{"total":15,"rows":[{"id":"2602.11327","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","created":"2026-02-11","cited_by_count":15,"area":"agents"},{"id":"2601.07395","title":"MCP-ITP: An Automated Framework for Implicit Tool Poisoning in MCP","created":"2026-01-12","cited_by_count":14,"area":"agents"},{"id":"2512.06556","title":"Semantic Attacks on Tool-Augmented LLMs: Securing the Model Context Protocol Against Descriptor-Level Manipulation","created":"2025-12-06","cited_by_count":13,"area":"agents"},{"id":"2512.06914","title":"SoK: Trust-Authorization Mismatch in LLM Agent Interactions","created":"2025-12-07","cited_by_count":11,"area":"agents"},{"id":"2606.10749","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","created":"2026-06-09","cited_by_count":7,"area":"agents"},{"id":"2602.03580","title":"Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptions","created":"2026-02-03","cited_by_count":5,"area":"agents"},{"id":"2602.14281","title":"MCPShield: A Security Cognition Layer for Adaptive Trust Calibration in Model Context Protocol Agents","created":"2026-02-15","cited_by_count":3,"area":"agents"},{"id":"2603.26221","title":"Clawed and Dangerous: Can We Trust Open Agentic Systems?","created":"2026-03-27","cited_by_count":3,"area":"agents"},{"id":"2605.24069","title":"When the Manual Lies: A Realistic Benchmark to Evaluate MCP Poisoning Attacks for LLM Agents","created":"2026-05-22","cited_by_count":1,"area":"agents"},{"id":"2608.24022","title":"What Guides the Agent? Adjudicating Unauthorized Behavior via Localizing Behavior-Guiding Instructions","created":"2026-08-25","cited_by_count":1,"area":"agents"},{"id":"2606.06387","title":"WebMCP Tool Surface Poisoning: Runtime Manipulation Attacks on LLM Agents","created":"2026-06-04","cited_by_count":0,"area":"agents"},{"id":"2607.05744","title":"Unicode TAG-Block Concealment of Tool-Metadata Payloads in the Model Context Protocol: An Approval-View Fidelity Gap Across Three Independent Server Implementations","created":"2026-07-07","cited_by_count":0,"area":"agents"},{"id":"2607.25297","title":"Hybrid Analysis for Secure MCP Tool Use in LLM Agents","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2609.07360","title":"Scanning the Harness: A Repository Study of Configuration Exposures in AI Coding Agents","created":"2026-09-07","cited_by_count":0,"area":"agents"},{"id":"2609.26761","title":"A2M: Trace-Optimized Agent Hijacking in the MCP Ecosystem","created":"2026-09-22","cited_by_count":0,"area":"agents"}],"next_cursor":null}