{"as_of":"2026-08-03T20:34:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a2458825ebaa83bc767285d60a160608be19152bfab18a4a98a005b113bdd2b9","coverage":[{"denominator":21,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":21,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-10T12:35:53.948815Z","state":"measured"},{"denominator":22,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":22,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-03T06:30:56.289259+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-14T07:09:56.559355Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.13849","snapshot_observed_at":"2026-07-14T07:09:56.559355Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11086","last_updated":"2026-07-13T04:55:16Z","snapshot_observed_at":"2026-08-03T15:13:18.566158Z","submitted_at":"2026-07-13T04:55:16Z","title":"Rethinking MCP Security: A Large-Scale Study of Runtime MCP Servers and Security Scanner Reliability","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-07-14T07:09:56.559355Z"},"links":{"cited_paper":"/paper/2604.13849","citing_paper":"/paper/2607.11086"},"observation_digest":"sha256:cffcbed6bfc908372fcfcb129335a6bfb5f9763c0badca864710d5b56ef06912","observation_id":"1bf3ad9d-9c4b-4b20-a330-0d299d1f606b","resolution":{"observed_at":"2026-07-14T07:09:56.559355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2604.13849/citation-record","integrity":"/paper/2604.13849/integrity","json":"/paper/2604.13849/citation-record.json","paper":"/paper/2604.13849"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Model Context Protocol Specification","venue":null,"work_id":"81710792-c998-41b1-b0b0-11a69eb74c25","year":2024},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:b7ab92a7ec1c4c11f06467a9f98bc1721cb49b0e5d44936220407647847a2863","observation_id":"fe7e6457-1156-4ced-b90b-cf072bcd4d3a","resolution":{"observed_at":"2026-05-19T07:13:00.329550Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.18063","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"MCP-38: A Comprehensive Threat Taxonomy for Model Context Protocol Systems","venue":null,"work_id":"8049becd-a08c-4db6-a632-6b3ec26837a4","year":2026},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:67791327322d4dcabc9c302e43e5a3b5ff14364e1781cfab90fcd154f515aa91","observation_id":"b86fc47c-ac27-48d5-9c32-bd607b57ac89","resolution":{"observed_at":"2026-05-11T11:46:33.743339Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"OWASP Top 10 for Large Language Model Applications v1.1","venue":null,"work_id":"06185517-bb8f-4909-9365-75f520992b75","year":2023},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:03cde1e7a5371bdecfd852f0a64e1900ae41ee8ef65bfa316329f5ed966431cc","observation_id":"2f62aed8-ad12-40f3-984b-9a8f24a05b2c","resolution":{"observed_at":"2026-05-19T07:13:00.337640Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"OWASP Top 10 for Large Language Model Applications 2025","venue":null,"work_id":"6fbe9040-b4f8-4a64-b496-ce401befd192","year":2025},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:13d1a581028089eab89198c7d49324fda31adc32177ace3c63aa24b6f80abb5d","observation_id":"97e9032b-db93-48d0-8677-b909eef2eff4","resolution":{"observed_at":"2026-05-19T07:13:00.326263Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"OWASP Top 10 for Agentic Applications for 2026","venue":null,"work_id":"7d97c672-e7da-43a7-b9d6-c4e4ad240f82","year":2026},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:0e237bad278331da4b9058d6f21e5ebf3236a0693e73d7ec139227507b737549","observation_id":"0dbb4bcb-a725-466e-b61a-e743075c420d","resolution":{"observed_at":"2026-05-19T07:13:00.341097Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Shostack, Threat Modeling: Designing for Security","venue":null,"work_id":"f835a89e-a00a-43d3-baea-c10bdd1abe84","year":2014},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:5b5ac4bc1318c3455675d8b74c95f777dfe689af8c93a79873cce7c6bf2bc5d6","observation_id":"3545dc58-f2a2-4a0b-a698-c0b5b28ffb0e","resolution":{"observed_at":"2026-05-19T07:13:00.344455Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":"2302.12173","doi":"10.1109/sp61157.2025.00250","metadata_source":"pith","pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","venue":"cs.CR","work_id":"7a8cfce1-ada7-4a7a-8516-6f16b1bd077b","year":2023},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:6c6f365f1fe971d72dc182abf7f0ad5e231d0163ee9cf66fdd4c23badcf0be9a","observation_id":"d38e23fd-4848-4ffb-b6ce-dce87fa8570a","resolution":{"observed_at":"2026-05-11T17:17:55.937474Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2508.13220","doi":"10.48550/arxiv.2508.13220","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Mcpsecbench: A systematic security benchmark and playground for testing model context protocols","venue":null,"work_id":"4a91f798-a23b-4420-afe8-5230f40ee3e1","year":2025},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:67882dc7cd7de158d32e288d18385b23b2921e9844a4a5a528bbab632a9cd529","observation_id":"21e1523c-019b-4e8a-b050-23ec8816d196","resolution":{"observed_at":"2026-05-11T11:46:33.772174Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.15994","doi":"10.48550/arxiv.2510.15994","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Zhang, Z","venue":null,"work_id":"988cfe85-3eea-4356-8fc1-fe54e5b4b81d","year":2025},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:1844c0ee7723acf893cf52bbfc1df89941e42db434c51ad9ff199184296e3390","observation_id":"8585f46d-e1ca-4280-8f17-ac7836432e68","resolution":{"observed_at":"2026-05-11T11:46:33.709353Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.06572","last_updated":"2026-05-01T11:41:26Z","snapshot_observed_at":"2026-07-06T22:25:48.473217Z","submitted_at":"2025-09-08T11:35:32Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","version":5},"cited_work":{"arxiv_id":"2509.06572","doi":"10.48550/arxiv.2509.06572","metadata_source":"pith","pith_arxiv_id":"2509.06572","snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Parasites in the Toolchain: A Large-Scale Analysis of Attacks on the MCP Ecosystem","venue":"cs.CR","work_id":"ed41d3d5-d33e-4ab4-8d74-654610055482","year":2025},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"cited_paper":"/paper/2509.06572","citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:fd7c7b530bddade9485fe0ba64939cc2677a868dd9ce082b3dbbbca9b2820a88","observation_id":"a1de31ae-6599-4eb0-944e-38f7290205a7","resolution":{"observed_at":"2026-05-11T11:46:33.759350Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2505.11154","doi":"10.48550/arxiv.2505.11154","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:15:01.137692Z","title":"Mpma: Preference manipulation attack against model context protocol","venue":null,"work_id":"a2dcd840-29d4-4ee6-b5dc-2eff7e281fb5","year":2025},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:034b8bb038df689c2dfbcda29b40e26d1892b44bed81942c96fae8848c94491a","observation_id":"342c0f7a-ec16-4d60-a235-0ee68eddd13c","resolution":{"observed_at":"2026-05-11T11:46:33.729941Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"GitHub MCP Vulnerability: Prompt Injection via Repository Content","venue":null,"work_id":"247b0beb-e63a-4b9e-bf7b-63398fbe7f24","year":2025},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:11dc67b5b36dfb7d9de53c88cf224752bb30c3f92afdd6d3f8e671763ae4159c","observation_id":"bddbb154-4326-4459-90fe-2fc225dd28a2","resolution":{"observed_at":"2026-05-19T07:13:00.351067Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"CVE-2025-6514: mcp-remote OS Command Injection","venue":null,"work_id":"7df21b8f-31f2-4074-bb42-2972e8d34152","year":2025},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:74a6921b5b0967b688b8f77e38fb7c72cc8fd6ffa541ca9b8645d98d7bf9d227","observation_id":"a415ec2c-9d40-4f08-bea2-dde022ce8332","resolution":{"observed_at":"2026-05-19T07:13:00.332804Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"MITRE ATLAS: Adversarial Threat Landscape for Artificial-Intelligence Systems","venue":null,"work_id":"0b936224-5f15-49cf-9721-a0458b738ab9","year":2024},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:6e5a78fe54ca18936bdf46265c430904333cad2a449fb498fca4c11031d7d33e","observation_id":"3bd5abe0-203e-4bb5-a944-7188cf882969","resolution":{"observed_at":"2026-05-19T07:13:00.347974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"MAESTRO: Multi-Agent Environment, Security, Threat Risk, and Outcome Framework","venue":null,"work_id":"168f320a-1e6a-4ce4-abe7-5e479f424436","year":2025},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:459a4fffa8b9e6e9c3415a13a2eaa5b284e2872b1100d4bcca94b563371affff","observation_id":"715e355a-f944-4b01-8051-0256adab08cd","resolution":{"observed_at":"2026-05-19T07:13:00.317762Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"MISP: The Design and Implementation of a Collaborative Threat Intelligence Sharing Platform","venue":null,"work_id":"63e7c88f-e407-4a87-aa4e-d1b5399af1b5","year":2016},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:cef7c94c4c2914686c38250afefa389649ad2fe6a3e628a09b0665ba659abd88","observation_id":"fab4cb4c-f7c1-488d-a828-343f98aa6df5","resolution":{"observed_at":"2026-05-19T07:13:00.314734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"OpenCTI: Open Cyber Threat Intelligence Platform","venue":null,"work_id":"c12ccab6-f238-4ef0-a8b6-75181abc4bb9","year":2023},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:147930f97287b29932792e77b337f40242b10bb2830174df6bcb4ca9422f3fe7","observation_id":"594d212f-f009-478b-b07b-0e9a61f4c2f2","resolution":{"observed_at":"2026-05-19T07:13:00.308794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"MCP-Scan: Security scanner for AI agents, MCP servers and agent skills","venue":null,"work_id":"a57f39b4-518f-4d9f-85fe-072f2e25113d","year":2025},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:e646730da0e9b93f298a96242fae09a74c6ce32b98e7ff5b4ae7d5371394c65f","observation_id":"77864b61-0596-4655-91b0-a0d7f3f8d900","resolution":{"observed_at":"2026-05-19T07:13:00.306149Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"LiteLLM: Call 100+ LLM APIs with OpenAI format","venue":null,"work_id":"5d6a8bd5-6f43-4ffe-acd9-ca82d1f4e3b4","year":2023},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:60392c89aac43f7f6d298d9929efb6adcc4d24b4f3b51e3d585326b6d32d8f42","observation_id":"7865e5d7-f5bf-4f3d-bcf7-2d93f537cb22","resolution":{"observed_at":"2026-05-19T07:13:00.302750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Smithery: MCP Server Registry","venue":null,"work_id":"24bfbc5e-4dec-4378-bbd0-91d00f2f2445","year":2025},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:3cfd895b661981ee8eb7e93954bacb395ebe7af3c7b03202708bb0b644f9476e","observation_id":"b5b080a3-16d6-494c-b72e-40b7da9a3b24","resolution":{"observed_at":"2026-05-19T07:13:00.320881Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Glama: MCP Server Directory","venue":null,"work_id":"5f9f2168-91af-4549-beec-28e0973cf7da","year":2025},"citing_paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-10T12:35:53.948815Z"},"links":{"citing_paper":"/paper/2604.13849"},"observation_digest":"sha256:f948457e0f876bcb68a621e5700d01210efe1a634e65b7dd50c52ed6b8317cb3","observation_id":"173e4cac-90cf-4b90-b977-0230f1b0eca0","resolution":{"observed_at":"2026-05-19T07:13:00.311556Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.13849","last_updated":"2026-04-15T13:19:22Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-03T05:49:10.077395Z","submitted_at":"2026-04-15T13:19:22Z","title":"MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems"},"reference_resolution":{"displayed":21,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":0,"verified_exact":5,"verified_fuzzy":15},"total_outbound_references":21},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-03T06:30:56.289259+00:00","source":"crossref"},{"observed_at":"2026-08-03T06:30:50.922721+00:00","source":"retraction_watch"}],"thesis":"As of 3 August 2026, this Paper Citation Record lists 21 of 21 outbound references and 1 inbound Pith citation observation for arXiv:2604.13849."}