Paper Citation Record · LEDGER

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

As of 19 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 11 inbound Pith citation observations for arXiv:2506.01333.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2506.01333 v1

Coverage vector

measured 25 of 25 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T11:49:20.613796Z

measured 36 of 36 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-19T06:32:44.657259+00:00

measured 11 of 11 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-07T00:34:17.754752Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-05T02:28:24.338817Z

Reference resolution

25 of 25 outbound references displayed

verified exact0
verified fuzzy21
unresolved3
parse uncertain0
malformed identifier0
metadata mismatch1

External citation measurements

1
pith, observed 2026-08-05T02:28:24.338817Z

Outbound references

Observation f33f15f5-9bbd-49d1-87aa-56ef48f8664e · outbound

This paper cites Model Context Protocol Specification,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Model Context Protocol Specification,

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:26.690555Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation db7352a8-29bd-4505-8887-a2136f709ad2 · outbound

This paper cites MCP is a powerful new AI cod- ing technology: Understand the risks,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control MCP is a powerful new AI cod- ing technology: Understand the risks,

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:26.517081Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation ef7c512b-1a66-40e4-9d1b-61e62334cf61 · outbound

This paper cites Model Context Protocol has prompt injec- tion security problems,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Model Context Protocol has prompt injec- tion security problems,

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:26.284651Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 951b7460-74e7-40b8-845a-9f64ffe4487a · outbound

This paper cites Spatial and Surface Correspondence Field for Interaction Transfer.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Spatial and Surface Correspondence Field for Interaction Transfer

Reference 4

Resolution: metadata mismatch; local_arxiv, observed 2026-08-07T11:49:21.168080Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 3d23eb70-b091-4406-94c0-f3012c6f2386 · outbound

This paper cites The oauth 2.0 authorization framework,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control The oauth 2.0 authorization framework,

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:26.034986Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 02e0e438-7b08-4420-91ff-0b7d32a86638 · outbound

This paper cites Json web token (jwt),.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Json web token (jwt),

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:25.826163Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 77766c96-ca34-49b7-8490-ac62f6c2a322 · outbound

This paper cites Json web signature (jws),.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Json web signature (jws),

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:25.497481Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d154320d-9833-412a-bc19-026cf030e9a7 · outbound

This paper cites How We Built Cedar: A Verification-Guided Approach to Authorization,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control How We Built Cedar: A Verification-Guided Approach to Authorization,

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:25.253399Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation a4e7ad5c-c430-4d33-89c2-cf0dd5baec90 · outbound

This paper cites Introduction to Open Pol- icy Agent,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Introduction to Open Pol- icy Agent,

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:24.909460Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation dc863da8-ffee-40a7-ba5f-6536273d983a · outbound

This paper cites Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-07T11:49:18.396852Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3ce302e7-c177-48e8-855e-7e1109d4b722 · outbound

This paper cites Best Practices for Authorization in Microser- vices,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Best Practices for Authorization in Microser- vices,

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:24.664690Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 98c30bca-e75d-4440-9328-22126a5cf502 · outbound

This paper cites Android Permissions: User Attention, Comprehension, and Behavior,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Android Permissions: User Attention, Comprehension, and Behavior,

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:24.362040Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 80b8e38d-bb34-40ec-9484-e7733db553ef · outbound

This paper cites Persistent attacks on large language models beyond user injection,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Persistent attacks on large language models beyond user injection,

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-07T11:49:18.790300Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1193d196-3ff0-4d31-8981-047c5bcbdd2a · outbound

This paper cites Formalizing and benchmarking prompt injection attacks and defenses,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Formalizing and benchmarking prompt injection attacks and defenses,

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:24.093755Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation eba585a5-e2cf-4623-8610-e4bb00368685 · outbound

This paper cites Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-07T11:49:19.002067Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7d371ea2-96f1-476b-a899-bc0d84734cfc · outbound

This paper cites A comprehensive formal security analysis of oauth 2.0,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control A comprehensive formal security analysis of oauth 2.0,

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:23.874565Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 4dc10100-0935-40fb-ae05-13b1d95bf1bc · outbound

This paper cites Reports on api security,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Reports on api security,

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:23.361900Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7bfaac96-e971-497d-a3fd-548b700df164 · outbound

This paper cites A new tool wants to save open source from supply chain attacks,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control A new tool wants to save open source from supply chain attacks,

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:23.038394Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation bda61746-8268-4aa8-9e36-cf60d2baf92b · outbound

This paper cites 7 container security best practices,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control 7 container security best practices,

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:22.479520Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 90b13210-7cba-4c95-ae31-90106c1455af · outbound

This paper cites A method for obtaining digital signatures and public-key cryptosys- tems,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control A method for obtaining digital signatures and public-key cryptosys- tems,

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:21.903061Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 8feff0a2-4485-412a-ae49-eb9826536078 · outbound

This paper cites Katz and Y.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Katz and Y

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:21.671610Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation ccc344f3-e708-4550-9889-7bfe14834440 · outbound

This paper cites Decentralized identifiers (dids) v1.0,.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Decentralized identifiers (dids) v1.0,

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:21.457414Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f5029ff7-d659-4d66-a27f-26cd38dd3ce8 · outbound

This paper cites Available: https://publ.sec.uni-stuttgart.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Available: https://publ.sec.uni-stuttgart

Reference 2016

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:23.598164Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b1bc3ab7-1089-4bbd-b29c-ebf100d3347f · outbound

This paper cites Available: https://www.wired.com/story/ sigstore-open-source-supply-chain-code-signing/.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Available: https://www.wired.com/story/ sigstore-open-source-supply-chain-code-signing/

Reference 2021

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:22.784999Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d5a8a00d-7487-41c5-bcf7-6f6af194a472 · outbound

This paper cites Available: https://www.reversinglabs.

ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control Available: https://www.reversinglabs

Reference 2025

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T11:49:22.193015Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Pith citing papers

Observation 3ca54d74-5d7b-4e17-ac50-f1636edb7229 · inbound

Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions cites this paper.

Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

Reference 6

Resolution: verified exact; arxiv_id, observed 2026-05-13T09:02:40.440560Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 61c7e0f5-e44f-4b26-be3e-19a274bb778d · inbound

Agent Capability Negotiation and Binding Protocol (ACNBP) cites this paper.

Agent Capability Negotiation and Binding Protocol (ACNBP) ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-07T00:34:17.754752Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1c0eb83b-9e89-4d1e-b4a7-54a202db73e8 · inbound

Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation cites this paper.

Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

Reference 7

Resolution: verified exact; arxiv_id, observed 2026-05-22T12:51:33.402622Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 245002be-fb54-4a57-85a5-3b7704576304 · inbound

AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations cites this paper.

AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

Reference 5

Resolution: unresolved; no resolver link, observed 2026-07-14T23:21:58.911407Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3a7bd041-7041-4307-8f64-4cff778e1ffc · inbound

Combating Data Laundering in LLM Training cites this paper.

Combating Data Laundering in LLM Training ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

Reference 4

Resolution: unresolved; no resolver link, observed 2026-07-13T14:08:35.474488Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 190d6d1c-89dd-4dd9-8611-b51cacb5e869 · inbound

From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers cites this paper.

From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

Reference 4

Resolution: verified exact; arxiv_id, observed 2026-05-21T10:44:07.968019Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 666f9a37-60a7-4324-9829-bf91c5e60374 · inbound

A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms cites this paper.

A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

Reference 11

Resolution: verified exact; arxiv_id, observed 2026-05-10T22:40:50.315174Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 755f1830-60c5-4c18-899b-11cc474e7b96 · inbound

Unsafe by Flow: Uncovering Bidirectional Data-Flow Risks in MCP Ecosystem cites this paper.

Unsafe by Flow: Uncovering Bidirectional Data-Flow Risks in MCP Ecosystem ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

Reference 9

Resolution: verified exact; arxiv_id, observed 2026-05-11T02:20:52.295077Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation a759f43e-cf63-4d4b-a121-e569bbbfc37b · inbound

aiAuthZ: Off-Host, Identity-Bound Authorization for AI Agents cites this paper.

aiAuthZ: Off-Host, Identity-Bound Authorization for AI Agents ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

Reference 12

Resolution: unresolved; no resolver link, observed 2026-07-11T06:26:53.148158Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 007934fa-2349-496f-b37e-a30d47134543 · inbound

Unicode TAG-Block Concealment of Tool-Metadata Payloads in the Model Context Protocol: An Approval-View Fidelity Gap Across Three Independent Server Implementations cites this paper.

Unicode TAG-Block Concealment of Tool-Metadata Payloads in the Model Context Protocol: An Approval-View Fidelity Gap Across Three Independent Server Implementations ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

Reference 16

Resolution: metadata mismatch; local_arxiv, observed 2026-07-11T02:47:51.186585Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f95f48ac-37b7-4c98-9eac-80bdac932ef6 · inbound

From Legacy Documentation to OSCAL: An MCP-Based Agent Pipeline for Threat-Informed Continuous Compliance in Critical Infrastructure cites this paper.

From Legacy Documentation to OSCAL: An MCP-Based Agent Pipeline for Threat-Informed Continuous Compliance in Critical Infrastructure ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

Reference 22

Resolution: verified exact; local_arxiv, observed 2026-07-10T10:07:01.028882Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.