{"as_of":"2026-08-11T12:43:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:91bb0fbcac5d404eaf71d30d5a95dda8647436b1ee0e791c805112667c5c07fa","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:46:11.720199Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":1,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-07-06T21:00:55.979837Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-13T09:02:40.294491Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2503.23278"},"observation_digest":"sha256:bc8b3b313122d32fa1151db86daf1fd7f89eefb830e3e2b52bc41b32184035ba","observation_id":"5d933b6a-5f19-4fa5-bdac-b4f34c647314","resolution":{"observed_at":"2026-05-13T09:02:40.415626Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-07T12:46:11.720199Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23634","last_updated":"2025-05-29T16:44:29Z","snapshot_observed_at":"2026-08-09T15:33:48.720032Z","submitted_at":"2025-05-29T16:44:29Z","title":"MCP Safety Training: Learning to Refuse Falsely Benign MCP Exploits using Improved Preference Alignment","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T12:46:11.720199Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2505.23634"},"observation_digest":"sha256:fc12d72b60524ad84d84cce1e9a46d7b7058e307da536ec28514443835b956e4","observation_id":"3f787d09-6b2b-4b0c-946d-cf5e5fac891b","resolution":{"observed_at":"2026-08-07T12:46:11.720199Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2506.13538","last_updated":"2026-04-13T03:45:24Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-06-16T14:26:37Z","title":"Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers","version":5},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-05-19T09:32:08.596259Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2506.13538"},"observation_digest":"sha256:1737983220ea5919c63cbc60ee7a535e4cb811245713f0a2a34074c25d24d69a","observation_id":"87f6caac-d169-4411-abec-ebde7c21c9e8","resolution":{"observed_at":"2026-05-19T09:32:15.533063Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-07T00:32:36.568714Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system.arXiv preprint arXiv:2504.12757, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13666","last_updated":"2025-06-16T16:24:31Z","snapshot_observed_at":"2026-08-07T00:25:36.770856Z","submitted_at":"2025-06-16T16:24:31Z","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T00:32:36.568714Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2506.13666"},"observation_digest":"sha256:fd8c2e73142b1cca758e89074f510a88eed453710e30d19c957b27b1951be4d1","observation_id":"511c0034-a37f-4235-b47d-765d0119c364","resolution":{"observed_at":"2026-08-07T00:32:36.568714Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-06T21:36:35.844171Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23762","last_updated":"2025-06-30T12:09:29Z","snapshot_observed_at":"2026-08-06T21:29:49.550137Z","submitted_at":"2025-06-30T12:09:29Z","title":"Software Engineering for Large Language Models: Research Status, Challenges and the Road Ahead","version":1},"reference_index":173,"source":"pdf_text","source_observed_at":"2026-08-06T21:36:35.844171Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2506.23762"},"observation_digest":"sha256:41de941fb22bc9ec319aa2f07626b6dc5900ee8b67b9984263b87e9c63867b32","observation_id":"a05a266e-d9e9-4fbb-8134-b2eb9125a94b","resolution":{"observed_at":"2026-08-06T21:36:35.844171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-06T20:05:47.655253Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.06250","last_updated":"2025-07-05T03:39:30Z","snapshot_observed_at":"2026-08-06T19:58:09.962178Z","submitted_at":"2025-07-05T03:39:30Z","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T20:05:47.655253Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2507.06250"},"observation_digest":"sha256:c38fa03eea540640187d79c06940a73a7d2bed9ae68fec001fd5f254ea21674c","observation_id":"ba3c1b54-0aad-4e56-a913-9674a18e3a44","resolution":{"observed_at":"2026-08-06T20:05:47.655253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-18T18:43:35.072919Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2509.06572"},"observation_digest":"sha256:821d5cf82b9629bb976c93212dc4da4dfb2ae31f86776fdd5c5085f4eb4116c0","observation_id":"99173f03-881c-4052-9cc9-4e303f6c987f","resolution":{"observed_at":"2026-05-18T18:46:45.310412Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2510.21236","last_updated":"2026-04-24T09:59:19Z","snapshot_observed_at":"2026-08-11T12:17:59.405004Z","submitted_at":"2025-10-24T08:10:36Z","title":"AgentBound: Securing Execution Boundaries of AI Agents","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-18T05:12:23.542793Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2510.21236"},"observation_digest":"sha256:bacd98439cf8365da51c7f41d5857c5dbd35295c7d7af8f318f54cfbcaeefca9","observation_id":"1c1355b8-4a75-4933-93d3-56870d525078","resolution":{"observed_at":"2026-05-18T05:15:54.127072Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2512.06556","last_updated":"2026-05-21T13:44:50Z","snapshot_observed_at":"2026-07-06T22:37:59.340166Z","submitted_at":"2025-12-06T20:07:58Z","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-22T12:46:44.819224Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2512.06556"},"observation_digest":"sha256:83e02ae5e27912cad8951cf6ae4089814d2dabf968af70dd76140d4bff561c33","observation_id":"42adc5e7-ce61-44ca-89e4-da933b758343","resolution":{"observed_at":"2026-05-22T12:51:33.356675Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-03T12:56:37.815027Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.815027Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:fcd53975b7d350a760faa567ef0679fa0fa4edbf3ccdb569d9325285a8dcf79d","observation_id":"9880b784-3879-4a9b-a146-10b28cb8d448","resolution":{"observed_at":"2026-08-03T12:56:37.815027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-06T20:46:41.012304Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:9919f1c0898b1ef6d6613e5b75037e26d107557301af72917f7621601f91daca","observation_id":"82a0f2af-030e-4ee6-b1f1-8f9caf74444b","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2604.01905","last_updated":"2026-05-19T08:31:57Z","snapshot_observed_at":"2026-07-06T22:51:40.181565Z","submitted_at":"2026-04-02T11:22:07Z","title":"From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-21T10:41:17.307952Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2604.01905"},"observation_digest":"sha256:3e5c70f28d73d4667bb84853c8941f6ee8e3701d680947bed509ebffdb81a225","observation_id":"d4a75edc-5d23-48c4-90e8-3ccd6f41ffae","resolution":{"observed_at":"2026-05-21T10:44:07.990066Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2604.17125","last_updated":"2026-04-18T19:53:09Z","snapshot_observed_at":"2026-08-10T22:45:44.351202Z","submitted_at":"2026-04-18T19:53:09Z","title":"CASCADE: A Cascaded Hybrid Defense Architecture for Prompt Injection Detection in MCP-Based Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-10T06:07:01.732928Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2604.17125"},"observation_digest":"sha256:ce33f902775c3849fd65ad10d5fa42229ea13b0c972616dbbc99fc4517560dda","observation_id":"b96fe27b-9fda-4e71-bfa1-f17afb6742bd","resolution":{"observed_at":"2026-05-10T06:11:20.465379Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2605.07836","last_updated":"2026-05-08T15:03:51Z","snapshot_observed_at":"2026-07-31T10:42:12.328845Z","submitted_at":"2026-05-08T15:03:51Z","title":"Unsafe by Flow: Uncovering Bidirectional Data-Flow Risks in MCP Ecosystem","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-11T02:19:52.113212Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2605.07836"},"observation_digest":"sha256:18baa47e679b8b7a58b666ff968ca01c255052fbfb9e8b98aa0ea24d7b0dcbe9","observation_id":"ca08d321-42e9-482c-ac9d-5d28a3aa0fcd","resolution":{"observed_at":"2026-05-11T02:20:52.233105Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2606.21338","last_updated":"2026-06-19T11:35:41Z","snapshot_observed_at":"2026-07-06T23:56:21.824303Z","submitted_at":"2026-06-19T11:35:41Z","title":"\"What Happens Locally, Leaks Globally\": Detecting Privacy Leakage Risks in MCP Servers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-26T14:07:59.170493Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2606.21338"},"observation_digest":"sha256:d6db08c32a63745c9059d400a6e5c39471cc5f8b5051d7da2bb557aaf6e9cd86","observation_id":"fea33fab-f610-492f-a84a-666f4bc8fcd7","resolution":{"observed_at":"2026-07-04T06:49:38.270421Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2606.27027","last_updated":"2026-06-25T13:35:28Z","snapshot_observed_at":"2026-08-07T13:33:16.881427Z","submitted_at":"2026-06-25T13:35:28Z","title":"ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-26T04:07:14.506108Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2606.27027"},"observation_digest":"sha256:7f41bf42771d3569fe405acf5eddfc4e56998af536ad547536ab0154123aa0ca","observation_id":"d21162c4-5c28-4dc9-819d-9cb862b2772b","resolution":{"observed_at":"2026-07-04T14:19:54.279632Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":"2504.12757","doi":"10.48550/arxiv.2504.12757","metadata_source":"pith","pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system","venue":"cs.CR","work_id":"608d3cfa-8431-4dba-92ac-8fe3ddc4e1a8","year":2025},"citing_paper":{"arxiv_id":"2607.07461","last_updated":"2026-07-08T14:29:23Z","snapshot_observed_at":"2026-08-08T05:41:46.659709Z","submitted_at":"2026-07-08T14:29:23Z","title":"Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-09T10:22:23.782469Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2607.07461"},"observation_digest":"sha256:e6d5d742e70e0b5ece19c341b3863f7da355db19843761b060cde65e564873a5","observation_id":"d3c27c3e-b0b9-4695-88e9-324a89886159","resolution":{"observed_at":"2026-07-09T10:26:11.140975Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2504.12757/citation-record","integrity":"/paper/2504.12757/integrity","json":"/paper/2504.12757/citation-record.json","paper":"/paper/2504.12757"},"outbound":[],"paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T16:01:32.883939Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 17 inbound Pith citation observations for arXiv:2504.12757."}