.942747Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:6afe60ce044b1a47083d1c028dae6a1b566f658eb54e308dcf3adf309f9354d6

Observation 96fd784c-aca0-46f1-8d72-d2287864b772 · outbound

This paper cites The Achilles’ heel of OAuth: A multi-platform study of OAuth-based authentication.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers The Achilles’ heel of OAuth: A multi-platform study of OAuth-based authentication

Reference 45

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.946865Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:8c0a0e729e93362493bac61392fe513ffbd908e9d5e9acc1ef49cde51bae8666

Observation 5e37305e-3e5a-48ab-8059-8ca9ac472ca2 · outbound

This paper cites Make redirection evil again: Url parser issues in oauth.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Make redirection evil again: Url parser issues in oauth

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.937700Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:725db65b7b002c8363fb1523aafd4a95dcf1399f41ea316214c0462e0eec812b

Observation 1f557854-49b3-4881-8724-73bde20244e8 · outbound

This paper cites Oauth 2.0 redirect uri validation falls short, literally.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Oauth 2.0 redirect uri validation falls short, literally

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.618580Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:cb7af7e734356e92f4a8daa43c957a458603195b100347ee59faecc80528299b

Observation c032f17a-ead8-4b3c-8eab-caf41847d26d · outbound

This paper cites Do (not) follow the white rabbit: Challenging the myth of harmless open redirection.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Do (not) follow the white rabbit: Challenging the myth of harmless open redirection

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.950730Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:8aa7b7ccd193387213f6aca310599a7639a82bcd01e44f596bd619ff9f469d04

Observation 7e08753e-2f98-4663-8c3c-aa48666cc874 · outbound

This paper cites Universal cross-app attacks: Exploiting and securing{OAuth}2.0 in integration platforms.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Universal cross-app attacks: Exploiting and securing{OAuth}2.0 in integration platforms

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T05:56:09.954597Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:ec6d3e628edc50e2863a877639f2d04494594ca6564dbff5a75ec12b3ab5cc7b

Observation 02ca944b-b237-4622-821a-e7fd5676012e · outbound

This paper cites “only as strong as the weakest link.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers “only as strong as the weakest link

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-05-22T06:06:09.683336Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-05-22T05:36:12.341248Z digest=sha256:d613c37b359567cd1406fe8e7974d6a740684748c7dfd7f829d6ea9479348163

Pith citing papers

Observation 43561540-e1fc-4e87-bb2c-e736097c79aa · inbound

Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale cites this paper.

Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale A First Measurement Study on Authentication Security in Real-World Remote MCP Servers

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-04T01:16:23.004816Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-04T01:16:23.004816Z digest=sha256:55738ba2833396bda587220da92c7e77929cd30d7179ef576ec35cfd86e48a29