{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:KQOFGD5V3PB75A4MQXMBY7H6EK","short_pith_number":"pith:KQOFGD5V","canonical_record":{"source":{"id":"2504.08623","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-11T15:25:58Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ad577ceb5151b00f5885fea7014986fe2a2a0abdbfb6d28a6a927e1cb2f00b51","abstract_canon_sha256":"aecf787196686545d0d28b58de38d88874d925e5b67d70c7956f663c68c0245d"},"schema_version":"1.0"},"canonical_sha256":"541c530fb5dbc3fe838c85d81c7cfe2298486b2bbfa9929bbd26f1f232f5cc35","source":{"kind":"arxiv","id":"2504.08623","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.08623","created_at":"2026-07-05T10:57:56Z"},{"alias_kind":"arxiv_version","alias_value":"2504.08623v2","created_at":"2026-07-05T10:57:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.08623","created_at":"2026-07-05T10:57:56Z"},{"alias_kind":"pith_short_12","alias_value":"KQOFGD5V3PB7","created_at":"2026-07-05T10:57:56Z"},{"alias_kind":"pith_short_16","alias_value":"KQOFGD5V3PB75A4M","created_at":"2026-07-05T10:57:56Z"},{"alias_kind":"pith_short_8","alias_value":"KQOFGD5V","created_at":"2026-07-05T10:57:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:KQOFGD5V3PB75A4MQXMBY7H6EK","target":"record","payload":{"canonical_record":{"source":{"id":"2504.08623","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-11T15:25:58Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"ad577ceb5151b00f5885fea7014986fe2a2a0abdbfb6d28a6a927e1cb2f00b51","abstract_canon_sha256":"aecf787196686545d0d28b58de38d88874d925e5b67d70c7956f663c68c0245d"},"schema_version":"1.0"},"canonical_sha256":"541c530fb5dbc3fe838c85d81c7cfe2298486b2bbfa9929bbd26f1f232f5cc35","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:57:56.735594Z","signature_b64":"a7AB55+POprckPSeVqHfp++JDZppTpdbXtP3u7ATG8jcrNVFKMdUIH8etW36erEjElWvGL55QB4wCyB+rK9KCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"541c530fb5dbc3fe838c85d81c7cfe2298486b2bbfa9929bbd26f1f232f5cc35","last_reissued_at":"2026-07-05T10:57:56.735049Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:57:56.735049Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.08623","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:57:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JgjEfCiAeNNIoqAt6wHnkH5fUCj3CAPmz2wg3TExSbtyU/vQWKobUIh/jizwTDZq+LtAuYpdG1neRwMyUV/rAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-14T05:20:02.569365Z"},"content_sha256":"0ae73463e96f6465b64e8a634dca2ddbb5df62e179138fd93e095d378279efd8","schema_version":"1.0","event_id":"sha256:0ae73463e96f6465b64e8a634dca2ddbb5df62e179138fd93e095d378279efd8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:KQOFGD5V3PB75A4MQXMBY7H6EK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Idan Habler, Vineeth Sai Narajala","submitted_at":"2025-04-11T15:25:58Z","abstract_excerpt":"The Model Context Protocol (MCP), introduced by Anthropic, provides a standardized framework for artificial intelligence (AI) systems to interact with external data sources and tools in real-time. While MCP offers significant advantages for AI integration and capability extension, it introduces novel security challenges that demand rigorous analysis and mitigation. This paper builds upon foundational research into MCP architecture and preliminary security assessments to deliver enterprise-grade mitigation frameworks and detailed technical implementation strategies. Through systematic threat mo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.08623","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.08623/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:57:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"54L8CTwxgdOP3o4GR0hgN32f185OBjTJE7SdAD3Kvq/LikUcMAD+sDy4ym/Q5ok4CreCaoOq5mO58n1hMIwSDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-14T05:20:02.569740Z"},"content_sha256":"f9be040e2f2373dafb4d48023df575c2bee8be0ed594273a384ce9a092d205b4","schema_version":"1.0","event_id":"sha256:f9be040e2f2373dafb4d48023df575c2bee8be0ed594273a384ce9a092d205b4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KQOFGD5V3PB75A4MQXMBY7H6EK/bundle.json","state_url":"https://pith.science/pith/KQOFGD5V3PB75A4MQXMBY7H6EK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KQOFGD5V3PB75A4MQXMBY7H6EK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-14T05:20:02Z","links":{"resolver":"https://pith.science/pith/KQOFGD5V3PB75A4MQXMBY7H6EK","bundle":"https://pith.science/pith/KQOFGD5V3PB75A4MQXMBY7H6EK/bundle.json","state":"https://pith.science/pith/KQOFGD5V3PB75A4MQXMBY7H6EK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KQOFGD5V3PB75A4MQXMBY7H6EK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:KQOFGD5V3PB75A4MQXMBY7H6EK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"aecf787196686545d0d28b58de38d88874d925e5b67d70c7956f663c68c0245d","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-11T15:25:58Z","title_canon_sha256":"ad577ceb5151b00f5885fea7014986fe2a2a0abdbfb6d28a6a927e1cb2f00b51"},"schema_version":"1.0","source":{"id":"2504.08623","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.08623","created_at":"2026-07-05T10:57:56Z"},{"alias_kind":"arxiv_version","alias_value":"2504.08623v2","created_at":"2026-07-05T10:57:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.08623","created_at":"2026-07-05T10:57:56Z"},{"alias_kind":"pith_short_12","alias_value":"KQOFGD5V3PB7","created_at":"2026-07-05T10:57:56Z"},{"alias_kind":"pith_short_16","alias_value":"KQOFGD5V3PB75A4M","created_at":"2026-07-05T10:57:56Z"},{"alias_kind":"pith_short_8","alias_value":"KQOFGD5V","created_at":"2026-07-05T10:57:56Z"}],"graph_snapshots":[{"event_id":"sha256:f9be040e2f2373dafb4d48023df575c2bee8be0ed594273a384ce9a092d205b4","target":"graph","created_at":"2026-07-05T10:57:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.08623/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The Model Context Protocol (MCP), introduced by Anthropic, provides a standardized framework for artificial intelligence (AI) systems to interact with external data sources and tools in real-time. While MCP offers significant advantages for AI integration and capability extension, it introduces novel security challenges that demand rigorous analysis and mitigation. This paper builds upon foundational research into MCP architecture and preliminary security assessments to deliver enterprise-grade mitigation frameworks and detailed technical implementation strategies. Through systematic threat mo","authors_text":"Idan Habler, Vineeth Sai Narajala","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-11T15:25:58Z","title":"Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.08623","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0ae73463e96f6465b64e8a634dca2ddbb5df62e179138fd93e095d378279efd8","target":"record","created_at":"2026-07-05T10:57:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"aecf787196686545d0d28b58de38d88874d925e5b67d70c7956f663c68c0245d","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-11T15:25:58Z","title_canon_sha256":"ad577ceb5151b00f5885fea7014986fe2a2a0abdbfb6d28a6a927e1cb2f00b51"},"schema_version":"1.0","source":{"id":"2504.08623","kind":"arxiv","version":2}},"canonical_sha256":"541c530fb5dbc3fe838c85d81c7cfe2298486b2bbfa9929bbd26f1f232f5cc35","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"541c530fb5dbc3fe838c85d81c7cfe2298486b2bbfa9929bbd26f1f232f5cc35","first_computed_at":"2026-07-05T10:57:56.735049Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:57:56.735049Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"a7AB55+POprckPSeVqHfp++JDZppTpdbXtP3u7ATG8jcrNVFKMdUIH8etW36erEjElWvGL55QB4wCyB+rK9KCA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:57:56.735594Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.08623","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0ae73463e96f6465b64e8a634dca2ddbb5df62e179138fd93e095d378279efd8","sha256:f9be040e2f2373dafb4d48023df575c2bee8be0ed594273a384ce9a092d205b4"],"state_sha256":"793b4ba3f430107e5c065e9464c95aa7035d438a64478d715a2b6cfe1dc88c93"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JVvrCRBS3F+12GS3lLYbQBuzM1DMwCNJ5EBUfyBD7KLdWNhlL1C9s14GBV+p/U+urZsu9t8vWMrFxtwWMfI2DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-14T05:20:02.571857Z","bundle_sha256":"967fd5a8a181f2080eef6842728e2d54f89eadc7c41fe570a48c6e9892eb8334"}}