{"as_of":"2026-08-19T22:13:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f15d6e7ebc5f5cb3a2ecf90998f9306477f788c301d48b7d685fc5f329962375","coverage":[{"denominator":20,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":20,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T12:56:37.815027Z","state":"measured"},{"denominator":23,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":23,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T01:12:23.894152Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"cited_work":{"arxiv_id":"2601.01241","doi":"10.48550/arxiv.2601.01241","metadata_source":"pith","pith_arxiv_id":"2601.01241","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","venue":"cs.CR","work_id":"1a9b27ff-9e9c-48a4-a79d-17a03dc6ebf2","year":2026},"citing_paper":{"arxiv_id":"2604.07551","last_updated":"2026-04-08T19:53:26Z","snapshot_observed_at":"2026-08-15T04:36:06.031902Z","submitted_at":"2026-04-08T19:53:26Z","title":"MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-10T17:10:50.283791Z"},"links":{"cited_paper":"/paper/2601.01241","citing_paper":"/paper/2604.07551"},"observation_digest":"sha256:8a5fb866d0565b411aa9406e72479792892243e29d9a2d11b1a293ed87c9e7c1","observation_id":"ed1db894-ad93-4d8e-83a0-b231967ef15b","resolution":{"observed_at":"2026-06-23T04:13:43.712185Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"cited_work":{"arxiv_id":"2601.01241","doi":"10.48550/arxiv.2601.01241","metadata_source":"pith","pith_arxiv_id":"2601.01241","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","venue":"cs.CR","work_id":"1a9b27ff-9e9c-48a4-a79d-17a03dc6ebf2","year":2026},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-08-14T19:50:49.492797Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":166,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2601.01241","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:9bb17227e91c6364cf6a1146a0460804af36fdd18013503095caa374c4c68f7b","observation_id":"5a41c41c-68f9-44bf-83ba-d80483b520d7","resolution":{"observed_at":"2026-06-27T13:20:56.864193Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.01241","snapshot_observed_at":"2026-08-02T01:12:23.894152Z","title":"MCP- SandboxScan: W ASM-based secure execution and runtime analysis for MCP tools,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-17T08:53:23.697902Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.894152Z"},"links":{"cited_paper":"/paper/2601.01241","citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:9fc84a1a8cd9c4eb8a4c6b751d2664d3aaf7303cd91a878fc800c358f69a6ad5","observation_id":"70707f31-365b-4b5a-91ef-abab78b83267","resolution":{"observed_at":"2026-08-02T01:12:23.894152Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2601.01241/citation-record","integrity":"/paper/2601.01241/integrity","json":"/paper/2601.01241/citation-record.json","paper":"/paper/2601.01241"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.757404Z","title":"Introducing the model context protocol","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.757404Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:f31642ef66509b474f654931b9a1f60962c26ff47a876b56176362fe73a87a0e","observation_id":"6c5b5c1a-e5af-48f2-852e-1f30ff8984c2","resolution":{"observed_at":"2026-08-03T12:56:37.757404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.761151Z","title":"Agent based modelling and simulation tools: A review of the state-of-art software,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.761151Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:906a37719d3592a5ee2aedb47011fdc7030520ad358247a96cba862b9ecb6bb5","observation_id":"dc2ce85d-f3d7-4003-8bb0-b165ef12929e","resolution":{"observed_at":"2026-08-03T12:56:37.761151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.03767","last_updated":"2025-04-11T16:59:05Z","snapshot_observed_at":"2026-08-19T15:56:26.707660Z","submitted_at":"2025-04-02T21:46:02Z","title":"MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.03767","snapshot_observed_at":"2026-08-03T12:56:37.766883Z","title":"Mcp safety audit: Llms with the model context protocol allow major security exploits,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.766883Z"},"links":{"cited_paper":"/paper/2504.03767","citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:4cec4109b2b33cfefa478fd8acd49bcb8f98b0840a4d50def9e1e6a8c565b302","observation_id":"2a5e6bf6-46fc-45a3-9196-61a3f0614b78","resolution":{"observed_at":"2026-08-03T12:56:37.766883Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.770369Z","title":"MCIP: Protecting MCP safety via model contextual integrity protocol,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.770369Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:8cd8045e1e1e53df43e2a858b5ee7221bdaa57c3cca40f29705711f35e483df3","observation_id":"48247f33-2864-46e3-9dce-e3834ef283c8","resolution":{"observed_at":"2026-08-03T12:56:37.770369Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.02040","last_updated":"2025-09-14T07:48:51Z","snapshot_observed_at":"2026-08-12T23:17:01.506390Z","submitted_at":"2025-05-31T08:01:11Z","title":"Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.02040","snapshot_observed_at":"2026-08-03T12:56:37.773738Z","title":"Beyond the protocol: Unveiling attack vectors in the model context protocol (mcp) ecosystem,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.773738Z"},"links":{"cited_paper":"/paper/2506.02040","citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:64aee2a1d7c0c19e05778a096c7d870fa4b440ca9d3ecba584ebec2f1e5db768","observation_id":"7710cfb9-551a-46ed-83ea-bac9a10370ca","resolution":{"observed_at":"2026-08-03T12:56:37.773738Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.777268Z","title":"Mcpscan,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.777268Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:e4631e06f745ab1321e3f72703954258c96576ed1bdc792ceb47c2aea23b6f71","observation_id":"1e9127bc-7581-4138-8135-2b3b32451f1d","resolution":{"observed_at":"2026-08-03T12:56:37.777268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.780243Z","title":"Scansat: Unlocking static and dynamic scan obfuscation,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.780243Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:e765706cdc193be022471c5160b658b12ab370c52d1634f376dd28082707c94b","observation_id":"b816419c-d77d-4e91-914f-029cd2f04888","resolution":{"observed_at":"2026-08-03T12:56:37.780243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.783379Z","title":"Wave: a verifiably secure webassembly sandboxing runtime,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.783379Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:a9b00f5a16d979091cf2c30333022009ca173594807bc9bfaf25d2c02815f01c","observation_id":"af362f7a-3a24-41f5-b5e4-13e119abff33","resolution":{"observed_at":"2026-08-03T12:56:37.783379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.786645Z","title":"Mcp-sandboxscan (anonymous github repository),","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.786645Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:93a9edf729866eb92ad928d353327df06d4025937387b8975136fc09d32dd540","observation_id":"30e4925e-7a17-4116-aa3a-2b590c23223b","resolution":{"observed_at":"2026-08-03T12:56:37.786645Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.14925","last_updated":"2025-08-19T10:12:35Z","snapshot_observed_at":"2026-08-19T21:56:17.123477Z","submitted_at":"2025-08-19T10:12:35Z","title":"MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.14925","snapshot_observed_at":"2026-08-03T12:56:37.789590Z","title":"Mcptox: A benchmark for tool poisoning attack on real-world mcp servers,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.789590Z"},"links":{"cited_paper":"/paper/2508.14925","citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:3f99439747db0008d7d9166aa9ce6ef0b3c109dda7cc3eb391e8186141fa4de1","observation_id":"280f776d-be11-4d24-ac11-78371288c7bd","resolution":{"observed_at":"2026-08-03T12:56:37.789590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.792816Z","title":"(2025, May) Mcp: Untrusted servers and confused clients, plus a sneaky exploit","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.792816Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:659041d54fe88719c3c5b9a89258a355e02166da7cb4548c0af761ea33f9f4de","observation_id":"7444a582-fad4-4f66-bc9a-7bb07a5a207c","resolution":{"observed_at":"2026-08-03T12:56:37.792816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.795677Z","title":"Model context protocol (mcp): Landscape, security threats, and future research directions,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.795677Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:78b3b657a0e8a20a2a172fef75dc34a43f082b5bf18b3949bd2cbf81b80e5588","observation_id":"6c9029d0-1fbb-491b-84c8-e4d153af2acc","resolution":{"observed_at":"2026-08-03T12:56:37.795677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.801880Z","title":"Defeating prompt injections by design,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.801880Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:9fe2442ea56ab3c8ba2e8434f5eec0f19811c6d587504de3c7994504ff5991e6","observation_id":"904b91d8-d520-4a7c-8241-a59de5581ea2","resolution":{"observed_at":"2026-08-03T12:56:37.801880Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.804547Z","title":"toxic flows,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.804547Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:b62e63e31d8a3097acc98f6cc4d9d34ea95404984593834f5a967e1901488fd0","observation_id":"02695385-888e-48b7-afce-4879b6fd0d5c","resolution":{"observed_at":"2026-08-03T12:56:37.804547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.807218Z","title":"Cheatsheet – a practical guide for securely using third-party mcp servers 1.0,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.807218Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:4366a2b2502e026351bb5c67133fa541ee212079359581a55ee2c4f2f487f29c","observation_id":"915d489b-3776-463f-b502-91dc5ac9b88f","resolution":{"observed_at":"2026-08-03T12:56:37.807218Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.809750Z","title":"Wasmbox: A lightweight wasm-based runtime for trustworthy multi-tenant embedded systems,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.809750Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:2c11146f31941e88020e44fef9b950d8cbe7dfe75a015792e2c75c8c80e9526c","observation_id":"e22bce47-ee37-42bb-9e4c-1d939a477d19","resolution":{"observed_at":"2026-08-03T12:56:37.809750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.812388Z","title":"Sledge: a serverless-first, light-weight wasm runtime for the edge,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.812388Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:c0b26b5cf86a50dbb016a577ef8420d6513827996f2fa448d75013189ea6f7ed","observation_id":"6d75229a-b35c-4666-9baf-573d65519fde","resolution":{"observed_at":"2026-08-03T12:56:37.812388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.12757","last_updated":"2025-05-19T08:48:07Z","snapshot_observed_at":"2026-08-16T12:34:59.727436Z","submitted_at":"2025-04-17T08:49:10Z","title":"MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.12757","snapshot_observed_at":"2026-08-03T12:56:37.815027Z","title":"Mcp guardian: A security-first layer for safeguarding mcp-based ai system,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.815027Z"},"links":{"cited_paper":"/paper/2504.12757","citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:2f96d6add6e386e95a4d4e511c691b15d0756d41c9c356600d5d73ad4c3cac56","observation_id":"9880b784-3879-4a9b-a146-10b28cb8d448","resolution":{"observed_at":"2026-08-03T12:56:37.815027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:56:37.764045Z","title":"Available: https://www.sciencedirect.com/science/articl e/pii/S1574013716301198","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.764045Z"},"links":{"citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:36957c0e8dff55ef1817ca947be018e971814e89d3dbb460223495ac60ea4b0a","observation_id":"4fb683bb-6132-4a0d-8405-ca7826cc23ce","resolution":{"observed_at":"2026-08-03T12:56:37.764045Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-08-14T03:34:08.418318Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.23278","snapshot_observed_at":"2026-08-03T12:56:37.798775Z","title":"Available: https://arxiv.org/abs/2503.23278","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-03T12:56:37.798775Z"},"links":{"cited_paper":"/paper/2503.23278","citing_paper":"/paper/2601.01241"},"observation_digest":"sha256:a8a123be1f28644cc58597c6377b939b5db4caeed5559b1d1356d444b79d491d","observation_id":"81bdfb01-99dd-437e-83f5-5b5b4e47af74","resolution":{"observed_at":"2026-08-03T12:56:37.798775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-19T09:33:33.369450Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools"},"reference_resolution":{"displayed":20,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":20,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":20},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 20 of 20 outbound references and 3 inbound Pith citation observations for arXiv:2601.01241."}