Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-07T12:09:57.476890Z
Paper Citation Record · LEDGER
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
As of 14 August 2026, this Paper Citation Record lists 74 of 74 outbound references and 23 inbound Pith citation observations for arXiv:2506.02040.
A citation records a reference. It does not transfer a finding from one paper to another.
Coverage vector
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-14T06:32:32.682623+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links, observed 2026-08-06T21:44:55.600096Z
A source-named dated measurement, never combined with another source.
Source: pith, observed 2026-07-11T02:47:51.130321Z
Reference resolution
74 of 74 outbound references displayed
- verified exact0
- verified fuzzy54
- unresolved20
- parse uncertain0
- malformed identifier0
- metadata mismatch0
External citation measurements
No source-named external measurement is stored.
Outbound references
Observation 5d90c981-39c5-4f78-8778-f460e9c022ad · outbound
This paper cites Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices
Reference 1
- Resolution
- unresolved
- no resolver link, observed 2026-08-07T12:09:49.761576Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d758ffdb-4ac6-408f-9ba0-01263cbfbbd6 · outbound
This paper cites Claude 3.7 Sonnet, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Claude 3.7 Sonnet, 2025
Reference 2
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:12.594516Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation b7c9a224-314b-450a-ba54-0324563f10a4 · outbound
This paper cites Claude desktop, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Claude desktop, 2025
Reference 3
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:12.448577Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 73bec390-7178-46c3-b2b0-e8e0915e6b19 · outbound
This paper cites Get started with the model context protocol (mcp), 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Get started with the model context protocol (mcp), 2025
Reference 4
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:12.310669Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation c7c9f23f-8422-4570-9a31-91dc2bfd731d · outbound
This paper cites Model Context Protocol, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Model Context Protocol, 2025
Reference 5
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:12.110286Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 57959ecf-e3d3-4ee7-ac7c-c94259dbec42 · outbound
This paper cites Cursor - the ai code editor, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Cursor - the ai code editor, 2025
Reference 6
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:11.936954Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation f72df96f-3818-4071-8d84-aa4d8a8356b9 · outbound
This paper cites Base-mcp, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Base-mcp, 2025
Reference 7
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:11.762262Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation c0994763-6b30-418b-b730-6140d8e4b16c · outbound
This paper cites Agent leaderboard, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Agent leaderboard, 2025
Reference 8
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:11.533527Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 0d58d20d-daec-4f25-b6b9-8da476b3620c · outbound
This paper cites Cline - ai autonomous coding agent for vs code, 2025.https://cline.bot/.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Cline - ai autonomous coding agent for vs code, 2025.https://cline.bot/
Reference 9
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:11.336342Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 79a93c53-caea-450e-bd18-1cb478771543 · outbound
This paper cites A Survey on Evaluation of Large Language Models.ACM Trans- actions on Intelligent Systems and Technology, 2024.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem A Survey on Evaluation of Large Language Models.ACM Trans- actions on Intelligent Systems and Technology, 2024
Reference 10
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:11.145951Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 7dbde308-8d59-4201-8d93-761a2fdb6eca · outbound
This paper cites RMCBench: Benchmarking Large Language Models’ Resistance to Malicious Code.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem RMCBench: Benchmarking Large Language Models’ Resistance to Malicious Code
Reference 11
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:10.967218Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 75998b3c-204c-4ada-8ef3-fbb5f06a29df · outbound
This paper cites Angelopoulos, Tianle Li, Dacheng Li, Banghua Zhu, Hao Zhang, Michael I.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Angelopoulos, Tianle Li, Dacheng Li, Banghua Zhu, Hao Zhang, Michael I
Reference 12
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:10.816952Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 87144687-dc0f-4923-9d42-b5b9477f1914 · outbound
This paper cites Cline-github, 2025.https://github.com/cli ne/cline.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Cline-github, 2025.https://github.com/cli ne/cline
Reference 13
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:10.637058Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation d4687801-cfba-4d2d-a375-57d98dd40b42 · outbound
This paper cites Coingecko api documentation, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Coingecko api documentation, 2025
Reference 14
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:10.406418Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 6c8a84cd-82af-4fea-8fbc-b05d7b0218a2 · outbound
This paper cites DeepSeek-V3 Technical Report.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem DeepSeek-V3 Technical Report
Reference 15
- Resolution
- unresolved
- no resolver link, observed 2026-08-07T12:09:51.274784Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ea801488-f005-47d0-948f-a45e5dcd55d3 · outbound
This paper cites Ai agents under threat: A survey of key security challenges and future pathways.ACM Comput.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Ai agents under threat: A survey of key security challenges and future pathways.ACM Comput
Reference 16
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:10.159315Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 066b3b6a-bb8a-46f5-bbaa-3dae2a635955 · outbound
This paper cites Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages
Reference 17
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:09.934672Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation e0349d36-0450-4722-a8ec-0041d87ea18a · outbound
This paper cites WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks
Reference 18
- Resolution
- unresolved
- no resolver link, observed 2026-08-07T12:09:51.609857Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e982095e-0617-4d3d-8432-0f1c90bf8404 · outbound
This paper cites One step further: evaluating interpreters using metamorphic testing.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem One step further: evaluating interpreters using metamorphic testing
Reference 19
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:09.765008Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation a8c2875c-b6be-4d37-adc2-4543f375ff89 · outbound
This paper cites Explanation-guided fairness testing through genetic algorithm.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Explanation-guided fairness testing through genetic algorithm
Reference 20
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:09.602700Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation c34155de-1f08-46c3-ad51-bb79400c3e1b · outbound
This paper cites We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems, 2025
Reference 21
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:09.398606Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation bdaf04de-964b-41a6-bec7-3a523aac3b41 · outbound
This paper cites A collection of mcp clients, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem A collection of mcp clients, 2025
Reference 22
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:09.197135Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 1acac670-2de9-422e-9873-e1da89ecf794 · outbound
This paper cites Owasp top 10 for large language model applications, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Owasp top 10 for large language model applications, 2025
Reference 23
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:09.083635Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 0822f343-79af-466c-b96d-f866f0a4d257 · outbound
This paper cites Copilot-mcp, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Copilot-mcp, 2025
Reference 24
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:08.874881Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation a36a7df3-9116-4178-a6d3-7b3b7d918fd8 · outbound
This paper cites Mcp servers glama, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Mcp servers glama, 2025
Reference 25
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:08.728044Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 5b6d3ebd-c8a4-4bfb-9b47-c083846786a7 · outbound
This paper cites an unresolved cited work.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Unresolved cited work
Reference 26
- Resolution
- unresolved
- raw_fallback, observed 2026-08-07T12:10:08.524546Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 27436e61-77f1-46fe-8e82-9c5befc3149a · outbound
This paper cites Gemini 2.5 Pro, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Gemini 2.5 Pro, 2025
Reference 27
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:08.362147Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 917928ab-2ee8-4416-87a9-b9a521386134 · outbound
This paper cites The llama 3 herd of models, 2024.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem The llama 3 herd of models, 2024
Reference 28
- Resolution
- unresolved
- no resolver link, observed 2026-08-07T12:09:53.848395Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c2838536-a1e9-43b0-9939-f5f52108cef0 · outbound
This paper cites Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injec- tion.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injec- tion
Reference 29
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:08.175987Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 5599bd17-b578-4e33-9695-0160773749e9 · outbound
This paper cites Mcp client, how to write system prompt for mcp call tools, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Mcp client, how to write system prompt for mcp call tools, 2025
Reference 30
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:08.037183Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation b14f70b5-db27-4441-9685-9e075cfcd2b2 · outbound
This paper cites an unresolved cited work.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Unresolved cited work
Reference 31
- Resolution
- unresolved
- raw_fallback, observed 2026-08-07T12:10:07.868569Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 0420eab4-f582-482a-b79c-0dc7b6d7bf47 · outbound
This paper cites Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions
Reference 32
- Resolution
- unresolved
- no resolver link, observed 2026-08-07T12:09:54.160186Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation b894f48e-c1fa-4563-9343-1ce3028b5e2b · outbound
This paper cites G-search-mcp, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem G-search-mcp, 2025
Reference 33
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:07.691000Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 8981399c-f474-4a7e-b4ae-fc8e3d28d9a2 · outbound
This paper cites Protocol for system prompts, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Protocol for system prompts, 2025
Reference 34
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:07.536911Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation eac25bf2-bc4c-4f51-850c-68f1a77f165a · outbound
This paper cites MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System, 2025
Reference 35
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:07.378159Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation e81910a1-2704-4eef-9ccc-242c8a458caf · outbound
This paper cites API-Bank: A Comprehensive Benchmark for Tool-Augmented LLMs.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem API-Bank: A Comprehensive Benchmark for Tool-Augmented LLMs
Reference 36
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:07.160555Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 020e72f0-f114-4937-a66b-06dd274b9a07 · outbound
This paper cites A review of prominent paradigms for LLM- based agents: Tool use, planning (including RAG), and feedback learning.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem A review of prominent paradigms for LLM- based agents: Tool use, planning (including RAG), and feedback learning
Reference 37
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:06.946320Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation dfe28a0c-96d5-4fc7-b419-328272ad61e0 · outbound
This paper cites Prompt Injection attack against LLM-integrated Applications.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Prompt Injection attack against LLM-integrated Applications
Reference 38
- Resolution
- unresolved
- no resolver link, observed 2026-08-07T12:09:54.647665Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bd4d2c9e-3781-4fe9-9201-0d39cd5815f1 · outbound
This paper cites Datasentinel: A game-theoretic detection of prompt injection attacks, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Datasentinel: A game-theoretic detection of prompt injection attacks, 2025
Reference 39
- Resolution
- unresolved
- no resolver link, observed 2026-08-07T12:09:54.751157Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 929fd795-f780-4777-bb02-f5ffad913152 · outbound
This paper cites MCP Servers.https://mcp.so.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem MCP Servers.https://mcp.so
Reference 40
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:06.789439Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 4858a7fc-aabf-4f8f-8b7f-3a0743a5450b · outbound
This paper cites Playwright-mcp, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Playwright-mcp, 2025
Reference 41
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:06.595004Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation b6878764-38ae-44e3-a112-3dcefe041346 · outbound
This paper cites Enterprise-Grade Security for the Model Context Protocol (MCP): Frame- works and Mitigation Strategies, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Enterprise-Grade Security for the Model Context Protocol (MCP): Frame- works and Mitigation Strategies, 2025
Reference 42
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:06.460468Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 130760dc-f57a-4bb6-ae8a-7b6b30166257 · outbound
This paper cites Cheatagent: At- tacking llm-empowered recommender systems via llm agent.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Cheatagent: At- tacking llm-empowered recommender systems via llm agent
Reference 43
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:05.192226Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 07236b07-bf65-4e2b-ba6b-f4f8c0447a17 · outbound
This paper cites Npx | npm Docs, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Npx | npm Docs, 2025
Reference 44
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:04.251480Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation e5b53232-0c3e-4b7b-abdd-759527e505e3 · outbound
This paper cites GPT-4o, 2024.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem GPT-4o, 2024
Reference 45
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:03.798902Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation d99bfeed-f57b-4cb5-9a5f-4cf13cf86810 · outbound
This paper cites Awesome-mcp-servers, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Awesome-mcp-servers, 2025
Reference 46
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:03.482513Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation fd9b385e-d62c-48ca-81c8-e7642ed4ff94 · outbound
This paper cites Optimization-based prompt injection attack to llm-as-a- judge.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Optimization-based prompt injection attack to llm-as-a- judge
Reference 47
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:03.196983Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation daa3eba4-8e9d-4001-b017-8e1f8c46c449 · outbound
This paper cites Smithery - Model Context Protocol Reg- istry, 2025.https://smithery.ai/.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Smithery - Model Context Protocol Reg- istry, 2025.https://smithery.ai/
Reference 48
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:02.896570Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 826388c7-a154-493c-ab76-e4ead59d26eb · outbound
This paper cites Cherry studio, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Cherry studio, 2025
Reference 49
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:02.688563Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 10bfb713-bd50-4176-88da-647278ce05c4 · outbound
This paper cites Using tools | uv, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Using tools | uv, 2025
Reference 50
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:02.499823Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 6d1015a5-55cf-435a-a14b-47370772c98a · outbound
This paper cites Smart Contract Security: A Practitioners’ Perspective.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Smart Contract Security: A Practitioners’ Perspective
Reference 51
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:02.270856Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 0a5dd95a-dc79-4ec0-9dd7-44a8c315ce6f · outbound
This paper cites A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment
Reference 52
- Resolution
- unresolved
- no resolver link, observed 2026-08-07T12:09:55.935988Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 67281352-2de5-4178-a870-f3e5d37242cc · outbound
This paper cites Bdmmt: Backdoor sample detection for language models through model mutation testing.IEEE Transac- tions on Information Forensics and Security, 19:4285– 4300, 2024.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Bdmmt: Backdoor sample detection for language models through model mutation testing.IEEE Transac- tions on Information Forensics and Security, 19:4285– 4300, 2024
Reference 53
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:01.955812Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation d872c735-e5cf-460b-9c8f-0d29f2fec5a1 · outbound
This paper cites Matthew effect, 2025.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Matthew effect, 2025
Reference 54
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:01.582880Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 6987259c-cef5-4121-a8e2-7f52fc932628 · outbound
This paper cites Quantifying developers’ adoption of security tools.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Quantifying developers’ adoption of security tools
Reference 55
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:01.292166Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 0121801b-0f3d-4d52-aea7-da0d4b2f9887 · outbound
This paper cites Ethereum: A secure decentralised generalised transaction ledger.Ethereum project yellow paper, 151(2014):1–32, 2014.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Ethereum: A secure decentralised generalised transaction ledger.Ethereum project yellow paper, 151(2014):1–32, 2014
Reference 56
- Resolution
- unresolved
- no resolver link, observed 2026-08-07T12:09:56.265918Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation dbaea798-bea1-48dc-a217-55f72c262de4 · outbound
This paper cites Bench- marking and defending against indirect prompt injection attacks on large language models.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Bench- marking and defending against indirect prompt injection attacks on large language models
Reference 57
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:01.064864Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 5ef77d01-168e-49f1-b511-b46f3c86cd67 · outbound
This paper cites Agent Security Bench (ASB): For- malizing and Benchmarking Attacks and Defenses in LLM-based Agents.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Agent Security Bench (ASB): For- malizing and Benchmarking Attacks and Defenses in LLM-based Agents
Reference 58
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:00.881229Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 49ed5e63-54bd-4b00-915f-4c11c4ef7fcd · outbound
This paper cites Imperceptible content poisoning in llm-powered applications.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Imperceptible content poisoning in llm-powered applications
Reference 59
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:00.715757Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 9d6c9823-9eae-4f9d-852d-bb4f1a83749f · outbound
This paper cites Defense against Prompt Injection Attacks via Mixture of Encodings.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Defense against Prompt Injection Attacks via Mixture of Encodings
Reference 60
- Resolution
- unresolved
- no resolver link, observed 2026-08-07T12:09:56.534995Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 21de33de-3219-4534-a5d6-cd13cd65e023 · outbound
This paper cites Priva- cyasst: Safeguarding user privacy in tool-using large language model agents.IEEE Transactions on Depend- able and Secure Computing, 21(6):5242–5258, 2024.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Priva- cyasst: Safeguarding user privacy in tool-using large language model agents.IEEE Transactions on Depend- able and Secure Computing, 21(6):5242–5258, 2024
Reference 61
- Resolution
- unresolved
- no resolver link, observed 2026-08-07T12:09:56.622350Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 238a4011-0c81-4eef-abe7-af653cfa0eeb · outbound
This paper cites Attacks on Third-Party APIs of Large Language Models.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Attacks on Third-Party APIs of Large Language Models
Reference 62
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:00.548218Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation d4bfa0ab-beab-46a8-ada6-944c9c149c8a · outbound
This paper cites ETHPriceCurrentServer.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem ETHPriceCurrentServer
Reference 63
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:00.325087Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation f2174626-09b5-4638-a688-ebaba8a0eeef · outbound
This paper cites installing.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem installing
Reference 64
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:10:00.192293Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation abd55e11-3825-46a8-ba59-52c61c216e6a · outbound
This paper cites an unresolved cited work.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Unresolved cited work
Reference 65
- Resolution
- unresolved
- raw_fallback, observed 2026-08-07T12:09:59.982641Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation ae2cb714-ea16-4146-aaba-aec7a5f82a6a · outbound
This paper cites introduction and description,.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem introduction and description,
Reference 66
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:09:59.777666Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 1390b489-f521-42c6-90fa-0001fd6ee749 · outbound
This paper cites an unresolved cited work.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Unresolved cited work
Reference 67
- Resolution
- unresolved
- raw_fallback, observed 2026-08-07T12:09:59.548338Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation e5b18c87-7e09-4c2a-8f72-ddfb17071e90 · outbound
This paper cites an unresolved cited work.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Unresolved cited work
Reference 68
- Resolution
- unresolved
- raw_fallback, observed 2026-08-07T12:09:59.392909Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 0f8688da-7373-4165-9867-30f35117e968 · outbound
This paper cites an unresolved cited work.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Unresolved cited work
Reference 69
- Resolution
- unresolved
- raw_fallback, observed 2026-08-07T12:09:59.139758Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 956513ab-7544-4320-a3ee-d9f5f2ee2dad · outbound
This paper cites an unresolved cited work.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Unresolved cited work
Reference 70
- Resolution
- unresolved
- raw_fallback, observed 2026-08-07T12:09:58.869101Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 1cd8436e-ec79-4180-b7aa-eadfd2c41076 · outbound
This paper cites an unresolved cited work.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Unresolved cited work
Reference 71
- Resolution
- unresolved
- raw_fallback, observed 2026-08-07T12:09:58.559238Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 6cd5f8c8-7f3f-49a5-b8a4-b03fc78a5ee4 · outbound
This paper cites an unresolved cited work.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem Unresolved cited work
Reference 72
- Resolution
- unresolved
- raw_fallback, observed 2026-08-07T12:09:58.223766Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 2e286774-eb6c-4082-abdb-14896163644a · outbound
This paper cites path": "/Users/thirdpc/test/env.md.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem path": "/Users/thirdpc/test/env.md
Reference 73
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:09:57.876546Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 28eb71d1-7e95-416d-a4a8-829485386189 · outbound
This paper cites sunny". The current date is August 20th, which is within this calibration period. The original result was.
Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem sunny". The current date is August 20th, which is within this calibration period. The original result was
Reference 74
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-07T12:09:57.792007Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Pith citing papers
Observation 61551d83-84ab-4133-a62a-c78a864c682d · inbound
A Large-Scale Evolvable Dataset for Model Context Protocol Ecosystem and Security Analysis cites this paper.
A Large-Scale Evolvable Dataset for Model Context Protocol Ecosystem and Security Analysis Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 11
- Resolution
- unresolved
- no resolver link, observed 2026-08-06T21:44:55.600096Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c292e407-2abc-4880-9c67-6926d025440e · inbound
Agent Safety Alignment via Reinforcement Learning cites this paper.
Agent Safety Alignment via Reinforcement Learning Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 25
- Resolution
- unresolved
- no resolver link, observed 2026-08-06T18:29:36.599007Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation cfa979f3-1a95-4b76-88e4-2561991bb1ca · inbound
Help or Hurdle? Rethinking Model Context Protocol-Augmented Large Language Models cites this paper.
Help or Hurdle? Rethinking Model Context Protocol-Augmented Large Language Models Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 9
- Resolution
- unresolved
- no resolver link, observed 2026-08-05T19:30:46.012183Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5c021a82-9ab4-40ae-8712-81bc745fd582 · inbound
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem cites this paper.
Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 46
- Resolution
- verified exact
- arxiv_id, observed 2026-05-18T18:46:45.245428Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 3fa7bba8-e0ba-4f5e-aeaa-5a9a445d2aec · inbound
AgentBound: Securing Execution Boundaries of AI Agents cites this paper.
AgentBound: Securing Execution Boundaries of AI Agents Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 42
- Resolution
- verified exact
- arxiv_id, observed 2026-05-18T05:15:54.513989Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 7710cfb9-551a-46ed-83ea-bac9a10370ca · inbound
MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools cites this paper.
MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 5
- Resolution
- unresolved
- no resolver link, observed 2026-08-03T12:56:37.773738Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d2b09514-e64a-42ad-b991-88eebfc68f38 · inbound
Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP cites this paper.
Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 62
- Resolution
- verified exact
- arxiv_id, observed 2026-05-16T05:07:20.713714Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation b1746f7f-5556-41d5-b84d-9c8cae56776a · inbound
Combating Data Laundering in LLM Training cites this paper.
Combating Data Laundering in LLM Training Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 65
- Resolution
- unresolved
- no resolver link, observed 2026-07-13T14:08:35.474488Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5cd76137-761b-4c22-b3bd-7ca4b19648dc · inbound
From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers cites this paper.
From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 65
- Resolution
- verified exact
- arxiv_id, observed 2026-05-21T10:44:07.947643Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation f825c66b-527d-471b-a1ef-fc7762fc542c · inbound
MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security cites this paper.
MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 46
- Resolution
- verified exact
- arxiv_id, observed 2026-05-10T21:10:46.851667Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 24782a7b-a359-4423-b4a3-30aca3ae1611 · inbound
Sealing the Audit-Runtime Gap for LLM Skills cites this paper.
Sealing the Audit-Runtime Gap for LLM Skills Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 37
- Resolution
- verified exact
- arxiv_id, observed 2026-05-11T17:41:08.428214Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 8d9261cd-77d0-46ed-b022-7ddf4d8919c9 · inbound
When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks cites this paper.
When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 11
- Resolution
- verified exact
- arxiv_id, observed 2026-05-12T08:06:26.122350Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 86af7d45-b34b-46e7-97fd-113a9d526e23 · inbound
When Agents Overtrust Environmental Evidence: An Extensible Agentic Framework for Benchmarking Evidence-Grounding Defects in LLM Agents cites this paper.
When Agents Overtrust Environmental Evidence: An Extensible Agentic Framework for Benchmarking Evidence-Grounding Defects in LLM Agents Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 18
- Resolution
- verified exact
- arxiv_id, observed 2026-05-12T07:26:28.245331Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation b8fb5716-3a96-4f60-97c9-cc190d9faba8 · inbound
When Agents Overtrust Environmental Evidence: An Extensible Agentic Framework for Benchmarking Evidence-Grounding Defects in LLM Agents cites this paper.
When Agents Overtrust Environmental Evidence: An Extensible Agentic Framework for Benchmarking Evidence-Grounding Defects in LLM Agents Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 18
- Resolution
- verified exact
- arxiv_id, observed 2026-05-13T07:02:27.492016Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation f5cbe5b6-1dc2-4fc9-ba1a-9e5a8a8e9034 · inbound
ADR: An Agentic Detection System for Enterprise Agentic AI Security cites this paper.
ADR: An Agentic Detection System for Enterprise Agentic AI Security Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 7
- Resolution
- metadata mismatch
- arxiv_id, observed 2026-05-20T13:18:18.156702Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 9b82aba3-881a-43e0-9b28-150870352273 · inbound
Human oversight of agentic systems in practice: Examining the oversight work, challenges, and heuristics of developers using software agents cites this paper.
Human oversight of agentic systems in practice: Examining the oversight work, challenges, and heuristics of developers using software agents Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 125
- Resolution
- verified exact
- arxiv_id, observed 2026-07-02T10:36:52.847685Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation eaf8a326-9514-457f-b754-01803536b35b · inbound
Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation cites this paper.
Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 161
- Resolution
- verified exact
- arxiv_id, observed 2026-06-27T13:20:56.979866Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation fdebc890-01d6-4cfc-b459-15ad94a42f2d · inbound
Detecting Malicious Agent Skills in the Wild using Attention cites this paper.
Detecting Malicious Agent Skills in the Wild using Attention Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 17
- Resolution
- verified exact
- arxiv_id, observed 2026-07-04T11:39:47.692443Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 8d1aa60e-5392-4f5f-bfb5-c9bdaa5b02a1 · inbound
ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP cites this paper.
ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 27
- Resolution
- verified exact
- arxiv_id, observed 2026-07-04T14:19:54.262256Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation d8905287-307b-4504-bee2-40e1e8c8371f · inbound
Unicode TAG-Block Concealment of Tool-Metadata Payloads in the Model Context Protocol: An Approval-View Fidelity Gap Across Three Independent Server Implementations cites this paper.
Unicode TAG-Block Concealment of Tool-Metadata Payloads in the Model Context Protocol: An Approval-View Fidelity Gap Across Three Independent Server Implementations Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 17
- Resolution
- metadata mismatch
- local_arxiv, observed 2026-07-11T02:47:51.154123Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation f0896815-4e07-4608-a0a2-a08e267f52a6 · inbound
Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions cites this paper.
Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 50
- Resolution
- verified exact
- local_arxiv, observed 2026-07-09T10:26:11.080465Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.
Observation 67741dbf-aa4c-4794-ae0f-4f8e6a316231 · inbound
Rethinking MCP Security: A Large-Scale Study of Runtime MCP Servers and Security Scanner Reliability cites this paper.
Rethinking MCP Security: A Large-Scale Study of Runtime MCP Servers and Security Scanner Reliability Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 55
- Resolution
- unresolved
- no resolver link, observed 2026-07-14T07:09:56.559355Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ac9760dd-fcee-4ada-9c1f-9d509e6b9ad9 · inbound
ChainWatch: A Kill Chain-Aligned Sequential Detection Framework for Multi-Step Attacks in MCP-Based AI Agent Systems cites this paper.
ChainWatch: A Kill Chain-Aligned Sequential Detection Framework for Multi-Step Attacks in MCP-Based AI Agent Systems Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
Reference 11
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T15:07:26.264517Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.