{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:2DETMO2NT7YBYKH3A22AGAV63O","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c618deb484c6e7e7dfc4d70ed122b9ad5602865e38e87088a370a396c2869165","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-02T21:46:02Z","title_canon_sha256":"f15e0685a81598cb6bd14cade6b59bf96d919e380f043804616c0f1a8e0ac9f1"},"schema_version":"1.0","source":{"id":"2504.03767","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.03767","created_at":"2026-07-05T10:47:37Z"},{"alias_kind":"arxiv_version","alias_value":"2504.03767v2","created_at":"2026-07-05T10:47:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.03767","created_at":"2026-07-05T10:47:37Z"},{"alias_kind":"pith_short_12","alias_value":"2DETMO2NT7YB","created_at":"2026-07-05T10:47:37Z"},{"alias_kind":"pith_short_16","alias_value":"2DETMO2NT7YBYKH3","created_at":"2026-07-05T10:47:37Z"},{"alias_kind":"pith_short_8","alias_value":"2DETMO2N","created_at":"2026-07-05T10:47:37Z"}],"graph_snapshots":[{"event_id":"sha256:ca750da00bfa74c065131a1f5dece15d14fc73a079cacd1f3d1b25ecc5fc21ff","target":"graph","created_at":"2026-07-05T10:47:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.03767/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"To reduce development overhead and enable seamless integration between potential components comprising any given generative AI application, the Model Context Protocol (MCP) (Anthropic, 2024) has recently been released and subsequently widely adopted. The MCP is an open protocol that standardizes API calls to large language models (LLMs), data sources, and agentic tools. By connecting multiple MCP servers, each defined with a set of tools, resources, and prompts, users are able to define automated workflows fully driven by LLMs. However, we show that the current MCP design carries a wide range ","authors_text":"Brandon Radosevich, John Halloran","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-02T21:46:02Z","title":"MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.03767","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6b7b59f3cdab778cae4ea2948514f3d40547e145fb6fde5b4044a8619cade5c2","target":"record","created_at":"2026-07-05T10:47:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c618deb484c6e7e7dfc4d70ed122b9ad5602865e38e87088a370a396c2869165","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-02T21:46:02Z","title_canon_sha256":"f15e0685a81598cb6bd14cade6b59bf96d919e380f043804616c0f1a8e0ac9f1"},"schema_version":"1.0","source":{"id":"2504.03767","kind":"arxiv","version":2}},"canonical_sha256":"d0c9363b4d9ff01c28fb06b40302bedbbc3507555d9fbf0e6db45dae947c1afd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d0c9363b4d9ff01c28fb06b40302bedbbc3507555d9fbf0e6db45dae947c1afd","first_computed_at":"2026-07-05T10:47:37.923740Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:47:37.923740Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jBcH2GZ6Adxe5lE+dmDiTeDATl1y1lJAYzDQ61X1zoX3Te5Xzj0gErUTLPBq/paakPRu5Aelnw5y0R//Il1SCA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:47:37.924205Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.03767","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6b7b59f3cdab778cae4ea2948514f3d40547e145fb6fde5b4044a8619cade5c2","sha256:ca750da00bfa74c065131a1f5dece15d14fc73a079cacd1f3d1b25ecc5fc21ff"],"state_sha256":"40e45077d168bfc732d8222a8700bac3745bcde638e252b5c69bae8784b0c93f"}