{"as_of":"2026-08-12T08:48:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8022e25db19c4c561eb59ed7afbd3250b414bb1340e4e76d422650b7ae682f34","coverage":[{"denominator":59,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":59,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T01:12:23.933654Z","state":"measured"},{"denominator":59,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":59,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.14754/citation-record","integrity":"/paper/2607.14754/integrity","json":"/paper/2607.14754/citation-record.json","paper":"/paper/2607.14754"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.782406Z","title":"MCPScan: Security analysis tool for MCP servers,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.782406Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:37a456468402b552aff662e78889e0cca060e3f355ec6a03fb33ad2b4a4d8f8d","observation_id":"8da2e222-b407-408b-9d2a-edc7c9638c38","resolution":{"observed_at":"2026-08-02T01:12:23.782406Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.785737Z","title":"Snyk Agent Scan,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.785737Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:4cd4bf40f348006f34ddf09f2164a0aaf70180a5771786e93e5f0fc60a491d29","observation_id":"df846fab-1218-4fc4-b486-e0be57ddd384","resolution":{"observed_at":"2026-08-02T01:12:23.785737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.788663Z","title":"AI-Infra-Guard: A Comprehensive, Intelligent, and Easy-to-Use AI Red Teaming Platform,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.788663Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:062d673c55d5d973eddfb6ff49899a80a6d61bc1e7ed236cea589c9fbdb90b39","observation_id":"9fcbea15-8d2c-4bd3-a994-0cfb625da628","resolution":{"observed_at":"2026-08-02T01:12:23.788663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.791547Z","title":"Model Context Protocol,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.791547Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:e20c648131d45c2063ebf8e30d5b1407a4fdc3e0a92dabf715540bfac01e7196","observation_id":"1b3b61af-2e6b-4004-a9b8-402359be74e0","resolution":{"observed_at":"2026-08-02T01:12:23.791547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.794190Z","title":"JSON-RPC 2.0 specification,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.794190Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:ebbebb52fd3bd85de01fdc77d3ddf986371bc7ab044d4195d46a45b006b73562","observation_id":"6dfe2038-9886-4679-a179-5d3e8216a487","resolution":{"observed_at":"2026-08-02T01:12:23.794190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.796942Z","title":"Claude Desktop,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.796942Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:7b754f1df4ed3c4c982d1a06dcaeb6be70e44fb59c69b418605df1133a8d2fc3","observation_id":"19ffc91f-d1a4-4705-94f2-c4236a00fc69","resolution":{"observed_at":"2026-08-02T01:12:23.796942Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.800398Z","title":"Cursor: The AI Code Editor,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.800398Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:dbd96fcf8c71d21521ece8fa92fc1e5a4860d278f0f0db97c52a1b758b6f91e9","observation_id":"80ad9cb8-1004-4f0f-b7b7-f348c72f7943","resolution":{"observed_at":"2026-08-02T01:12:23.800398Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.803220Z","title":"Snipuzz: Black-box fuzzing of iot firmware via message snippet inference,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.803220Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:161641626afaf9dd4629fc1fa6b53517f85c7db70fc99aab73164617a43a8530","observation_id":"57014866-d484-4edb-8606-ba4cf6700b6b","resolution":{"observed_at":"2026-08-02T01:12:23.803220Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.805862Z","title":"Beware of the unexpected: Bimodal taint analysis,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.805862Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:25318af26b6f6879896f37a9c7884ba81ee0bae6b9217f178495eed6ae7879b1","observation_id":"3c289c50-6a13-4449-aafc-b0353a21f4a9","resolution":{"observed_at":"2026-08-02T01:12:23.805862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.808973Z","title":"OW ASP Benchmark Project,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.808973Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:098fb22c45b58a50735949411065c5fbf0cf9143df73e48c462dc38ef4fb7e0f","observation_id":"60e7da18-bf3d-4721-acf6-fb49b064c6c1","resolution":{"observed_at":"2026-08-02T01:12:23.808973Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.812282Z","title":"Juliet Test Suite v1.3 for C/C++ and Java,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.812282Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:1f92bc26ca4e2358170ca3fe3b337bed516d463c459159282286f7741a1061ea","observation_id":"0e69a67a-0c0e-4db6-8c52-7c883dd6203a","resolution":{"observed_at":"2026-08-02T01:12:23.812282Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.814956Z","title":"MCP security bench (MSB): Benchmarking attacks against model context protocol in LLM agents,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.814956Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:7884750e8989a5c0d55b7cd7255c429d377d3061987eea224a094373b1b48d63","observation_id":"2b3739f3-ae45-4878-b300-e306090dedbe","resolution":{"observed_at":"2026-08-02T01:12:23.814956Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.817377Z","title":"MCPSecBench: A systematic security benchmark and playground for testing model context protocols,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.817377Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:f2ad7d3f32877bd3baa8fa255515aae553938cbf7b83ef2af808600ba65eb226","observation_id":"93a0e49e-c230-4085-8cc9-1431bf430126","resolution":{"observed_at":"2026-08-02T01:12:23.817377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.819963Z","title":"MCP- SafetyBench: A benchmark for safety evaluation of large language models with real-world MCP servers,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.819963Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:e3702c4461b4ab92411e0ddbc8d020d1c4d2278417c7ffc4a8baf65502738a20","observation_id":"24ea9fdd-faa4-45e2-94b2-1afe6242792b","resolution":{"observed_at":"2026-08-02T01:12:23.819963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.822605Z","title":"CWE-78: Improper Neutralization of Special Elements used in an OS Command (’OS Command Injection’),","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.822605Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:c6e6c991f64cf01f8d17d141708ed54b4f438535fae925a7c27c886335020254","observation_id":"aafd8f11-289e-4bc8-8d77-05238b717749","resolution":{"observed_at":"2026-08-02T01:12:23.822605Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.825322Z","title":"CWE-22: Improper Limitation of a Pathname to a Restricted Directory (’Path Traversal’),","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.825322Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:a5048fd306b049ba2edfdefdf31e2857f38ca1c62e4ce11a160adb76f7b9d7c5","observation_id":"9ae2ece8-9bfb-49ec-9671-0dd3f4154223","resolution":{"observed_at":"2026-08-02T01:12:23.825322Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.827679Z","title":"OW ASP Web Security Testing Guide: Testing for Path Traversal (WSTG-ATHZ-01),","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.827679Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:5049bdb82a7ef2e2878dde05f1101d11e5e711675e2e8831154545fe4c67efc6","observation_id":"59a3918a-bec5-4c2a-a794-fd89c09041ff","resolution":{"observed_at":"2026-08-02T01:12:23.827679Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.14925","last_updated":"2025-08-19T10:12:35Z","snapshot_observed_at":"2026-08-08T10:31:54.102871Z","submitted_at":"2025-08-19T10:12:35Z","title":"MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.14925","snapshot_observed_at":"2026-08-02T01:12:23.830265Z","title":"MCPTox: A benchmark for tool poisoning attack on real-world MCP servers,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.830265Z"},"links":{"cited_paper":"/paper/2508.14925","citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:c55827b238da2746d7dbbfd6aa162a4c629b01d448c028253a14625fb35edaac","observation_id":"3dd529ba-2ded-4228-b98c-d4a75e503ce7","resolution":{"observed_at":"2026-08-02T01:12:23.830265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.833340Z","title":"MCPZoo: A large-scale dataset of runnable model context protocol servers for ai agent,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.833340Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:61fd739f7d4b5825ceea4240ffe177ff6ad82179dc6e8cae0b10ff3d6646c870","observation_id":"c6872dcc-e9d8-44f7-963f-a73742d501fd","resolution":{"observed_at":"2026-08-02T01:12:23.833340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.12538","last_updated":"2026-05-25T07:08:19Z","snapshot_observed_at":"2026-08-05T19:27:11.696122Z","submitted_at":"2025-08-18T00:23:41Z","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.12538","snapshot_observed_at":"2026-08-02T01:12:23.835926Z","title":"Systematic analysis of MCP security,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.835926Z"},"links":{"cited_paper":"/paper/2508.12538","citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:5d46c39a316e0e5d9ce5361eb67866278b3d899d7fb18bce0ed405c2a9ae4f75","observation_id":"f9cfa3c7-9024-4a9d-b880-aef3c20f0dea","resolution":{"observed_at":"2026-08-02T01:12:23.835926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.838789Z","title":"Prompt injection attack to tool selection in LLM agents,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.838789Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:4a271f8e62c88c9c51eefef44190af3c1de5c0562eed5ea0db65a99948a64ec8","observation_id":"33ac838c-e586-4eb7-92de-75e0283b539c","resolution":{"observed_at":"2026-08-02T01:12:23.838789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.841176Z","title":"MPMA: Preference manipulation attack against model context protocol,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.841176Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:c2ea1ed3a6e982b77ede0bea0fd5c79c261a3def214e5dcd34086e80eb16d8cc","observation_id":"72a9399d-eb2e-4c5b-b257-a74eb8eea54c","resolution":{"observed_at":"2026-08-02T01:12:23.841176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.843786Z","title":"MCP-ITP: An automated framework for implicit tool poisoning in MCP,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.843786Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:44f77fa7ea7e2f4f59260dbc8f947c7a33eb01a3c5650d44bf731cc9e5e5738b","observation_id":"5c046c1e-0e4b-4d49-83b9-b679560d8a8e","resolution":{"observed_at":"2026-08-02T01:12:23.843786Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.846126Z","title":"Attractive metadata attack: Inducing LLM agents to invoke malicious tools,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.846126Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:424da5ae843f6b825d04ada10b0c97501816db7adf7d4581c14f279ebfa9c157","observation_id":"2f4a1307-4aeb-4953-9aa5-0bea3376b6a7","resolution":{"observed_at":"2026-08-02T01:12:23.846126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.848628Z","title":"Breaking the protocol: Security analysis of the model context protocol specification and prompt injection vulnerabilities in tool-integrated LLM agents,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.848628Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:2b7fcdadee7f623b1096855c5de0588f3185558c9af068c999bb096896721c41","observation_id":"d88d67ab-67de-4306-99be-a6602f5987f7","resolution":{"observed_at":"2026-08-02T01:12:23.848628Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.851101Z","title":"Compatibility at a cost: Systematic discovery and exploitation of MCP clause-compliance vulnerabilities,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.851101Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:cc726690f1271738915f11c4e276a07a891d861882c1df4d5c63e52eda40d645","observation_id":"8b5ce3b1-e4a7-4561-b935-6454bd2a6167","resolution":{"observed_at":"2026-08-02T01:12:23.851101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.856249Z","title":"Don’t believe everything you read: Understanding and measuring MCP behavior under misleading tool descriptions,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.856249Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:972a26c3551316c737b6ec2d80c7030ee820de4843580764cce2be4bfc45a7c4","observation_id":"4d7b2078-1609-4105-a0e4-35c99c87c3e5","resolution":{"observed_at":"2026-08-02T01:12:23.856249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.858438Z","title":"Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.858438Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:1c489fd4ff89990f69389c91b0d4b031fc3d357a535d8fd251d6785553a80ada","observation_id":"aaf60554-a12c-47ab-8b77-e429c376906c","resolution":{"observed_at":"2026-08-02T01:12:23.858438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.860602Z","title":"Identifying the risks of LM agents with an LM-emulated sandbox,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.860602Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:539a6af03e184df297e3310639268214323baf0cad33cc30de21571752c09a0b","observation_id":"a191708d-7ff2-41a0-a072-656e0ceab2cf","resolution":{"observed_at":"2026-08-02T01:12:23.860602Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.862906Z","title":"Model context protocol (MCP): Landscape, security threats, and future research directions,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.862906Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:d68a67f74b5c199a60e1c8423b3d366febc922f0d2b3ff4deb11defb8efa20f6","observation_id":"4fe2b22b-27c3-4f5b-9cd0-85276be12641","resolution":{"observed_at":"2026-08-02T01:12:23.862906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.16558","last_updated":"2026-04-27T18:24:07Z","snapshot_observed_at":"2026-07-06T22:33:28.866887Z","submitted_at":"2025-10-18T16:09:05Z","title":"A First Look at the Security Issues in the Model Context Protocol Ecosystem","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.16558","snapshot_observed_at":"2026-08-02T01:12:23.865358Z","title":"A first look at the security issues in the model context protocol ecosystem,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.865358Z"},"links":{"cited_paper":"/paper/2510.16558","citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:eb3b9f3a7e7542a6440590be4fb7b3ed8c357900d21411b8aac651b2fc7a7a4a","observation_id":"c819445c-1120-4c2b-8a25-b9179e6d701c","resolution":{"observed_at":"2026-08-02T01:12:23.865358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.867966Z","title":"Automatic red teaming LLM-based agents with model context protocol tools,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.867966Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:27b434b3c157a6ef7e0c57267fe04f673fa412491fa8911df0f5161dfb5581fd","observation_id":"37b46aaf-c7c9-4dc3-8994-9d4d9cf875ec","resolution":{"observed_at":"2026-08-02T01:12:23.867966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.870369Z","title":"T-MAP: Red-teaming LLM agents with trajectory-aware evolutionary search,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.870369Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:93bef5f2a794ab300866294f5c4bb58baff0576407faacfb46e7368e1cced990","observation_id":"aa7813a3-430f-4f3c-96fe-64344c156442","resolution":{"observed_at":"2026-08-02T01:12:23.870369Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.876084Z","title":"MCP Scanner,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.876084Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:95ddfbd6f22f74b660f4e8d813010e4acbdf3a29f6906f1edb330f48596c6d66","observation_id":"309d7031-a777-4122-a466-125157105563","resolution":{"observed_at":"2026-08-02T01:12:23.876084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.873167Z","title":"Available: https://arxiv.org/abs/2603.22341","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.873167Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:be65a1b769c920117167c58ef195cdcb632d171ce2efe9523ef38cc7d27dc99b","observation_id":"a0e71696-5866-405e-88d0-23cc9b4e2bad","resolution":{"observed_at":"2026-08-02T01:12:23.873167Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.880972Z","title":"Mindguard: Intrinsic decision inspection for securing LLM agents against metadata poisoning,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.880972Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:f0ad46001194c10c34daca074cbb845baad589e94f367e19a29eb835d0912062","observation_id":"dc092f63-10a1-49d4-81ce-03655b657ca4","resolution":{"observed_at":"2026-08-02T01:12:23.880972Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.878640Z","title":"mcp-armor: MCP Configuration Scanner with Client- Aware Security Analysis,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.878640Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:c6840d87794f0f3d83f85aee755735158afbf34f32a8a37c11189649274cede6","observation_id":"ff42dfc8-265c-42a9-a1c1-0c4188b832d1","resolution":{"observed_at":"2026-08-02T01:12:23.878640Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.17125","last_updated":"2026-04-18T19:53:09Z","snapshot_observed_at":"2026-08-10T22:45:44.351202Z","submitted_at":"2026-04-18T19:53:09Z","title":"CASCADE: A Cascaded Hybrid Defense Architecture for Prompt Injection Detection in MCP-Based Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.17125","snapshot_observed_at":"2026-08-02T01:12:23.885969Z","title":"CASCADE: A cascaded hybrid defense architecture for prompt injection detection in MCP-based systems,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.885969Z"},"links":{"cited_paper":"/paper/2604.17125","citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:b553b780db95ccf266c8d1e0e1ee96eb7e67311a7ceeca3903441f3d20aff36b","observation_id":"395193d8-1d30-4351-81cb-8945c9a49a2d","resolution":{"observed_at":"2026-08-02T01:12:23.885969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.883547Z","title":"MCP-Guard: A multi-stage defense-in-depth framework for securing model context protocol in agentic AI,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.883547Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:318ba1d1970a5766f7be4a07b8242f0302326061ae85769005889469c35d6ade","observation_id":"32c6e624-c210-46a1-9d03-fb665f9bc01d","resolution":{"observed_at":"2026-08-02T01:12:23.883547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.891650Z","title":"Auditing MCP servers for over-privileged tool capabilities,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.891650Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:0c52b5188086d5677d29813527cea77196f6323aa944a653649ab680f87158df","observation_id":"fd7049b5-8199-40c0-ac90-42b99449aa73","resolution":{"observed_at":"2026-08-02T01:12:23.891650Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.03767","last_updated":"2025-04-11T16:59:05Z","snapshot_observed_at":"2026-08-12T07:07:45.143945Z","submitted_at":"2025-04-02T21:46:02Z","title":"MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.03767","snapshot_observed_at":"2026-08-02T01:12:23.888740Z","title":"MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.888740Z"},"links":{"cited_paper":"/paper/2504.03767","citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:66dae6ce3b2fbc228adee386ec8334fe5d5bfd6a79ad452d5d7846660f5f0ede","observation_id":"ad1eea2c-eb1f-4260-aa1a-914a6acf4a6a","resolution":{"observed_at":"2026-08-02T01:12:23.888740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.01905","last_updated":"2026-05-19T08:31:57Z","snapshot_observed_at":"2026-07-06T22:51:40.181565Z","submitted_at":"2026-04-02T11:22:07Z","title":"From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.01905","snapshot_observed_at":"2026-08-02T01:12:23.896978Z","title":"From component manipulation to system compromise: Understanding and detecting malicious MCP servers,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.896978Z"},"links":{"cited_paper":"/paper/2604.01905","citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:c146d3ec2285c573b70a3a30f407a661bd2e5cdff1d8978b20e0bc9968ca0439","observation_id":"c9615c4c-cf8d-43c9-912a-8c5cb2d9bfa9","resolution":{"observed_at":"2026-08-02T01:12:23.896978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.01241","last_updated":"2026-06-22T15:20:42Z","snapshot_observed_at":"2026-08-05T07:08:24.841392Z","submitted_at":"2026-01-03T17:25:38Z","title":"MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.01241","snapshot_observed_at":"2026-08-02T01:12:23.894152Z","title":"MCP- SandboxScan: W ASM-based secure execution and runtime analysis for MCP tools,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.894152Z"},"links":{"cited_paper":"/paper/2601.01241","citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:7abbc61527a9a69a19ca83927dd99ad0dc564d21befd7f7b8ec9594ca0f222be","observation_id":"70707f31-365b-4b5a-91ef-abab78b83267","resolution":{"observed_at":"2026-08-02T01:12:23.894152Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.905034Z","title":"Large language model guided protocol fuzzing","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.905034Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:60d48fbc9eea44e5a0b71484b485f7a0289133ff039f8bdfc622e307396cb591","observation_id":"a3037191-b0ae-40ce-b8f1-f92262ed60e1","resolution":{"observed_at":"2026-08-02T01:12:23.905034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.900111Z","title":"MCPShield: A security cognition layer for adaptive trust calibration in model context protocol agents,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.900111Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:dfad7f31cf7206f13af3db33ecfa352527bc7a862a1dcd0211ec4d23f3cc1bdb","observation_id":"f20dc58a-5aad-45ee-874b-28a2f1c2333a","resolution":{"observed_at":"2026-08-02T01:12:23.900111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.902490Z","title":"Available: https://arxiv.org/abs/2602.14281","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.902490Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:c2a75234358039d2d0b4cdf3c3fe2dc13e7ec49eb48c5861c2d78dfb42880b90","observation_id":"11e2a3df-3a11-405c-8fbd-e21cce56a727","resolution":{"observed_at":"2026-08-02T01:12:23.902490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.911858Z","title":"YuraScanner: Leveraging LLMs for task-driven web app scanning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.911858Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:a70cd6bca4439c7b7f3a3ba8490aed7ac3dcf093aed198c7d994a18b906a012e","observation_id":"a91b2771-a7d6-4f5d-8811-c010443ab2de","resolution":{"observed_at":"2026-08-02T01:12:23.911858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.907345Z","title":"Make agent defeat agent: Automatic detection of {Taint-Style}vulnerabilities in{LLM-based}agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.907345Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:2503e0533adf98d0f0b7eac54bf40028eada2690cd7dd64e0562999214afb788","observation_id":"50f61783-b495-4b4a-915d-a7b393cc14d5","resolution":{"observed_at":"2026-08-02T01:12:23.907345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.909640Z","title":"Black widow: Blackbox data-driven web scanning,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.909640Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:78ac1e7af67abc67f9746b1970b9e7cbbbd648a9bcff2aa469b117514ad2163e","observation_id":"d0398f1f-162b-412b-bc56-1c227a38687c","resolution":{"observed_at":"2026-08-02T01:12:23.909640Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.914246Z","title":"MarkItDown,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.914246Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:9179472aab64c2b65673a905283e10e58f748773d79c7f269f1b7234261692fb","observation_id":"55585531-6119-42bf-b2c2-ca32e751603a","resolution":{"observed_at":"2026-08-02T01:12:23.914246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.916978Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.916978Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:1626f924897ae39030166e850cfd8c3073914a005cc296afd2107e65ee6a60c5","observation_id":"e3bda448-a814-4a52-bf19-589cc79b5587","resolution":{"observed_at":"2026-08-02T01:12:23.916978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.919442Z","title":"Prefer compact, high-signal probes over generic enumeration","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.919442Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:281fa6c62f1d805ab7ed880327ad2210b189f84408f21e2db8c4fcb18f0c56a6","observation_id":"5d7ae7df-ea9d-4d3e-ba30-a3490667cb4b","resolution":{"observed_at":"2026-08-02T01:12:23.919442Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.921954Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.921954Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:c384d57bc3fcb3c14908307f8e013874664d759f129ed7b471808c97da3e1c15","observation_id":"7c73ca54-f629-4701-990c-f64d5ede9a78","resolution":{"observed_at":"2026-08-02T01:12:23.921954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.924240Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.924240Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:c0b7fafbd549be0dec83577ca8704701d39dab2c4cbabf8f86f6166910b8e5a8","observation_id":"f458ceda-d5d8-4a8b-968f-ec9d8edc6c40","resolution":{"observed_at":"2026-08-02T01:12:23.924240Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.926355Z","title":"is_system_originated","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.926355Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:e12138bf3b5985939f642e33a8953d40b25483f8d844825ccb7393d548cc4022","observation_id":"4fc82c9e-db0f-4e63-bfb6-0227fa5f5e5a","resolution":{"observed_at":"2026-08-02T01:12:23.926355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.928931Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.928931Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:94873d65053b4a6b097e449badf10d115e1cbbe7c3ffc27004f59674565eba1e","observation_id":"8728e79a-6434-4482-a623-483f2f4d14f1","resolution":{"observed_at":"2026-08-02T01:12:23.928931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.931303Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.931303Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:609ad553718c92bf4701213f450924a6e77000950870a032da65a9dddf8c6c81","observation_id":"5884f5bf-1ab7-409c-8c8b-d698e45a067f","resolution":{"observed_at":"2026-08-02T01:12:23.931303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.933654Z","title":"decision","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.933654Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:182d188b97b4f72122fdb896e2d552a74bd6291b0eb7b5fbe919084e07146293","observation_id":"ef75a805-aad3-4923-b5d4-3d631b4afb73","resolution":{"observed_at":"2026-08-02T01:12:23.933654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T01:12:23.853582Z","title":"Available: https://arxiv.org/abs/2603.10163","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-02T01:12:23.853582Z"},"links":{"citing_paper":"/paper/2607.14754"},"observation_digest":"sha256:88af254b69d370051c0c8ff1235957f652bb77f0b6ca49ec91aebefc284bdef6","observation_id":"ae60e436-b451-4091-a94c-029ee8c39d83","resolution":{"observed_at":"2026-08-02T01:12:23.853582Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.14754","last_updated":"2026-07-16T09:41:17Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-11T07:06:46.634191Z","submitted_at":"2026-07-16T09:41:17Z","title":"FlowGuard: From Signals to Evidence for MCP Security Detection"},"reference_resolution":{"displayed":59,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":59,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":59},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 0 inbound Pith citation observations for arXiv:2607.14754."}