{"as_of":"2026-08-14T00:36:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:80deec5ae4d5a333f0db42e7ca1c31c7c4095568d196d4a6ca6f4c61a13769c8","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:49:20.613796Z","state":"measured"},{"denominator":36,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":36,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:34:17.754752Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":1,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-08-13T22:04:23.695105Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-13T09:02:40.294491Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2503.23278"},"observation_digest":"sha256:b5fbf582b579343f37a3f66a263b5a903b4beb75e377fe29e1b4a9448d766a18","observation_id":"3ca54d74-5d7b-4e17-ac50-f1636edb7229","resolution":{"observed_at":"2026-05-13T09:02:40.440560Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-07T00:34:17.754752Z","title":"Etdi: Mitigating tool squatting and rug pull attacks in model context protocol (mcp) by using oauth-enhanced tool definitions and policy-based access control,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13590","last_updated":"2025-06-16T15:18:24Z","snapshot_observed_at":"2026-08-13T15:42:22.706148Z","submitted_at":"2025-06-16T15:18:24Z","title":"Agent Capability Negotiation and Binding Protocol (ACNBP)","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T00:34:17.754752Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2506.13590"},"observation_digest":"sha256:99d9785c1294e17c9324eb99e320134a4155b5df16f4cfc0b86a5bcd8500eab8","observation_id":"61c7e0f5-e44f-4b26-be3e-19a274bb778d","resolution":{"observed_at":"2026-08-07T00:34:17.754752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2512.06556","last_updated":"2026-05-21T13:44:50Z","snapshot_observed_at":"2026-08-12T03:33:38.326781Z","submitted_at":"2025-12-06T20:07:58Z","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-22T12:46:44.819224Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2512.06556"},"observation_digest":"sha256:e9c013ac239e49589e0096cfe7e2b545d6e5abf3a241be9d018f938e46c34934","observation_id":"1c0eb83b-9e89-4d1e-b4a7-54a202db73e8","resolution":{"observed_at":"2026-05-22T12:51:33.402622Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-07-14T23:21:58.911407Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2603.10749","last_updated":"2026-06-10T06:18:26Z","snapshot_observed_at":"2026-07-14T23:21:58.266403Z","submitted_at":"2026-03-11T13:23:46Z","title":"AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-14T23:21:58.911407Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2603.10749"},"observation_digest":"sha256:78592f9dec7868b9098aabfc40f86d20b268e81692d22bd5f1192aa39210602b","observation_id":"245002be-fb54-4a57-85a5-3b7704576304","resolution":{"observed_at":"2026-07-14T23:21:58.911407Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-12T23:07:40.593927Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:ac60c4ff14011a48226a8044eb842e3e30e804882c611942af012148a6334a24","observation_id":"3a7bd041-7041-4307-8f64-4cff778e1ffc","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2604.01905","last_updated":"2026-05-19T08:31:57Z","snapshot_observed_at":"2026-07-06T22:51:40.181565Z","submitted_at":"2026-04-02T11:22:07Z","title":"From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-21T10:41:17.307952Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2604.01905"},"observation_digest":"sha256:647dc6a9241a930d226ad549b4b0c40b3fecd5dd8f4398a0a3891fb87dfe161f","observation_id":"190d6d1c-89dd-4dd9-8611-b51cacb5e869","resolution":{"observed_at":"2026-05-21T10:44:07.968019Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2604.05969","last_updated":"2026-04-07T15:02:47Z","snapshot_observed_at":"2026-08-13T07:58:46.587028Z","submitted_at":"2026-04-07T15:02:47Z","title":"A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T19:39:27.982512Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2604.05969"},"observation_digest":"sha256:f3f6539500c51b0ec02a65c1d0e7a0a34dcf831c51a68eb6c66732fe9535d9e4","observation_id":"666f9a37-60a7-4324-9829-bf91c5e60374","resolution":{"observed_at":"2026-05-10T22:40:50.315174Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2605.07836","last_updated":"2026-05-08T15:03:51Z","snapshot_observed_at":"2026-08-11T18:33:39.629835Z","submitted_at":"2026-05-08T15:03:51Z","title":"Unsafe by Flow: Uncovering Bidirectional Data-Flow Risks in MCP Ecosystem","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-11T02:19:52.113212Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2605.07836"},"observation_digest":"sha256:ad7d00cdb165c3bb0aa12b014aa5e482cf4a523bf4c508c179e95f3cad89941b","observation_id":"755f1830-60c5-4c18-899b-11cc474e7b96","resolution":{"observed_at":"2026-05-11T02:20:52.295077Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-07-11T06:26:53.148158Z","title":"2506.01333 , archivePrefix=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.05518","last_updated":"2026-07-06T18:00:49Z","snapshot_observed_at":"2026-08-12T23:27:02.506526Z","submitted_at":"2026-07-06T18:00:49Z","title":"aiAuthZ: Off-Host, Identity-Bound Authorization for AI Agents","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-07-11T06:26:53.148158Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2607.05518"},"observation_digest":"sha256:bab387e78b3535ebd37c4aac5ac507c7afb0731882152d63cce844deda49aff6","observation_id":"a759f43e-cf63-4d4b-a121-e569bbbfc37b","resolution":{"observed_at":"2026-07-11T06:26:53.148158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2607.05744","last_updated":"2026-07-07T02:01:44Z","snapshot_observed_at":"2026-08-12T14:58:43.423438Z","submitted_at":"2026-07-07T02:01:44Z","title":"Unicode TAG-Block Concealment of Tool-Metadata Payloads in the Model Context Protocol: An Approval-View Fidelity Gap Across Three Independent Server Implementations","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-07-11T02:40:13.068295Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2607.05744"},"observation_digest":"sha256:71c848dff5847d81a17ea64f479dbc61d21579a24137e5737bb456e36aba4d8c","observation_id":"007934fa-2349-496f-b37e-a30d47134543","resolution":{"observed_at":"2026-07-11T02:47:51.186585Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"cited_work":{"arxiv_id":"2506.01333","doi":"10.48550/arxiv.2506.01333","metadata_source":"pith","pith_arxiv_id":"2506.01333","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ETDI: Mitigat- ing tool squatting and rug pull attacks in Model Context Protocol (MCP) by using OAuth-enhanced tool defini- tions and policy-based access control","venue":"cs.CR","work_id":"5f595e24-37c7-4729-869c-4529e6e0bf5f","year":2025},"citing_paper":{"arxiv_id":"2607.08288","last_updated":"2026-07-09T09:32:03Z","snapshot_observed_at":"2026-08-06T13:22:34.232413Z","submitted_at":"2026-07-09T09:32:03Z","title":"From Legacy Documentation to OSCAL: An MCP-Based Agent Pipeline for Threat-Informed Continuous Compliance in Critical Infrastructure","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-10T10:00:19.465944Z"},"links":{"cited_paper":"/paper/2506.01333","citing_paper":"/paper/2607.08288"},"observation_digest":"sha256:a33f5e14000c05dd40b54d44ed98589da046ca998e3486202d9572a48a93db3b","observation_id":"f95f48ac-37b7-4c98-9eac-80bdac932ef6","resolution":{"observed_at":"2026-07-10T10:07:01.028882Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.01333/citation-record","integrity":"/paper/2506.01333/integrity","json":"/paper/2506.01333/citation-record.json","paper":"/paper/2506.01333"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:26.611173Z","title":"Model Context Protocol Specification,","venue":null,"work_id":"003e6894-7787-4387-acfd-0218cfdb3c74","year":2025},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:16.988288Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:feaa9c5e2793a194c5b5b7d88df69a45f9858d0f795941929de1e296677bfc2c","observation_id":"f33f15f5-9bbd-49d1-87aa-56ef48f8664e","resolution":{"observed_at":"2026-08-07T11:49:26.690555Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:26.382240Z","title":"MCP is a powerful new AI cod- ing technology: Understand the risks,","venue":null,"work_id":"ad38aa40-b901-4c73-9f0f-e5c870baf587","year":2024},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:17.135449Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:27e614ac05fe76ddd71bbc4083d37ba81089d8e25ae0254a40dca8e29a307087","observation_id":"db7352a8-29bd-4505-8887-a2136f709ad2","resolution":{"observed_at":"2026-08-07T11:49:26.517081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:26.101198Z","title":"Model Context Protocol has prompt injec- tion security problems,","venue":null,"work_id":"b32698bb-961e-4ac8-8d11-95e4b1cc5b0c","year":2024},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:17.310460Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:69e7d600ff251fc5dd41d30fdc658a3170b5b0fa7cd1e68fca2b34b5d5923e82","observation_id":"ef7c512b-1a66-40e4-9d1b-61e62334cf61","resolution":{"observed_at":"2026-08-07T11:49:26.284651Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.03221","last_updated":"2024-05-06T07:30:31Z","snapshot_observed_at":"2026-08-13T00:14:15.771755Z","submitted_at":"2024-05-06T07:30:31Z","title":"Spatial and Surface Correspondence Field for Interaction Transfer","version":1},"cited_work":{"arxiv_id":"2405.03221","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.03221","snapshot_observed_at":"2026-08-07T11:49:21.016395Z","title":"Spatial and Surface Correspondence Field for Interaction Transfer","venue":"cs.CV","work_id":"b62279ad-a8b7-4332-8c6f-ddc05bb4c700","year":2024},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:17.481181Z"},"links":{"cited_paper":"/paper/2405.03221","citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:6315c34c48bafb2f501ea71c199bd3de183841df624dd6e38cc1e0a1f3421f31","observation_id":"951b7460-74e7-40b8-845a-9f64ffe4487a","resolution":{"observed_at":"2026-08-07T11:49:21.168080Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:25.954268Z","title":"The oauth 2.0 authorization framework,","venue":null,"work_id":"e3585af0-fb2c-42d8-a958-cb9b36bf14b2","year":2012},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:17.663710Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:82f7eb26b8d09ccb980d9dc09b5a973f368a5affd32e3b4262e873e7b02cbf79","observation_id":"3d23eb70-b091-4406-94c0-f3012c6f2386","resolution":{"observed_at":"2026-08-07T11:49:26.034986Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:25.648855Z","title":"Json web token (jwt),","venue":null,"work_id":"b10114c5-9326-4fd9-ba59-acfd5416a0f8","year":2015},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:17.831579Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:a6fe9f0059d7b97b5aebb755e5b5822e4ebb0393edfcb93ac9923e29a27c692d","observation_id":"02e0e438-7b08-4420-91ff-0b7d32a86638","resolution":{"observed_at":"2026-08-07T11:49:25.826163Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:25.381315Z","title":"Json web signature (jws),","venue":null,"work_id":"0e2b07c1-381d-4a92-9306-a28ef93767ec","year":2015},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:17.993455Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:9b4f56582c4b917b96a9392a7adb35b8c513c99351278be32f1f96572889c792","observation_id":"77766c96-ca34-49b7-8490-ac62f6c2a322","resolution":{"observed_at":"2026-08-07T11:49:25.497481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:25.070831Z","title":"How We Built Cedar: A Verification-Guided Approach to Authorization,","venue":null,"work_id":"1b7b70cd-68cf-4678-9a2f-23fc2521d343","year":2024},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.128610Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:4a8c36f9210a9698ca5b546c1169f15591c96a433f61a6083c40d497443aa589","observation_id":"d154320d-9833-412a-bc19-026cf030e9a7","resolution":{"observed_at":"2026-08-07T11:49:25.253399Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:24.818425Z","title":"Introduction to Open Pol- icy Agent,","venue":null,"work_id":"f05407e8-09e4-44fb-829b-65d90f1f0ede","year":null},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.235175Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:50f203253d8adbfa0dfc8542cd7b67cba439952561176cb1dff34b369da528ef","observation_id":"a4e7ad5c-c430-4d33-89c2-cf0dd5baec90","resolution":{"observed_at":"2026-08-07T11:49:24.909460Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-07T11:49:18.396852Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.396852Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:20cc8ff8830ee3626becba580983d4f0371100fcfb24ba87f73b6b32094bfa0e","observation_id":"dc863da8-ffee-40a7-ba5f-6536273d983a","resolution":{"observed_at":"2026-08-07T11:49:18.396852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:24.503744Z","title":"Best Practices for Authorization in Microser- vices,","venue":null,"work_id":"a34f2688-4826-463d-bf7a-f8773e324ec8","year":2023},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.520915Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:02dcf7f724f361875db29d444b128494ee4dae2229f6b85caba85b1bf3af602f","observation_id":"3ce302e7-c177-48e8-855e-7e1109d4b722","resolution":{"observed_at":"2026-08-07T11:49:24.664690Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:24.215443Z","title":"Android Permissions: User Attention, Comprehension, and Behavior,","venue":null,"work_id":"100861bb-51da-426a-a89c-f1e255269635","year":2012},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.692262Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:7f0e06e554441425c296c39bb7452ac94836df535ec20e0a544efb58be3bedad","observation_id":"98c30bca-e75d-4440-9328-22126a5cf502","resolution":{"observed_at":"2026-08-07T11:49:24.362040Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:18.790300Z","title":"Persistent attacks on large language models beyond user injection,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.790300Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:1587653479f5518c73d70027bcefe267ab86247a394abb5dd12c37bcc0ae12ce","observation_id":"80b8e38d-bb34-40ec-9484-e7733db553ef","resolution":{"observed_at":"2026-08-07T11:49:18.790300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:24.021943Z","title":"Formalizing and benchmarking prompt injection attacks and defenses,","venue":null,"work_id":"f649bd94-f084-499e-9faa-c059d7d02820","year":2024},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.900055Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:a354d7ab33b6f60e8ffd371e602b26913ee70fa2f52e5c2c3a73a551d75daf8e","observation_id":"1193d196-3ff0-4d31-8981-047c5bcbdd2a","resolution":{"observed_at":"2026-08-07T11:49:24.093755Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.08623","last_updated":"2025-05-02T18:26:39Z","snapshot_observed_at":"2026-08-07T16:06:28.979271Z","submitted_at":"2025-04-11T15:25:58Z","title":"Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.08623","snapshot_observed_at":"2026-08-07T11:49:19.002067Z","title":"Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:19.002067Z"},"links":{"cited_paper":"/paper/2504.08623","citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:ce743de50cbab98692c8bed5b33bb5db6e4be5e1363d513631f52dbdc13404d7","observation_id":"eba585a5-e2cf-4623-8610-e4bb00368685","resolution":{"observed_at":"2026-08-07T11:49:19.002067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:23.729064Z","title":"A comprehensive formal security analysis of oauth 2.0,","venue":null,"work_id":"e8fed90a-0e5a-42ac-bedc-e1892790f63a","year":2016},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:19.197167Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:5d0ba05912dea26adecdaaacb7c3588572d9dde3647607942ba4ef69304ad370","observation_id":"7d371ea2-96f1-476b-a899-bc0d84734cfc","resolution":{"observed_at":"2026-08-07T11:49:23.874565Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:23.235507Z","title":"Reports on api security,","venue":null,"work_id":"39c73131-8d14-4010-863e-8f79d3bb19a7","year":2025},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:19.506012Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:5f6aca955d4d887bd65540e5ae2e7a5f955534f8ddd190dab16a7f3fbd45a04c","observation_id":"4dc10100-0935-40fb-ae05-13b1d95bf1bc","resolution":{"observed_at":"2026-08-07T11:49:23.361900Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:22.911051Z","title":"A new tool wants to save open source from supply chain attacks,","venue":null,"work_id":"b16f0ad1-68fa-447d-b9bd-cf622a2b44ed","year":null},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:19.619978Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:d215273fab7f8b0a3987d00f11ede12e8a27ed0d0fdb7b60fb838d5ffb4eb6b3","observation_id":"7bfaac96-e971-497d-a3fd-548b700df164","resolution":{"observed_at":"2026-08-07T11:49:23.038394Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:22.276491Z","title":"7 container security best practices,","venue":null,"work_id":"f227d2cb-2b09-406b-ae61-fdf974c43860","year":null},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:20.021886Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:c96759357a91585c75b61534c05d813d7e05af58159ebf84caa64faff964979b","observation_id":"bda61746-8268-4aa8-9e36-cf60d2baf92b","resolution":{"observed_at":"2026-08-07T11:49:22.479520Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:21.774842Z","title":"A method for obtaining digital signatures and public-key cryptosys- tems,","venue":null,"work_id":"ac01c635-f300-45e4-816d-fa39586478a0","year":1978},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:20.341572Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:9e55d87a3d7c3bc67e3d34b5741eb1392828fd0651d5ee7687e80e1af7073aae","observation_id":"90b13210-7cba-4c95-ae31-90106c1455af","resolution":{"observed_at":"2026-08-07T11:49:21.903061Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:21.590941Z","title":"Katz and Y","venue":null,"work_id":"50b34811-768c-4bc3-bd2c-fe3c09fb4791","year":2014},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:20.461147Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:dba4083cdc2b46754ac8899977000952fe24b35a7cfb0ab960e8c68664320c81","observation_id":"8feff0a2-4485-412a-ae49-eb9826536078","resolution":{"observed_at":"2026-08-07T11:49:21.671610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:21.315656Z","title":"Decentralized identifiers (dids) v1.0,","venue":null,"work_id":"ea32bfc3-c733-4df2-ae3e-c7811810438c","year":2021},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:20.613796Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:00f36874320b1427300b6faa15a919e7ab19ed7c3b307f0bcdb834b28e5ea4f1","observation_id":"ccc344f3-e708-4550-9889-7bfe14834440","resolution":{"observed_at":"2026-08-07T11:49:21.457414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:23.494498Z","title":"Available: https://publ.sec.uni-stuttgart","venue":null,"work_id":"112c86c8-443e-4caa-a271-616b0a3f964e","year":2016},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:19.372792Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:4ab86ea204cb876a00c10211dec1f4f621c30f105ab40b1f5b5b0a6740b108eb","observation_id":"f5029ff7-d659-4d66-a27f-26cd38dd3ce8","resolution":{"observed_at":"2026-08-07T11:49:23.598164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:22.612152Z","title":"Available: https://www.wired.com/story/ sigstore-open-source-supply-chain-code-signing/","venue":null,"work_id":"14932264-7442-4a43-9e1e-3611bc9a0f62","year":null},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:19.762747Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:d383b2fd33797c21e9e0a2924c830546f200dc155157c9de394454866123b234","observation_id":"b1bc3ab7-1089-4bbd-b29c-ebf100d3347f","resolution":{"observed_at":"2026-08-07T11:49:22.784999Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:49:22.056811Z","title":"Available: https://www.reversinglabs","venue":null,"work_id":"94636ea3-619d-44e3-8fe0-ebed49ffef33","year":null},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:20.125465Z"},"links":{"citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:f447b25a17c409fd4054d4cc8bbf31fcd630c71c325d204dbca5c10d57a2ae58","observation_id":"d5a8a00d-7487-41c5-bcf7-6f6af194a472","resolution":{"observed_at":"2026-08-07T11:49:22.193015Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":3,"verified_exact":0,"verified_fuzzy":21},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 11 inbound Pith citation observations for arXiv:2506.01333."}