{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:Z6D7NPPX45DWO3W3I2GM4FZDXV","short_pith_number":"pith:Z6D7NPPX","canonical_record":{"source":{"id":"2506.01333","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T05:22:38Z","cross_cats_sorted":["cs.AI","cs.ET"],"title_canon_sha256":"120f0ee4031d4d456c88fb3d199c365d326c0d2fa38b81c932d99022dec35365","abstract_canon_sha256":"50c910cf34356f0f40582085addf0b309938c55d2fe31226677e4fde667c91ed"},"schema_version":"1.0"},"canonical_sha256":"cf87f6bdf7e747676edb468cce1723bd4f97f41fe89c82bc8f2df4855ed472de","source":{"kind":"arxiv","id":"2506.01333","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01333","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01333v1","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01333","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"pith_short_12","alias_value":"Z6D7NPPX45DW","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"pith_short_16","alias_value":"Z6D7NPPX45DWO3W3","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"pith_short_8","alias_value":"Z6D7NPPX","created_at":"2026-07-05T11:14:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:Z6D7NPPX45DWO3W3I2GM4FZDXV","target":"record","payload":{"canonical_record":{"source":{"id":"2506.01333","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T05:22:38Z","cross_cats_sorted":["cs.AI","cs.ET"],"title_canon_sha256":"120f0ee4031d4d456c88fb3d199c365d326c0d2fa38b81c932d99022dec35365","abstract_canon_sha256":"50c910cf34356f0f40582085addf0b309938c55d2fe31226677e4fde667c91ed"},"schema_version":"1.0"},"canonical_sha256":"cf87f6bdf7e747676edb468cce1723bd4f97f41fe89c82bc8f2df4855ed472de","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:14:11.862274Z","signature_b64":"WAjdzIJ6xv/OrvNwWCQS4NvymBkVION41weyRk8Omu8ClPq9KRMFK7QlrLMMrpRtToO1wiU/ca94bNlZzVKBCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cf87f6bdf7e747676edb468cce1723bd4f97f41fe89c82bc8f2df4855ed472de","last_reissued_at":"2026-07-05T11:14:11.861774Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:14:11.861774Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.01333","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oxXhAfEPRnhEi7Rn25VMQW46vP9ARNOyizonq60Vm8ikC5pT25vTik24zI3R6vuoDH2pQZIUqh/3NnPzI884Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T08:37:08.712511Z"},"content_sha256":"06bfa531a58e99cc8ed516db64f67ec212ca0a8323d773786687b96475e4dd2b","schema_version":"1.0","event_id":"sha256:06bfa531a58e99cc8ed516db64f67ec212ca0a8323d773786687b96475e4dd2b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:Z6D7NPPX45DWO3W3I2GM4FZDXV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.ET"],"primary_cat":"cs.CR","authors_text":"Idan Habler, Manish Bhatt, Vineeth Sai Narajala","submitted_at":"2025-06-02T05:22:38Z","abstract_excerpt":"The Model Context Protocol (MCP) plays a crucial role in extending the capabilities of Large Language Models (LLMs) by enabling integration with external tools and data sources. However, the standard MCP specification presents significant security vulnerabilities, notably Tool Poisoning and Rug Pull attacks. This paper introduces the Enhanced Tool Definition Interface (ETDI), a security extension designed to fortify MCP. ETDI incorporates cryptographic identity verification, immutable versioned tool definitions, and explicit permission management, often leveraging OAuth 2.0. We further propose"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01333","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.01333/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Y526wfmOo6vG51peezEq4BqF09ACs1gbpP6Z0E3vM5T4ZfUgt5Y7UKkeJrkitoxqucPjbjIBAv9OQkgk0KGLBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T08:37:08.713412Z"},"content_sha256":"a517e04b1a96c253bb4d0802ce87f5b4784f13706b1e245b257ceba41570a964","schema_version":"1.0","event_id":"sha256:a517e04b1a96c253bb4d0802ce87f5b4784f13706b1e245b257ceba41570a964"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Z6D7NPPX45DWO3W3I2GM4FZDXV/bundle.json","state_url":"https://pith.science/pith/Z6D7NPPX45DWO3W3I2GM4FZDXV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Z6D7NPPX45DWO3W3I2GM4FZDXV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T08:37:08Z","links":{"resolver":"https://pith.science/pith/Z6D7NPPX45DWO3W3I2GM4FZDXV","bundle":"https://pith.science/pith/Z6D7NPPX45DWO3W3I2GM4FZDXV/bundle.json","state":"https://pith.science/pith/Z6D7NPPX45DWO3W3I2GM4FZDXV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Z6D7NPPX45DWO3W3I2GM4FZDXV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:Z6D7NPPX45DWO3W3I2GM4FZDXV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"50c910cf34356f0f40582085addf0b309938c55d2fe31226677e4fde667c91ed","cross_cats_sorted":["cs.AI","cs.ET"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T05:22:38Z","title_canon_sha256":"120f0ee4031d4d456c88fb3d199c365d326c0d2fa38b81c932d99022dec35365"},"schema_version":"1.0","source":{"id":"2506.01333","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01333","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01333v1","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01333","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"pith_short_12","alias_value":"Z6D7NPPX45DW","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"pith_short_16","alias_value":"Z6D7NPPX45DWO3W3","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"pith_short_8","alias_value":"Z6D7NPPX","created_at":"2026-07-05T11:14:11Z"}],"graph_snapshots":[{"event_id":"sha256:a517e04b1a96c253bb4d0802ce87f5b4784f13706b1e245b257ceba41570a964","target":"graph","created_at":"2026-07-05T11:14:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.01333/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The Model Context Protocol (MCP) plays a crucial role in extending the capabilities of Large Language Models (LLMs) by enabling integration with external tools and data sources. However, the standard MCP specification presents significant security vulnerabilities, notably Tool Poisoning and Rug Pull attacks. This paper introduces the Enhanced Tool Definition Interface (ETDI), a security extension designed to fortify MCP. ETDI incorporates cryptographic identity verification, immutable versioned tool definitions, and explicit permission management, often leveraging OAuth 2.0. We further propose","authors_text":"Idan Habler, Manish Bhatt, Vineeth Sai Narajala","cross_cats":["cs.AI","cs.ET"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01333","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:06bfa531a58e99cc8ed516db64f67ec212ca0a8323d773786687b96475e4dd2b","target":"record","created_at":"2026-07-05T11:14:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"50c910cf34356f0f40582085addf0b309938c55d2fe31226677e4fde667c91ed","cross_cats_sorted":["cs.AI","cs.ET"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T05:22:38Z","title_canon_sha256":"120f0ee4031d4d456c88fb3d199c365d326c0d2fa38b81c932d99022dec35365"},"schema_version":"1.0","source":{"id":"2506.01333","kind":"arxiv","version":1}},"canonical_sha256":"cf87f6bdf7e747676edb468cce1723bd4f97f41fe89c82bc8f2df4855ed472de","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cf87f6bdf7e747676edb468cce1723bd4f97f41fe89c82bc8f2df4855ed472de","first_computed_at":"2026-07-05T11:14:11.861774Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:14:11.861774Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WAjdzIJ6xv/OrvNwWCQS4NvymBkVION41weyRk8Omu8ClPq9KRMFK7QlrLMMrpRtToO1wiU/ca94bNlZzVKBCg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:14:11.862274Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.01333","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:06bfa531a58e99cc8ed516db64f67ec212ca0a8323d773786687b96475e4dd2b","sha256:a517e04b1a96c253bb4d0802ce87f5b4784f13706b1e245b257ceba41570a964"],"state_sha256":"2498d0120a5c54eb244cc62b1278416946d7320679ebf383161e015cf76069d6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ijDN9zxqSK/QcW1Urc+3E4ZNhqhgFGkw5bAG6OVtH8MGgZx2gfeZSbynriAp9GNTbYN2gw7tkfAEovpjmQPcBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T08:37:08.720797Z","bundle_sha256":"884dcb28329bffcd3e5d5d263eaab599602a2325c1db9b7e9e4ef0055eb2945a"}}