A Large-Scale Evolvable Dataset for Model Context Protocol Ecosystem and Security Analysis
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
The Model Context Protocol (MCP) has recently emerged as a standardized interface for connecting language models with external tools and data. As the ecosystem rapidly expands, the lack of a structured, comprehensive view of existing MCP artifacts presents challenges for research. To bridge this gap, we introduce MCPCorpus, a large-scale dataset containing around 14K MCP servers and 300 MCP clients. Each artifact is annotated with 20+ normalized attributes capturing its identity, interface configuration, GitHub activity, and metadata. MCPCorpus provides a reproducible snapshot of the real-world MCP ecosystem, enabling studies of adoption trends, ecosystem health, and implementation diversity. To keep pace with the rapid evolution of the MCP ecosystem, we provide utility tools for automated data synchronization, normalization, and inspection. Furthermore, to support efficient exploration and exploitation, we release a lightweight web-based search interface. MCPCorpus is publicly available at: https://github.com/Snakinya/MCPCorpus.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 5 of its 11 references that are in the map. First posted on arXiv 30 Jun 2025.
Builds on
5 of 11 references.
Closest ancestors · 1
Same direction, newest first
Other references · 4
- 2023A Comprehensive Overview of Large Language Modelscited by 648
- 2025Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directionscited by 265
- 2024LLM With Tools: A Surveycited by 61
- 2024Beyond the Comfort Zone: Emerging Solutions to Overcome Challenges in Integrating LLMs into Software Productscited by 11
Built on by
Citing papers per year: 2025: 3; 2026: 4.
7 papers.
- 2025MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocolscited by 51
- 2025MCP-Flow: Facilitating LLM Agents to Master Real-World, Diverse and Scaling MCP Toolscited by 11
- 2026Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptionscited by 5
- 2025Model Context Protocol for Vision Systems: Audit, Security, and Protocol Extensionscited by 1
- 2026Emerging from Ground: Addressing Intent Deviation in Tool-Using Agents via Deriving Real Calls into Virtual Trajectoriescited by 0
- 2026An Empirical Study of Model Context Protocol Applicationscited by 0
- 2026A Two-Dimensional Study of the Model Context Protocol: Publication and Adoptioncited by 0
- 2026A Two-Dimensional Study of the Model Context Protocol: Publication and Adoption13 Sep 2026
- 2026An Empirical Study of Model Context Protocol Applications28 Jul 2026
- 2026Don't believe everything you read: Understanding and Measuring MCP Behavior under Misleading Tool Descriptions3 Feb 2026
- 2026Emerging from Ground: Addressing Intent Deviation in Tool-Using Agents via Deriving Real Calls into Virtual Trajectories21 Jan 2026
- 2025MCP-Flow: Facilitating LLM Agents to Master Real-World, Diverse and Scaling MCP Tools28 Oct 2025
- 2025Model Context Protocol for Vision Systems: Audit, Security, and Protocol Extensions26 Sep 2025
- 2025MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocols17 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2025A Measurement Study of Model Context Protocol Ecosystem
- 2026A Large-Scale Dataset of MCP Implementations on GitHub
- 2025MCPZoo: A Large-Scale Dataset of Runnable Model Context Protocol Servers for AI Agent
- 2026MCP Server Architecture Patterns for LLM-Integrated Applications
- 2025Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers
- 2025A First Look at the Security Issues in the Model Context Protocol Ecosystem
- 2025Beyond the Protocol: Unveiling Attack Vectors in the Model Context Protocol (MCP) Ecosystem
- 2026Same Name, Different Server: A Security Census of Silent Drift in the Model Context Protocol Ecosystem