Paper Citation Record · LEDGER

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers

As of 23 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 1 inbound Pith citation observation for arXiv:2605.22333.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2605.22333 v1

Coverage vector

measured 50 of 50 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-05-22T05:36:12.341248Z

measured 51 of 51 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-23T06:30:58.430688+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-04T01:16:23.004816Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

50 of 50 outbound references displayed

verified exact16
verified fuzzy34
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation bdf7df91-3d2b-44c5-bc4f-371b065da2f1 · outbound

This paper cites Building agents that reach production systems with MCP.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Building agents that reach production systems with MCP

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.657457Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 1905b964-8460-4d4e-8f30-7304e5ff192a · outbound

This paper cites A First Look at the Security Issues in the Model Context Protocol Ecosystem.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers A First Look at the Security Issues in the Model Context Protocol Ecosystem

Reference 2

Resolution: verified exact; local_arxiv, observed 2026-05-22T05:41:09.278247Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation cceeac17-b3e3-4fb7-8741-2cf98c84286f · outbound

This paper cites Compatibility at a cost: Systematic discovery and exploitation of mcp clause-compliance vulnerabilities.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Compatibility at a cost: Systematic discovery and exploitation of mcp clause-compliance vulnerabilities

Reference 3

Resolution: verified exact; arxiv_id, observed 2026-05-22T05:41:09.270708Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation fb87a1a5-bedf-437a-8662-3a65ebbcc570 · outbound

This paper cites When MCP meets OAuth: Common pitfalls lead- ing to one-click account takeover.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers When MCP meets OAuth: Common pitfalls lead- ing to one-click account takeover

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.632222Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation c2b9d6f2-a608-4fff-a750-26c474821369 · outbound

This paper cites Authorization – model context protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Authorization – model context protocol

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.670568Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 8e4d28f4-a155-4401-8b89-254d3236724b · outbound

This paper cites Oauch: Exploring security compliance in the oauth 2.0 ecosystem.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Oauch: Exploring security compliance in the oauth 2.0 ecosystem

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.666978Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation ccb75537-29e3-4471-ab05-658b6ad09c31 · outbound

This paper cites MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security

Reference 7

Resolution: verified exact; arxiv_id, observed 2026-05-26T03:04:03.989565Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation f53176d4-899f-4261-b3d2-1629136f5374 · outbound

This paper cites MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits

Reference 8

Resolution: verified exact; arxiv_id, observed 2026-05-22T05:41:09.226585Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 9a007b49-1d5c-4251-9461-38133b23485a · outbound

This paper cites Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers

Reference 9

Resolution: verified exact; local_arxiv, observed 2026-05-22T05:41:09.222313Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 1037b651-b499-45d5-b6e5-df4d3d627f03 · outbound

This paper cites When mcp servers attack: Taxonomy, feasibility, and mitigation.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers When mcp servers attack: Taxonomy, feasibility, and mitigation

Reference 10

Resolution: verified exact; arxiv_id, observed 2026-05-22T05:41:09.306072Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation b8fdb540-da59-4479-8345-6824fa0165cc · outbound

This paper cites Model Context Protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Model Context Protocol

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.623685Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation eae5fcde-7207-4f19-bf26-811a9b2cf0cb · outbound

This paper cites Securing the model context protocol (mcp): Risks, controls, and governance.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Securing the model context protocol (mcp): Risks, controls, and governance

Reference 12

Resolution: verified exact; arxiv_id, observed 2026-05-22T05:41:09.295900Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 524d8aa4-f486-41d0-9375-b026fc419167 · outbound

This paper cites Breaking the protocol: Security anal- ysis of the model context protocol specification and prompt in- jection vulnerabilities in tool-integrated llm agents.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Breaking the protocol: Security anal- ysis of the model context protocol specification and prompt in- jection vulnerabilities in tool-integrated llm agents

Reference 13

Resolution: verified exact; arxiv_id, observed 2026-05-22T05:41:09.288529Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation e225d668-1e81-4957-b1fd-96946fab4fd2 · outbound

This paper cites Systematization of knowledge: Security and safety in the model context protocol ecosystem.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Systematization of knowledge: Security and safety in the model context protocol ecosystem

Reference 14

Resolution: verified exact; arxiv_id, observed 2026-05-22T05:41:09.283471Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation cf1f0306-6cb6-4d4a-8c8b-73ffbed652f5 · outbound

This paper cites Authorization – model context protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Authorization – model context protocol

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.652548Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 4e7f25d3-3ead-484b-a16d-f682d20bbad2 · outbound

This paper cites Authorization – model context protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Authorization – model context protocol

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.662754Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation dee71381-b23d-4d23-9f1b-b4da6cd01f41 · outbound

This paper cites Proof Key for Code Exchange by OAuth Public Clients.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Proof Key for Code Exchange by OAuth Public Clients

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.640383Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 02976ed3-e006-4939-bda7-622e0234d491 · outbound

This paper cites OAuth 2.0 Dynamic Client Registration Protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers OAuth 2.0 Dynamic Client Registration Protocol

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.628303Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 7b968592-b846-4d72-9e5a-ab791eaf44b4 · outbound

This paper cites Authorization – model context protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Authorization – model context protocol

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.910746Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation ce482bd6-5d38-4287-84c9-bb23c7dc73c9 · outbound

This paper cites OAuth 2.0 Protected Resource Metadata.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers OAuth 2.0 Protected Resource Metadata

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.896493Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 80578468-0f11-4e89-9cca-137579ae4984 · outbound

This paper cites Resource Indicators for OAuth 2.0.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Resource Indicators for OAuth 2.0

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.906861Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 7a0eca17-ea45-48bb-9273-9acb3a6e46ec · outbound

This paper cites Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems

Reference 22

Resolution: verified exact; arxiv_id, observed 2026-07-22T03:22:05.785229Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation a17470c7-a59a-4bdc-a9c6-161799b96ebc · outbound

This paper cites Authenticated Delegation and Authorized AI Agents.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Authenticated Delegation and Authorized AI Agents

Reference 23

Resolution: verified exact; arxiv_id, observed 2026-05-22T05:41:09.257378Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 982119ae-38ff-418a-a3f5-77c35a367f89 · outbound

This paper cites Aip: Agent identity protocol for verifiable delegation across mcp and a2a.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Aip: Agent identity protocol for verifiable delegation across mcp and a2a

Reference 24

Resolution: verified exact; arxiv_id, observed 2026-05-22T05:41:09.245390Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation b8259874-2924-4496-b799-3c47f490f5f4 · outbound

This paper cites FOFA Search Engine.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers FOFA Search Engine

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.914310Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 111e7c74-d05e-41fe-aa26-fe1e355e48fb · outbound

This paper cites Shodan Search Engine.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Shodan Search Engine

Reference 26

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.918176Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 87ffcc04-ecb3-488b-b58d-e16ffec7a066 · outbound

This paper cites Empirical scanning analysis of censys and shodan.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Empirical scanning analysis of censys and shodan

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.892885Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 9ebbacca-5999-4097-8af6-bbe61db033c7 · outbound

This paper cites Burp Suite.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Burp Suite

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.900144Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 99d58e09-34c3-4066-8763-6e8265d772fa · outbound

This paper cites PortSwigger oauth-scan.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers PortSwigger oauth-scan

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.889270Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 85ed821b-adaa-4e03-823f-db018cc98854 · outbound

This paper cites Agent2Agent (A2A) Protocol.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Agent2Agent (A2A) Protocol

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.903477Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 39dbc9b5-e533-4e00-bd99-213fafd3b929 · outbound

This paper cites Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP

Reference 31

Resolution: verified exact; local_arxiv, observed 2026-05-22T05:41:09.235247Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 8789f729-d684-46ca-ac42-65f48420e234 · outbound

This paper cites Model context protocol (mcp): Landscape, security threats, and future research directions.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Model context protocol (mcp): Landscape, security threats, and future research directions

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.921984Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 777c753c-176a-4cea-b74c-5b3f5dfa0606 · outbound

This paper cites Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem

Reference 33

Resolution: verified exact; local_arxiv, observed 2026-05-22T05:41:09.230627Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 514be7d5-2603-47ad-9405-c3a875dcd92f · outbound

This paper cites Enterprise-grade security for the model context protocol (mcp): Frameworks and mitigation strategies.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Enterprise-grade security for the model context protocol (mcp): Frameworks and mitigation strategies

Reference 34

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.933708Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 618c6f71-9f98-4752-8068-d129d6ab1446 · outbound

This paper cites Etdi: Mitigating tool squat- ting and rug pull attacks in model context protocol (mcp) by using oauth-enhanced tool definitions and policy-based access control.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Etdi: Mitigating tool squat- ting and rug pull attacks in model context protocol (mcp) by using oauth-enhanced tool definitions and policy-based access control

Reference 35

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.925959Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 4c0868a3-a3b7-4c67-a491-4e09737b4e98 · outbound

This paper cites Identity management for agentic ai: The new frontier of authorization, authentication, and security for an ai agent world.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Identity management for agentic ai: The new frontier of authorization, authentication, and security for an ai agent world

Reference 36

Resolution: verified exact; arxiv_id, observed 2026-05-22T05:41:09.217665Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 56b7a1ce-3d67-466e-8774-5cf8d766e453 · outbound

This paper cites A comprehensive formal security analysis of oauth 2.0.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers A comprehensive formal security analysis of oauth 2.0

Reference 37

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.929765Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation d49369bf-7db2-4e48-8a9c-9432520fe3bc · outbound

This paper cites The web sso standard openid connect: In-depth formal security analysis and security guidelines.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers The web sso standard openid connect: In-depth formal security analysis and security guidelines

Reference 38

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.643747Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 51af3408-ad9a-421a-9a0f-f812003c0946 · outbound

This paper cites An Extensive Formal Security Analysis of the OpenID Financial-grade API.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers An Extensive Formal Security Analysis of the OpenID Financial-grade API

Reference 39

Resolution: verified exact; local_arxiv, observed 2026-05-22T05:41:09.300783Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation af94f9b7-76d4-4a3d-9793-ce27220a725b · outbound

This paper cites Audience injection attacks: A new class of attacks on web-based authorization and authentication standards.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Audience injection attacks: A new class of attacks on web-based authorization and authentication standards

Reference 40

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.958200Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 37b5cfce-f156-4bc0-9471-069079a9968b · outbound

This paper cites Revisiting OAuth 2.0 compliance: A two-year follow-up study.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Revisiting OAuth 2.0 compliance: A two-year follow-up study

Reference 41

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.678847Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 54e604be-270a-4aa7-b5a3-658e8b9d9077 · outbound

This paper cites Model-based security testing: An empirical study on OAuth 2.0 implementations.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Model-based security testing: An empirical study on OAuth 2.0 implementations

Reference 42

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.636593Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation e568a7a1-12e1-47da-97cc-ee4be24e6080 · outbound

This paper cites SSOScan: Automated testing of web appli- cations for single sign-on vulnerabilities.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers SSOScan: Automated testing of web appli- cations for single sign-on vulnerabilities

Reference 43

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.674596Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation d5eff0f6-a1d9-4b9e-ac35-136cd697eaaa · outbound

This paper cites Vulnerability assessment of OAuth implementations in Android applications.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Vulnerability assessment of OAuth implementations in Android applications

Reference 44

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.942747Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 96fd784c-aca0-46f1-8d72-d2287864b772 · outbound

This paper cites The Achilles’ heel of OAuth: A multi-platform study of OAuth-based authentication.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers The Achilles’ heel of OAuth: A multi-platform study of OAuth-based authentication

Reference 45

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.946865Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 5e37305e-3e5a-48ab-8059-8ca9ac472ca2 · outbound

This paper cites Make redirection evil again: Url parser issues in oauth.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Make redirection evil again: Url parser issues in oauth

Reference 46

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.937700Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 1f557854-49b3-4881-8724-73bde20244e8 · outbound

This paper cites Oauth 2.0 redirect uri validation falls short, literally.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Oauth 2.0 redirect uri validation falls short, literally

Reference 47

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.618580Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation c032f17a-ead8-4b3c-8eab-caf41847d26d · outbound

This paper cites Do (not) follow the white rabbit: Challenging the myth of harmless open redirection.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Do (not) follow the white rabbit: Challenging the myth of harmless open redirection

Reference 48

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.950730Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 7e08753e-2f98-4663-8c3c-aa48666cc874 · outbound

This paper cites Universal cross-app attacks: Exploiting and securing{OAuth}2.0 in integration platforms.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers Universal cross-app attacks: Exploiting and securing{OAuth}2.0 in integration platforms

Reference 49

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T05:56:09.954597Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Observation 02ca944b-b237-4622-821a-e7fd5676012e · outbound

This paper cites “only as strong as the weakest link.

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers “only as strong as the weakest link

Reference 50

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T06:06:09.683336Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

Pith citing papers

Observation 43561540-e1fc-4e87-bb2c-e736097c79aa · inbound

Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale cites this paper.

Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale A First Measurement Study on Authentication Security in Real-World Remote MCP Servers

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-04T01:16:23.004816Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.