{"total":34,"rows":[{"id":"2506.23260","title":"From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows","created":"2025-06-29","cited_by_count":58,"area":"agents"},{"id":"2508.13220","title":"MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocols","created":"2025-08-17","cited_by_count":51,"area":"agents"},{"id":"2507.21206","title":"Agentic Web: Weaving the Next Web with AI Agents","created":"2025-07-28","cited_by_count":45,"area":"agents"},{"id":"2505.11154","title":"MPMA: Preference Manipulation Attack Against Model Context Protocol","created":"2025-05-16","cited_by_count":34,"area":"agents"},{"id":"2505.19301","title":"A Novel Zero-Trust Identity Framework for Agentic AI: Decentralized Authentication and Fine-Grained Access Control","created":"2025-05-25","cited_by_count":28,"area":"agents"},{"id":"2510.21236","title":"AgentBound: Securing Execution Boundaries of AI Agents","created":"2025-10-24","cited_by_count":23,"area":"agents"},{"id":"2508.12538","title":"MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Security","created":"2025-08-18","cited_by_count":21,"area":"agents"},{"id":"2506.02040","title":"Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem","created":"2025-05-31","cited_by_count":19,"area":"agents"},{"id":"2509.21011","title":"Automatic Red Teaming LLM-based Agents with Model Context Protocol Tools","created":"2025-09-25","cited_by_count":18,"area":"agents"},{"id":"2506.15253","title":"RAS-Eval: A Comprehensive Benchmark for Security Evaluation of LLM Agents in Real-World Environments","created":"2025-06-18","cited_by_count":17,"area":"agents"},{"id":"2512.08290","title":"Systematization of Knowledge: Security and Safety in the Model Context Protocol Ecosystem","created":"2025-12-09","cited_by_count":16,"area":"agents"},{"id":"2602.11327","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","created":"2026-02-11","cited_by_count":15,"area":"agents"},{"id":"2512.06556","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","created":"2025-12-06","cited_by_count":13,"area":"agents"},{"id":"2504.16902","title":"Building A Secure Agentic AI Application Leveraging A2A Protocol","created":"2025-04-23","cited_by_count":9,"area":"agents"},{"id":"2509.24240","title":"Takedown: How It's Done in Modern Coding Agent Exploits","created":"2025-09-29","cited_by_count":6,"area":"agents"},{"id":"2509.05755","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","created":"2025-09-06","cited_by_count":5,"area":"agents"},{"id":"2605.14932","title":"Toward Securing AI Agents Like Operating Systems","created":"2026-05-14","cited_by_count":5,"area":"agents"},{"id":"2506.01900","title":"COALESCE: Economic and Security Dynamics of Skill-Based Task Outsourcing Among Team of Autonomous LLM Agents","created":"2025-06-02","cited_by_count":4,"area":"agents"},{"id":"2602.15945","title":"From Tool Orchestration to Code Execution: A Study of MCP Design Choices","created":"2026-02-17","cited_by_count":3,"area":"agents"},{"id":"2604.05969","title":"A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms","created":"2026-04-07","cited_by_count":3,"area":"agents"},{"id":"2603.24203","title":"Invisible Threats from Model Context Protocol: Generating Stealthy Injection Payload via Tree-based Adaptive Search","created":"2026-03-25","cited_by_count":2,"area":"agents"},{"id":"2505.19339","title":"Towards Humanoid Robot Autonomy: A Dynamic Architecture Integrating Continuous thought Machines (CTM) and Model Context Protocol (MCP)","created":"2025-05-25","cited_by_count":1,"area":"agents"},{"id":"2512.14737","title":"Zero-Knowledge Audit for Internet of Agents: Privacy-Preserving Communication Verification with Model Context Protocol","created":"2025-12-11","cited_by_count":1,"area":"agents"},{"id":"2603.01564","title":"From Secure Agentic AI to Secure Agentic Web: Challenges, Threats, and Future Directions","created":"2026-03-02","cited_by_count":1,"area":"agents"},{"id":"2603.10194","title":"MCP-in-SoS: Risk assessment framework for open-source MCP servers","created":"2026-03-10","cited_by_count":1,"area":"agents"},{"id":"2607.19432","title":"ChainWatch: A Kill Chain-Aligned Sequential Detection Framework for Multi-Step Attacks in MCP-Based AI Agent Systems","created":"2026-07-20","cited_by_count":1,"area":"agents"},{"id":"2606.09182","title":"Understanding How Enterprises Adopt the Model Context Protocol for LLM-Driven Software Engineering","created":"2026-06-08","cited_by_count":0,"area":"agents"},{"id":"2606.20573","title":"AONA: A Comprehensive Architecture and Workflow Design for Global Agentic Collaboration","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2607.08288","title":"From Legacy Documentation to OSCAL: An MCP-Based Agent Pipeline for Threat-Informed Continuous Compliance in Critical Infrastructure","created":"2026-07-09","cited_by_count":0,"area":"agents"},{"id":"2608.06130","title":"Hardware Keystores for AI Agent Signing Workflows: A Zero-Trust MCP Enforcement Architecture","created":"2026-08-06","cited_by_count":0,"area":"agents"},{"id":"2608.17275","title":"When Agents Act on Web3: An Attack-Surface Survey of MCP, Skills, and Tool Calling","created":"2026-08-18","cited_by_count":0,"area":"agents"},{"id":"2608.20481","title":"AEGIS: Preventing Cross-Domain Resource Abuse in MCP","created":"2026-08-20","cited_by_count":0,"area":"agents"},{"id":"2608.23763","title":"TrustShiftProbe: Characterizing, Benchmarking, and Defending Staged Trust Attacks on MCP Servers","created":"2026-08-24","cited_by_count":0,"area":"agents"},{"id":"2609.19425","title":"Closed-World Resolution Against Tool Hallucination in LLM Agents","created":"2026-09-16","cited_by_count":0,"area":"agents"}],"next_cursor":null}