{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:7IKJ5AH32ASKOGGASIKAVNKVMQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"db7ab772059fb0bf2a1941b000fabf8310caf3a0d603115d6e5b7bdbc03176e8","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-29T16:44:29Z","title_canon_sha256":"b94311031fd4c2a8778ffcb18bdce86ebf3b800613c87af75ad9dd4d3a6357e9"},"schema_version":"1.0","source":{"id":"2505.23634","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.23634","created_at":"2026-07-05T11:12:04Z"},{"alias_kind":"arxiv_version","alias_value":"2505.23634v1","created_at":"2026-07-05T11:12:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.23634","created_at":"2026-07-05T11:12:04Z"},{"alias_kind":"pith_short_12","alias_value":"7IKJ5AH32ASK","created_at":"2026-07-05T11:12:04Z"},{"alias_kind":"pith_short_16","alias_value":"7IKJ5AH32ASKOGGA","created_at":"2026-07-05T11:12:04Z"},{"alias_kind":"pith_short_8","alias_value":"7IKJ5AH3","created_at":"2026-07-05T11:12:04Z"}],"graph_snapshots":[{"event_id":"sha256:1820577bb4d6ad72c0ccfa2903a5efbed62abb840f56e9edb2cc22fc19486e49","target":"graph","created_at":"2026-07-05T11:12:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.23634/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The model context protocol (MCP) has been widely adapted as an open standard enabling the seamless integration of generative AI agents. However, recent work has shown the MCP is susceptible to retrieval-based \"falsely benign\" attacks (FBAs), allowing malicious system access and credential theft, but requiring that users download compromised files directly to their systems. Herein, we show that the threat model of MCP-based attacks is significantly broader than previously thought, i.e., attackers need only post malicious content online to deceive MCP agents into carrying out their attacks on un","authors_text":"John Halloran","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-29T16:44:29Z","title":"MCP Safety Training: Learning to Refuse Falsely Benign MCP Exploits using Improved Preference Alignment"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.23634","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b114d64c7e99cdeb7de7d92ab1e03c0ceb0a417bd0736baddf87247e5f5be132","target":"record","created_at":"2026-07-05T11:12:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"db7ab772059fb0bf2a1941b000fabf8310caf3a0d603115d6e5b7bdbc03176e8","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-29T16:44:29Z","title_canon_sha256":"b94311031fd4c2a8778ffcb18bdce86ebf3b800613c87af75ad9dd4d3a6357e9"},"schema_version":"1.0","source":{"id":"2505.23634","kind":"arxiv","version":1}},"canonical_sha256":"fa149e80fbd024a718c092140ab5556410a6ba9593765b24ca209972f17be1fd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fa149e80fbd024a718c092140ab5556410a6ba9593765b24ca209972f17be1fd","first_computed_at":"2026-07-05T11:12:04.958066Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:12:04.958066Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1CHLYpozkRwi/iUo9Lm5fZGgZNyzHZgSPkiG3PmJNXFLSCloxuPsX8yOJb33cTZcISX5y0PLH7mSqnUnGgFmDw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:12:04.958479Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.23634","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b114d64c7e99cdeb7de7d92ab1e03c0ceb0a417bd0736baddf87247e5f5be132","sha256:1820577bb4d6ad72c0ccfa2903a5efbed62abb840f56e9edb2cc22fc19486e49"],"state_sha256":"f14dc31aa6d01166f4879af90c7916cab0f2774bf229eaaf247e90640df98b3b"}