{"total":17,"rows":[{"id":"2508.13220","title":"MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocols","created":"2025-08-17","cited_by_count":51,"area":"agents"},{"id":"2603.10749","title":"AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations","created":"2026-03-11","cited_by_count":38,"area":"agents"},{"id":"2512.08290","title":"Systematization of Knowledge: Security and Safety in the Model Context Protocol Ecosystem","created":"2025-12-09","cited_by_count":16,"area":"agents"},{"id":"2602.11327","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","created":"2026-02-11","cited_by_count":15,"area":"agents"},{"id":"2510.23673","title":"MCPGuard : Automatically Detecting Vulnerabilities in MCP Servers","created":"2025-10-27","cited_by_count":14,"area":"agents"},{"id":"2512.06556","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","created":"2025-12-06","cited_by_count":13,"area":"agents"},{"id":"2604.05969","title":"A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms","created":"2026-04-07","cited_by_count":3,"area":"agents"},{"id":"2606.15822","title":"TrustedARI: Towards Trust-Native Agentic Routing Infrastructure for Agentic AI","created":"2026-06-14","cited_by_count":1,"area":"agents"},{"id":"2607.05744","title":"Unicode TAG-Block Concealment of Tool-Metadata Payloads in the Model Context Protocol: An Approval-View Fidelity Gap Across Three Independent Server Implementations","created":"2026-07-07","cited_by_count":0,"area":"agents"},{"id":"2607.08288","title":"From Legacy Documentation to OSCAL: An MCP-Based Agent Pipeline for Threat-Informed Continuous Compliance in Critical Infrastructure","created":"2026-07-09","cited_by_count":0,"area":"agents"},{"id":"2608.17275","title":"When Agents Act on Web3: An Attack-Surface Survey of MCP, Skills, and Tool Calling","created":"2026-08-18","cited_by_count":0,"area":"agents"},{"id":"2608.20481","title":"AEGIS: Preventing Cross-Domain Resource Abuse in MCP","created":"2026-08-20","cited_by_count":0,"area":"agents"},{"id":"2608.30441","title":"ECLIPSE: Self-Evolving Stealthy Prompt Injection Attack against Long-Horizon Agentic Systems","created":"2026-08-31","cited_by_count":0,"area":"agents"},{"id":"2609.19502","title":"Reputation as Community Memory for the Agentic Web","created":"2026-09-16","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.35088","title":"When Valid Tool Calls Change Meaning: Formation-Consistent Dispatch for LLM Agents","created":"2026-09-28","cited_by_count":0,"area":"agents"},{"id":"2610.03089","title":"Securing Computer-Use Agents Against Branch Steering Attacks","created":"2026-10-02","cited_by_count":0,"area":"agents"}],"next_cursor":null}