mlsanityData to 14 Oct 2026

MCP Guardian: A Security-First Layer for Safeguarding MCP-Based AI System

arXiv 2504.12757 ↗First posted 17 Apr 2025cs.CR cs.AIcited by 28

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

As Agentic AI gain mainstream adoption, the industry invests heavily in model capabilities, achieving rapid leaps in reasoning and quality. However, these systems remain largely confined to data silos, and each new integration requires custom logic that is difficult to scale. The Model Context Protocol (MCP) addresses this challenge by defining a universal, open standard for securely connecting AI-based applications (MCP clients) to data sources (MCP servers). However, the flexibility of the MCP introduces new risks, including malicious tool servers and compromised data integrity. We present MCP Guardian, a framework that strengthens MCP-based communication with authentication, rate-limiting, logging, tracing, and Web Application Firewall (WAF) scanning. Through real-world scenarios and empirical testing, we demonstrate how MCP Guardian effectively mitigates attacks and ensures robust oversight with minimal overheads. Our approach fosters secure, scalable data access for AI assistants, underscoring the importance of a defense-in-depth approach that enables safer and more transparent innovation in AI-driven environments.

Key facts. Cited by 28 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 1 of its 10 references that are in the map. First posted on arXiv 17 Apr 2025.

Builds on

1 of 10 references.

References · 1

  1. 2025Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directionscited by 265

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 15; 2026: 13.

28 papers.

Sort:

By area:

  1. 2025A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasurescited by 57
  2. 2025MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocolscited by 51
  3. 2025We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systemscited by 27
  4. 2025AgentBound: Securing Execution Boundaries of AI Agentscited by 23
  5. 2025MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Securitycited by 21
  6. 2025Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystemcited by 19
  7. 2025MCP-Guard: A Multi-Stage Defense-in-Depth Framework for Securing Model Context Protocol in Agentic AIcited by 19
  8. 2025We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystemscited by 15
  9. 2025MCPGuard : Automatically Detecting Vulnerabilities in MCP Serverscited by 14
  10. 2025AgentMaster: A Multi-Agent Conversational Framework Using A2A and MCP Protocols for Multimodal Information Retrieval and Analysiscited by 13
  11. 2025Alita-G: Self-Evolving Generative Agent for Agent Generationcited by 10
  12. 2025Beyond Data Privacy: New Privacy Risks for Large Language Modelscited by 6
16 more
  1. 2025Takedown: How It's Done in Modern Coding Agent Exploitscited by 6
  2. 2025MCP Safety Training: Learning to Refuse Falsely Benign MCP Exploits using Improved Preference Alignmentcited by 3
  3. 2026MCPShield: A Security Cognition Layer for Adaptive Trust Calibration in Model Context Protocol Agentscited by 3
  4. 2026Invisible Threats from Model Context Protocol: Generating Stealthy Injection Payload via Tree-based Adaptive Searchcited by 2
  5. 2026ADR: An Agentic Detection System for Enterprise Agentic AI Securitycited by 2
  6. 2026ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCPcited by 2
  7. 2026From Secure Agentic AI to Secure Agentic Web: Challenges, Threats, and Future Directionscited by 1
  8. 2026MCP-in-SoS: Risk assessment framework for open-source MCP serverscited by 1
  9. 2026CASCADE: A Component Ablation and Corpus Audit of a Layered Local Defense for MCP-Based Systemscited by 1
  10. 2026TrustedARI: Towards Trust-Native Agentic Routing Infrastructure for Agentic AIcited by 1
  11. 2025ColorEcosystem: Powering Personalized, Standardized, and Trustworthy Agentic Service in massive-agent Ecosystemcited by 0
  12. 2026Training-Free Refusal of MCP Exploits via Retrieval-Augmented Generationcited by 0
  13. 2026Agent System Operations: Categorization, Challenges, and Future Directionscited by 0
  14. 2026When Agents Act on Web3: An Attack-Surface Survey of MCP, Skills, and Tool Callingcited by 0
  15. 2026AEGIS: Preventing Cross-Domain Resource Abuse in MCPcited by 0
  16. 2026TrustShiftProbe: Characterizing, Benchmarking, and Defending Staged Trust Attacks on MCP Serverscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2026A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms
  2. 2025Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies
  3. 2025Securing the Model Context Protocol (MCP): Risks, Controls, and Governance
  4. 2026Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems
  5. 2025MCPZoo: A Large-Scale Dataset of Runnable Model Context Protocol Servers for AI Agent
  6. 2026Compatibility at a Cost: Systematic Discovery and Exploitation of MCP Clause-Compliance Vulnerabilities
  7. 2025MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits
  8. 2026Breaking the Protocol: Security Analysis of the Model Context Protocol Specification and Prompt Injection Vulnerabilities in Tool-Integrated LLM Agents