Pith. sign in

Paper Citation Record · LEDGER

FlowGuard: From Signals to Evidence for MCP Security Detection

As of 11 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 0 inbound Pith citation observations for arXiv:2607.14754.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.14754 v1

Coverage vector

measured 59 of 59 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-02T01:12:23.933654Z

measured 59 of 59 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-11T06:34:44.6726+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

59 of 59 outbound references displayed

  • verified exact0
  • verified fuzzy0
  • unresolved59
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 8da2e222-b407-408b-9d2a-edc7c9638c38 · outbound

This paper cites MCPScan: Security analysis tool for MCP servers,.

FlowGuard: From Signals to Evidence for MCP Security Detection MCPScan: Security analysis tool for MCP servers,

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.782406Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.782406Z digest=sha256:37a456468402b552aff662e78889e0cca060e3f355ec6a03fb33ad2b4a4d8f8d

Observation df846fab-1218-4fc4-b486-e0be57ddd384 · outbound

This paper cites Snyk Agent Scan,.

FlowGuard: From Signals to Evidence for MCP Security Detection Snyk Agent Scan,

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.785737Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.785737Z digest=sha256:4cd4bf40f348006f34ddf09f2164a0aaf70180a5771786e93e5f0fc60a491d29

Observation 9fcbea15-8d2c-4bd3-a994-0cfb625da628 · outbound

This paper cites AI-Infra-Guard: A Comprehensive, Intelligent, and Easy-to-Use AI Red Teaming Platform,.

FlowGuard: From Signals to Evidence for MCP Security Detection AI-Infra-Guard: A Comprehensive, Intelligent, and Easy-to-Use AI Red Teaming Platform,

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.788663Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.788663Z digest=sha256:062d673c55d5d973eddfb6ff49899a80a6d61bc1e7ed236cea589c9fbdb90b39

Observation 1b3b61af-2e6b-4004-a9b8-402359be74e0 · outbound

This paper cites Model Context Protocol,.

FlowGuard: From Signals to Evidence for MCP Security Detection Model Context Protocol,

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.791547Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.791547Z digest=sha256:e20c648131d45c2063ebf8e30d5b1407a4fdc3e0a92dabf715540bfac01e7196

Observation 6dfe2038-9886-4679-a179-5d3e8216a487 · outbound

This paper cites JSON-RPC 2.0 specification,.

FlowGuard: From Signals to Evidence for MCP Security Detection JSON-RPC 2.0 specification,

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.794190Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.794190Z digest=sha256:ebbebb52fd3bd85de01fdc77d3ddf986371bc7ab044d4195d46a45b006b73562

Observation 19ffc91f-d1a4-4705-94f2-c4236a00fc69 · outbound

This paper cites Claude Desktop,.

FlowGuard: From Signals to Evidence for MCP Security Detection Claude Desktop,

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.796942Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.796942Z digest=sha256:7b754f1df4ed3c4c982d1a06dcaeb6be70e44fb59c69b418605df1133a8d2fc3

Observation 80ad9cb8-1004-4f0f-b7b7-f348c72f7943 · outbound

This paper cites Cursor: The AI Code Editor,.

FlowGuard: From Signals to Evidence for MCP Security Detection Cursor: The AI Code Editor,

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.800398Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.800398Z digest=sha256:dbd96fcf8c71d21521ece8fa92fc1e5a4860d278f0f0db97c52a1b758b6f91e9

Observation 57014866-d484-4edb-8606-ba4cf6700b6b · outbound

This paper cites Snipuzz: Black-box fuzzing of iot firmware via message snippet inference,.

FlowGuard: From Signals to Evidence for MCP Security Detection Snipuzz: Black-box fuzzing of iot firmware via message snippet inference,

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.803220Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.803220Z digest=sha256:161641626afaf9dd4629fc1fa6b53517f85c7db70fc99aab73164617a43a8530

Observation 3c289c50-6a13-4449-aafc-b0353a21f4a9 · outbound

This paper cites Beware of the unexpected: Bimodal taint analysis,.

FlowGuard: From Signals to Evidence for MCP Security Detection Beware of the unexpected: Bimodal taint analysis,

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.805862Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.805862Z digest=sha256:25318af26b6f6879896f37a9c7884ba81ee0bae6b9217f178495eed6ae7879b1

Observation 60e7da18-bf3d-4721-acf6-fb49b064c6c1 · outbound

This paper cites OW ASP Benchmark Project,.

FlowGuard: From Signals to Evidence for MCP Security Detection OW ASP Benchmark Project,

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.808973Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.808973Z digest=sha256:098fb22c45b58a50735949411065c5fbf0cf9143df73e48c462dc38ef4fb7e0f

Observation 0e69a67a-0c0e-4db6-8c52-7c883dd6203a · outbound

This paper cites Juliet Test Suite v1.3 for C/C++ and Java,.

FlowGuard: From Signals to Evidence for MCP Security Detection Juliet Test Suite v1.3 for C/C++ and Java,

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.812282Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.812282Z digest=sha256:1f92bc26ca4e2358170ca3fe3b337bed516d463c459159282286f7741a1061ea

Observation 2b3739f3-ae45-4878-b300-e306090dedbe · outbound

This paper cites MCP security bench (MSB): Benchmarking attacks against model context protocol in LLM agents,.

FlowGuard: From Signals to Evidence for MCP Security Detection MCP security bench (MSB): Benchmarking attacks against model context protocol in LLM agents,

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.814956Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.814956Z digest=sha256:7884750e8989a5c0d55b7cd7255c429d377d3061987eea224a094373b1b48d63

Observation 93a0e49e-c230-4085-8cc9-1431bf430126 · outbound

This paper cites MCPSecBench: A systematic security benchmark and playground for testing model context protocols,.

FlowGuard: From Signals to Evidence for MCP Security Detection MCPSecBench: A systematic security benchmark and playground for testing model context protocols,

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.817377Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.817377Z digest=sha256:f2ad7d3f32877bd3baa8fa255515aae553938cbf7b83ef2af808600ba65eb226

Observation 24ea9fdd-faa4-45e2-94b2-1afe6242792b · outbound

This paper cites MCP- SafetyBench: A benchmark for safety evaluation of large language models with real-world MCP servers,.

FlowGuard: From Signals to Evidence for MCP Security Detection MCP- SafetyBench: A benchmark for safety evaluation of large language models with real-world MCP servers,

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.819963Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.819963Z digest=sha256:e3702c4461b4ab92411e0ddbc8d020d1c4d2278417c7ffc4a8baf65502738a20

Observation aafd8f11-289e-4bc8-8d77-05238b717749 · outbound

This paper cites CWE-78: Improper Neutralization of Special Elements used in an OS Command (’OS Command Injection’),.

FlowGuard: From Signals to Evidence for MCP Security Detection CWE-78: Improper Neutralization of Special Elements used in an OS Command (’OS Command Injection’),

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.822605Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.822605Z digest=sha256:c6e6c991f64cf01f8d17d141708ed54b4f438535fae925a7c27c886335020254

Observation 9ae2ece8-9bfb-49ec-9671-0dd3f4154223 · outbound

This paper cites CWE-22: Improper Limitation of a Pathname to a Restricted Directory (’Path Traversal’),.

FlowGuard: From Signals to Evidence for MCP Security Detection CWE-22: Improper Limitation of a Pathname to a Restricted Directory (’Path Traversal’),

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.825322Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.825322Z digest=sha256:a5048fd306b049ba2edfdefdf31e2857f38ca1c62e4ce11a160adb76f7b9d7c5

Observation 59a3918a-bec5-4c2a-a794-fd89c09041ff · outbound

This paper cites OW ASP Web Security Testing Guide: Testing for Path Traversal (WSTG-ATHZ-01),.

FlowGuard: From Signals to Evidence for MCP Security Detection OW ASP Web Security Testing Guide: Testing for Path Traversal (WSTG-ATHZ-01),

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.827679Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.827679Z digest=sha256:5049bdb82a7ef2e2878dde05f1101d11e5e711675e2e8831154545fe4c67efc6

Observation 3dd529ba-2ded-4228-b98c-d4a75e503ce7 · outbound

This paper cites MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers.

FlowGuard: From Signals to Evidence for MCP Security Detection MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.830265Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.830265Z digest=sha256:c55827b238da2746d7dbbfd6aa162a4c629b01d448c028253a14625fb35edaac

Observation c6872dcc-e9d8-44f7-963f-a73742d501fd · outbound

This paper cites MCPZoo: A large-scale dataset of runnable model context protocol servers for ai agent,.

FlowGuard: From Signals to Evidence for MCP Security Detection MCPZoo: A large-scale dataset of runnable model context protocol servers for ai agent,

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.833340Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.833340Z digest=sha256:61fd739f7d4b5825ceea4240ffe177ff6ad82179dc6e8cae0b10ff3d6646c870

Observation f9cfa3c7-9024-4a9d-b880-aef3c20f0dea · outbound

This paper cites MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security.

FlowGuard: From Signals to Evidence for MCP Security Detection MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.835926Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.835926Z digest=sha256:5d46c39a316e0e5d9ce5361eb67866278b3d899d7fb18bce0ed405c2a9ae4f75

Observation 33ac838c-e586-4eb7-92de-75e0283b539c · outbound

This paper cites Prompt injection attack to tool selection in LLM agents,.

FlowGuard: From Signals to Evidence for MCP Security Detection Prompt injection attack to tool selection in LLM agents,

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.838789Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.838789Z digest=sha256:4a271f8e62c88c9c51eefef44190af3c1de5c0562eed5ea0db65a99948a64ec8

Observation 72a9399d-eb2e-4c5b-b257-a74eb8eea54c · outbound

This paper cites MPMA: Preference manipulation attack against model context protocol,.

FlowGuard: From Signals to Evidence for MCP Security Detection MPMA: Preference manipulation attack against model context protocol,

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.841176Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.841176Z digest=sha256:c2ea1ed3a6e982b77ede0bea0fd5c79c261a3def214e5dcd34086e80eb16d8cc

Observation 5c046c1e-0e4b-4d49-83b9-b679560d8a8e · outbound

This paper cites MCP-ITP: An automated framework for implicit tool poisoning in MCP,.

FlowGuard: From Signals to Evidence for MCP Security Detection MCP-ITP: An automated framework for implicit tool poisoning in MCP,

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.843786Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.843786Z digest=sha256:44f77fa7ea7e2f4f59260dbc8f947c7a33eb01a3c5650d44bf731cc9e5e5738b

Observation 2f4a1307-4aeb-4953-9aa5-0bea3376b6a7 · outbound

This paper cites Attractive metadata attack: Inducing LLM agents to invoke malicious tools,.

FlowGuard: From Signals to Evidence for MCP Security Detection Attractive metadata attack: Inducing LLM agents to invoke malicious tools,

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.846126Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.846126Z digest=sha256:424da5ae843f6b825d04ada10b0c97501816db7adf7d4581c14f279ebfa9c157

Observation d88d67ab-67de-4306-99be-a6602f5987f7 · outbound

This paper cites Breaking the protocol: Security analysis of the model context protocol specification and prompt injection vulnerabilities in tool-integrated LLM agents,.

FlowGuard: From Signals to Evidence for MCP Security Detection Breaking the protocol: Security analysis of the model context protocol specification and prompt injection vulnerabilities in tool-integrated LLM agents,

Reference 25

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.848628Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.848628Z digest=sha256:2b7fcdadee7f623b1096855c5de0588f3185558c9af068c999bb096896721c41

Observation 8b5ce3b1-e4a7-4561-b935-6454bd2a6167 · outbound

This paper cites Compatibility at a cost: Systematic discovery and exploitation of MCP clause-compliance vulnerabilities,.

FlowGuard: From Signals to Evidence for MCP Security Detection Compatibility at a cost: Systematic discovery and exploitation of MCP clause-compliance vulnerabilities,

Reference 26

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.851101Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.851101Z digest=sha256:cc726690f1271738915f11c4e276a07a891d861882c1df4d5c63e52eda40d645

Observation 4d7b2078-1609-4105-a0e4-35c99c87c3e5 · outbound

This paper cites Don’t believe everything you read: Understanding and measuring MCP behavior under misleading tool descriptions,.

FlowGuard: From Signals to Evidence for MCP Security Detection Don’t believe everything you read: Understanding and measuring MCP behavior under misleading tool descriptions,

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.856249Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.856249Z digest=sha256:972a26c3551316c737b6ec2d80c7030ee820de4843580764cce2be4bfc45a7c4

Observation aaf60554-a12c-47ab-8b77-e429c376906c · outbound

This paper cites Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents,.

FlowGuard: From Signals to Evidence for MCP Security Detection Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents,

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.858438Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.858438Z digest=sha256:1c489fd4ff89990f69389c91b0d4b031fc3d357a535d8fd251d6785553a80ada

Observation a191708d-7ff2-41a0-a072-656e0ceab2cf · outbound

This paper cites Identifying the risks of LM agents with an LM-emulated sandbox,.

FlowGuard: From Signals to Evidence for MCP Security Detection Identifying the risks of LM agents with an LM-emulated sandbox,

Reference 29

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.860602Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.860602Z digest=sha256:539a6af03e184df297e3310639268214323baf0cad33cc30de21571752c09a0b

Observation 4fe2b22b-27c3-4f5b-9cd0-85276be12641 · outbound

This paper cites Model context protocol (MCP): Landscape, security threats, and future research directions,.

FlowGuard: From Signals to Evidence for MCP Security Detection Model context protocol (MCP): Landscape, security threats, and future research directions,

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.862906Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.862906Z digest=sha256:d68a67f74b5c199a60e1c8423b3d366febc922f0d2b3ff4deb11defb8efa20f6

Observation c819445c-1120-4c2b-8a25-b9179e6d701c · outbound

This paper cites A First Look at the Security Issues in the Model Context Protocol Ecosystem.

FlowGuard: From Signals to Evidence for MCP Security Detection A First Look at the Security Issues in the Model Context Protocol Ecosystem

Reference 31

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.865358Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.865358Z digest=sha256:eb3b9f3a7e7542a6440590be4fb7b3ed8c357900d21411b8aac651b2fc7a7a4a

Observation 37b46aaf-c7c9-4dc3-8994-9d4d9cf875ec · outbound

This paper cites Automatic red teaming LLM-based agents with model context protocol tools,.

FlowGuard: From Signals to Evidence for MCP Security Detection Automatic red teaming LLM-based agents with model context protocol tools,

Reference 32

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.867966Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.867966Z digest=sha256:27b434b3c157a6ef7e0c57267fe04f673fa412491fa8911df0f5161dfb5581fd

Observation aa7813a3-430f-4f3c-96fe-64344c156442 · outbound

This paper cites T-MAP: Red-teaming LLM agents with trajectory-aware evolutionary search,.

FlowGuard: From Signals to Evidence for MCP Security Detection T-MAP: Red-teaming LLM agents with trajectory-aware evolutionary search,

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.870369Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.870369Z digest=sha256:93bef5f2a794ab300866294f5c4bb58baff0576407faacfb46e7368e1cced990

Observation 309d7031-a777-4122-a466-125157105563 · outbound

This paper cites MCP Scanner,.

FlowGuard: From Signals to Evidence for MCP Security Detection MCP Scanner,

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.876084Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.876084Z digest=sha256:95ddfbd6f22f74b660f4e8d813010e4acbdf3a29f6906f1edb330f48596c6d66

Observation a0e71696-5866-405e-88d0-23cc9b4e2bad · outbound

This paper cites Available: https://arxiv.org/abs/2603.22341.

FlowGuard: From Signals to Evidence for MCP Security Detection Available: https://arxiv.org/abs/2603.22341

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.873167Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.873167Z digest=sha256:be65a1b769c920117167c58ef195cdcb632d171ce2efe9523ef38cc7d27dc99b

Observation dc092f63-10a1-49d4-81ce-03655b657ca4 · outbound

This paper cites Mindguard: Intrinsic decision inspection for securing LLM agents against metadata poisoning,.

FlowGuard: From Signals to Evidence for MCP Security Detection Mindguard: Intrinsic decision inspection for securing LLM agents against metadata poisoning,

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.880972Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.880972Z digest=sha256:f0ad46001194c10c34daca074cbb845baad589e94f367e19a29eb835d0912062

Observation ff42dfc8-265c-42a9-a1c1-0c4188b832d1 · outbound

This paper cites mcp-armor: MCP Configuration Scanner with Client- Aware Security Analysis,.

FlowGuard: From Signals to Evidence for MCP Security Detection mcp-armor: MCP Configuration Scanner with Client- Aware Security Analysis,

Reference 37

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.878640Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.878640Z digest=sha256:c6840d87794f0f3d83f85aee755735158afbf34f32a8a37c11189649274cede6

Observation 395193d8-1d30-4351-81cb-8945c9a49a2d · outbound

This paper cites CASCADE: A Cascaded Hybrid Defense Architecture for Prompt Injection Detection in MCP-Based Systems.

FlowGuard: From Signals to Evidence for MCP Security Detection CASCADE: A Cascaded Hybrid Defense Architecture for Prompt Injection Detection in MCP-Based Systems

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.885969Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.885969Z digest=sha256:b553b780db95ccf266c8d1e0e1ee96eb7e67311a7ceeca3903441f3d20aff36b

Observation 32c6e624-c210-46a1-9d03-fb665f9bc01d · outbound

This paper cites MCP-Guard: A multi-stage defense-in-depth framework for securing model context protocol in agentic AI,.

FlowGuard: From Signals to Evidence for MCP Security Detection MCP-Guard: A multi-stage defense-in-depth framework for securing model context protocol in agentic AI,

Reference 39

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.883547Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.883547Z digest=sha256:318ba1d1970a5766f7be4a07b8242f0302326061ae85769005889469c35d6ade

Observation fd7049b5-8199-40c0-ac90-42b99449aa73 · outbound

This paper cites Auditing MCP servers for over-privileged tool capabilities,.

FlowGuard: From Signals to Evidence for MCP Security Detection Auditing MCP servers for over-privileged tool capabilities,

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.891650Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.891650Z digest=sha256:0c52b5188086d5677d29813527cea77196f6323aa944a653649ab680f87158df

Observation ad1eea2c-eb1f-4260-aa1a-914a6acf4a6a · outbound

This paper cites MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits.

FlowGuard: From Signals to Evidence for MCP Security Detection MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.888740Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.888740Z digest=sha256:6c86bed119c4d5f8b1b65706a80a8a2c422e4ad822c765a28af5828c569d2ed4

Observation c9615c4c-cf8d-43c9-912a-8c5cb2d9bfa9 · outbound

This paper cites From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers.

FlowGuard: From Signals to Evidence for MCP Security Detection From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.896978Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.896978Z digest=sha256:c146d3ec2285c573b70a3a30f407a661bd2e5cdff1d8978b20e0bc9968ca0439

Observation 70707f31-365b-4b5a-91ef-abab78b83267 · outbound

This paper cites MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools.

FlowGuard: From Signals to Evidence for MCP Security Detection MCP-SandboxScan: WASM-based Secure Execution and Runtime Analysis for MCP Tools

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.894152Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.894152Z digest=sha256:7abbc61527a9a69a19ca83927dd99ad0dc564d21befd7f7b8ec9594ca0f222be

Observation a3037191-b0ae-40ce-b8f1-f92262ed60e1 · outbound

This paper cites Large language model guided protocol fuzzing.

FlowGuard: From Signals to Evidence for MCP Security Detection Large language model guided protocol fuzzing

Reference 44

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.905034Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.905034Z digest=sha256:60d48fbc9eea44e5a0b71484b485f7a0289133ff039f8bdfc622e307396cb591

Observation f20dc58a-5aad-45ee-874b-28a2f1c2333a · outbound

This paper cites MCPShield: A security cognition layer for adaptive trust calibration in model context protocol agents,.

FlowGuard: From Signals to Evidence for MCP Security Detection MCPShield: A security cognition layer for adaptive trust calibration in model context protocol agents,

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.900111Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.900111Z digest=sha256:dfad7f31cf7206f13af3db33ecfa352527bc7a862a1dcd0211ec4d23f3cc1bdb

Observation 11e2a3df-3a11-405c-8fbd-e21cce56a727 · outbound

This paper cites Available: https://arxiv.org/abs/2602.14281.

FlowGuard: From Signals to Evidence for MCP Security Detection Available: https://arxiv.org/abs/2602.14281

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.902490Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.902490Z digest=sha256:c2a75234358039d2d0b4cdf3c3fe2dc13e7ec49eb48c5861c2d78dfb42880b90

Observation a91b2771-a7d6-4f5d-8811-c010443ab2de · outbound

This paper cites YuraScanner: Leveraging LLMs for task-driven web app scanning,.

FlowGuard: From Signals to Evidence for MCP Security Detection YuraScanner: Leveraging LLMs for task-driven web app scanning,

Reference 47

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.911858Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.911858Z digest=sha256:a70cd6bca4439c7b7f3a3ba8490aed7ac3dcf093aed198c7d994a18b906a012e

Observation 50f61783-b495-4b4a-915d-a7b393cc14d5 · outbound

This paper cites Make agent defeat agent: Automatic detection of {Taint-Style}vulnerabilities in{LLM-based}agents,.

FlowGuard: From Signals to Evidence for MCP Security Detection Make agent defeat agent: Automatic detection of {Taint-Style}vulnerabilities in{LLM-based}agents,

Reference 48

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.907345Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.907345Z digest=sha256:2503e0533adf98d0f0b7eac54bf40028eada2690cd7dd64e0562999214afb788

Observation d0398f1f-162b-412b-bc56-1c227a38687c · outbound

This paper cites Black widow: Blackbox data-driven web scanning,.

FlowGuard: From Signals to Evidence for MCP Security Detection Black widow: Blackbox data-driven web scanning,

Reference 49

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.909640Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.909640Z digest=sha256:78ac1e7af67abc67f9746b1970b9e7cbbbd648a9bcff2aa469b117514ad2163e

Observation 55585531-6119-42bf-b2c2-ca32e751603a · outbound

This paper cites MarkItDown,.

FlowGuard: From Signals to Evidence for MCP Security Detection MarkItDown,

Reference 51

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.914246Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.914246Z digest=sha256:9179472aab64c2b65673a905283e10e58f748773d79c7f269f1b7234261692fb

Observation e3bda448-a814-4a52-bf19-589cc79b5587 · outbound

This paper cites an unresolved cited work.

FlowGuard: From Signals to Evidence for MCP Security Detection Unresolved cited work

Reference 52

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.916978Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.916978Z digest=sha256:1626f924897ae39030166e850cfd8c3073914a005cc296afd2107e65ee6a60c5

Observation 5d7ae7df-ea9d-4d3e-ba30-a3490667cb4b · outbound

This paper cites Prefer compact, high-signal probes over generic enumeration.

FlowGuard: From Signals to Evidence for MCP Security Detection Prefer compact, high-signal probes over generic enumeration

Reference 53

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.919442Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.919442Z digest=sha256:281fa6c62f1d805ab7ed880327ad2210b189f84408f21e2db8c4fcb18f0c56a6

Observation 7c73ca54-f629-4701-990c-f64d5ede9a78 · outbound

This paper cites an unresolved cited work.

FlowGuard: From Signals to Evidence for MCP Security Detection Unresolved cited work

Reference 54

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.921954Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.921954Z digest=sha256:c384d57bc3fcb3c14908307f8e013874664d759f129ed7b471808c97da3e1c15

Observation f458ceda-d5d8-4a8b-968f-ec9d8edc6c40 · outbound

This paper cites an unresolved cited work.

FlowGuard: From Signals to Evidence for MCP Security Detection Unresolved cited work

Reference 55

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.924240Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.924240Z digest=sha256:c0b7fafbd549be0dec83577ca8704701d39dab2c4cbabf8f86f6166910b8e5a8

Observation 4fc82c9e-db0f-4e63-bfb6-0227fa5f5e5a · outbound

This paper cites is_system_originated.

FlowGuard: From Signals to Evidence for MCP Security Detection is_system_originated

Reference 56

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.926355Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.926355Z digest=sha256:e12138bf3b5985939f642e33a8953d40b25483f8d844825ccb7393d548cc4022

Observation 8728e79a-6434-4482-a623-483f2f4d14f1 · outbound

This paper cites an unresolved cited work.

FlowGuard: From Signals to Evidence for MCP Security Detection Unresolved cited work

Reference 57

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.928931Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.928931Z digest=sha256:94873d65053b4a6b097e449badf10d115e1cbbe7c3ffc27004f59674565eba1e

Observation 5884f5bf-1ab7-409c-8c8b-d698e45a067f · outbound

This paper cites an unresolved cited work.

FlowGuard: From Signals to Evidence for MCP Security Detection Unresolved cited work

Reference 58

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.931303Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.931303Z digest=sha256:609ad553718c92bf4701213f450924a6e77000950870a032da65a9dddf8c6c81

Observation ef75a805-aad3-4923-b5d4-3d631b4afb73 · outbound

This paper cites decision.

FlowGuard: From Signals to Evidence for MCP Security Detection decision

Reference 59

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.933654Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.933654Z digest=sha256:182d188b97b4f72122fdb896e2d552a74bd6291b0eb7b5fbe919084e07146293

Observation ae60e436-b451-4091-a94c-029ee8c39d83 · outbound

This paper cites Available: https://arxiv.org/abs/2603.10163.

FlowGuard: From Signals to Evidence for MCP Security Detection Available: https://arxiv.org/abs/2603.10163

Reference 2026

Resolution
unresolved
no resolver link, observed 2026-08-02T01:12:23.853582Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T01:12:23.853582Z digest=sha256:88af254b69d370051c0c8ff1235957f652bb77f0b6ca49ec91aebefc284bdef6

Pith citing papers

No inbound Pith citation observations are available.