MCPMark: A Benchmark for Stress-Testing Realistic and Comprehensive MCP Use
Not on the map. Why?
Cited by 30 in LLM agents and tool use, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
MCP standardizes how LLMs interact with external systems, forming the foundation for general agents. However, existing MCP benchmarks remain narrow in scope: they focus on read-heavy tasks or tasks with limited interaction depth, and fail to capture the complexity and realism of real-world workflows. To address this gap, we propose MCPMark, a benchmark designed to evaluate MCP use in a more realistic and comprehensive manner. It consists of 127 high-quality tasks collaboratively created by domain experts and AI agents. Each task begins with a curated initial state and includes a programmatic script for automatic verification. These tasks demand richer and more diverse interactions with the environment, involving a broad range of create, read, update, and delete (CRUD) operations. We conduct a comprehensive evaluation of cutting-edge LLMs using a minimal agent framework that operates in a tool-calling loop. Empirical results show that the best-performing model, gpt-5-medium, reaches only 52.56% pass@1 and 33.86% pass4, while other widely regarded strong models, including claude-sonnet-4 and o3, fall below 30% pass@1 and 15% pass4. On average, LLMs require 16.2 execution turns and 17.4 tool calls per task, significantly surpassing those in previous MCP benchmarks and highlighting the stress-testing nature of MCPMark.
Key facts. Cited by 37 papers in the map (data through 7 Oct 2026). Builds on 29 of its 40 references that are in the map. First posted on arXiv 28 Sep 2025.
Builds on
29 of 40 references.
References · 29
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,072
- 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,064
- 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,655
- 2023Tree of Thoughts: Deliberate Problem Solving with Large Language Modelscited by 3,155
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 1,908
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,906
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,880
- 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,761
- 2024SWE-agent: Agent-Computer Interfaces Enable Automated Software Engineeringcited by 1,628
- 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,348
- 2023Gorilla: Large Language Model Connected with Massive APIscited by 1,302
17 more
- 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domainscited by 1,280
- 2023Mind2Web: Towards a Generalist Agent for the Webcited by 1,210
- 2024OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environmentscited by 1,134
- 2024OpenHands: An Open Platform for AI Software Developers as Generalist Agentscited by 956
- 2025BrowseComp: A Simple Yet Challenging Benchmark for Browsing Agentscited by 616
- 2023AgentVerse: Facilitating Multi-Agent Collaboration and Exploring Emergent Behaviorscited by 580
- 2024Executable Code Actions Elicit Better LLM Agentscited by 537
- 2025PaperBench: Evaluating AI's Ability to Replicate AI Researchcited by 286
- 2025Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directionscited by 257
- 2025DeepResearch Bench: A Comprehensive Benchmark for Deep Research Agentscited by 236
- 2025MCP-Universe: Benchmarking Large Language Models with Real-World Model Context Protocol Serverscited by 89
- 2025MCP-RADAR: A Multi-Dimensional Benchmark for Evaluating Tool Use Capabilities in Large Language Modelscited by 48
- 2025LiveMCPBench: Can Agents Navigate an Ocean of MCP Tools?cited by 47
- 2025MCPWorld: A Unified Benchmarking Testbed for API, GUI, and Hybrid Computer Use Agentscited by 37
- 2025MCPEval: Automatic MCP-based Deep Evaluation for AI Agent Modelscited by 34
- 2025MCP-AgentBench: Evaluating Real-World Language Agent Performance with MCP-Mediated Toolscited by 30
- 2025LiveMCP-101: Stress Testing and Diagnosing MCP-enabled Agents on Challenging Queriescited by 15
Built on by
Citing papers per year: 2025: 3; 2026: 34.
37 papers.
Sort:
By area:
- 2026Kimi K3: Open Frontier Intelligencecited by 99
- 2026MCP-Atlas: A Large-Scale Benchmark for Tool-Use Competency with Real MCP Serverscited by 46
- 2026Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agentscited by 28
- 2026AgencyBench: Benchmarking the Frontiers of Autonomous Agents in 1M-Token Real-World Contextscited by 26
- 2026Qwen-AgentWorld: Language World Models for General Agentscited by 22
- 2026OmniGAIA: Towards Native Omni-Modal AI Agentscited by 21
- 2025TokenCake: A KV-Cache-centric Serving Framework for LLM-based Multi-Agent Applicationscited by 16
- 2026ClawMark: A Living-World Benchmark for Multi-Turn, Multi-Day, Multimodal Coworker Agentscited by 15
- 2026LOCA-bench: Benchmarking Language Agents Under Controllable and Extreme Context Growthcited by 12
- 2026World of Workflows: A Benchmark for Bringing World Models to Enterprise Systemscited by 10
- 2026Agentic Environment Engineering for Large Language Models: A Survey of Environment Modeling, Synthesis, Evaluation, and Applicationcited by 8
- 2026OccuBench: Evaluating AI Agents on Real-World Professional Tasks via Language Environment Simulationcited by 6
25 more
- 2026CodeDelegator: Mitigating Context Pollution via Role Separation in Code-as-Action Agentscited by 4
- 2026From Tool Orchestration to Code Execution: A Study of MCP Design Choicescited by 3
- 2026PHMForge: Evaluating LLM Agents on Industrial Prognostics through MCP-Native, Algorithm-Grounded Toolscited by 3
- 2026ARTIS: Agentic Risk-Aware Test-Time Scaling via Iterative Simulationcited by 2
- 2026Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedbackcited by 2
- 2026One Success Isn't Reliability: Thinkingbox, a Sandbox and Benchmark for Agents in Stateful Business Workflowscited by 2
- 2026PeakBench: Benchmarking Resource-Aware Tool Invocation in LLM Agentscited by 2
- 2026What Makes Good Agentic Data? An ACE Lens on Data Generation for LLM Agentscited by 2
- 2026AgentBrew: Offline Tool-Use Agent Learning from Raw Real-World Trajectoriescited by 2
- 2025EdgeRunner 20B: Military Task Parity with GPT-5 while Running on the Edgecited by 1
- 2025Can LLM Infer Risk Information From MCP Server System Logs?cited by 1
- 2026MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Securitycited by 1
- 2026E-Bench: Benchmarking Multi-Step Tool-Use Agents in Real-World Product Scenarioscited by 1
- 2026Hidden in Plain Sight: Benchmarking Agent Safety Against Decomposition Attacks with DECOMPBENCHcited by 0
- 2026Autonomous Event-Driven Multi-Agent Orchestration for Enterprise AI at Scalecited by 0
- 2026Learning with a Single Rollout via Monte Carlo Pass@k Criticcited by 0
- 2026ToolAtlas: Learning Once, Reusing Everywhere with Tool-Side Memorycited by 0
- 2026Nanbeige4.2-3B on Apple Silicon: Fixing Deployment Bugs and Decreasing Looped Transformer Memory Overheadcited by 0
- 2026AgentMercury: Your Agent Can Synthesize Verifiable Environments for Business Scenarios at scalecited by 0
- 2026CraftBench-UE: Deterministic Evaluation for Coding Agents in Unreal Enginecited by 0
- 2026Where Does Exactly-Once Live? Model, Harness, and Tool-Contract Effects on Duplicate Side Effects in LLM Agentscited by 0
- 2026Qwen-Planner-Agent: A Closed-Loop AI-for-AI Framework for Real-World Mobile Planner Agentscited by 0
- 2026Beyond Approved Actions: Runtime Validation of Persistent Outcomes in Agent Workflowscited by 0
- 2026On the Behavioral Traits of LLM Agentscited by 0
- 2026ControlScope: Workflow Revision and Reliability in LLM Agentscited by 0
- 2026ControlScope: Workflow Revision and Reliability in LLM Agents28 Sep 2026
- 2026On the Behavioral Traits of LLM Agents26 Sep 2026
- 2026Beyond Approved Actions: Runtime Validation of Persistent Outcomes in Agent Workflows25 Sep 2026
- 2026Qwen-Planner-Agent: A Closed-Loop AI-for-AI Framework for Real-World Mobile Planner Agents24 Sep 2026
- 2026Where Does Exactly-Once Live? Model, Harness, and Tool-Contract Effects on Duplicate Side Effects in LLM Agents24 Sep 2026
- 2026CraftBench-UE: Deterministic Evaluation for Coding Agents in Unreal Engine19 Sep 2026
- 2026AgentBrew: Offline Tool-Use Agent Learning from Raw Real-World Trajectories5 Sep 2026
- 2026What Makes Good Agentic Data? An ACE Lens on Data Generation for LLM Agents27 Aug 2026
- 2026PeakBench: Benchmarking Resource-Aware Tool Invocation in LLM Agents25 Aug 2026
- 2026AgentMercury: Your Agent Can Synthesize Verifiable Environments for Business Scenarios at scale21 Aug 2026
- 2026One Success Isn't Reliability: Thinkingbox, a Sandbox and Benchmark for Agents in Stateful Business Workflows20 Aug 2026
- 2026Nanbeige4.2-3B on Apple Silicon: Fixing Deployment Bugs and Decreasing Looped Transformer Memory Overhead14 Aug 2026
25 more
- 2026Kimi K3: Open Frontier Intelligence27 Jul 2026
- 2026E-Bench: Benchmarking Multi-Step Tool-Use Agents in Real-World Product Scenarios26 Jul 2026
- 2026ToolAtlas: Learning Once, Reusing Everywhere with Tool-Side Memory13 Jul 2026
- 2026Learning with a Single Rollout via Monte Carlo Pass@k Critic24 Jun 2026
- 2026Qwen-AgentWorld: Language World Models for General Agents23 Jun 2026
- 2026Autonomous Event-Driven Multi-Agent Orchestration for Enterprise AI at Scale18 Jun 2026
- 2026Hidden in Plain Sight: Benchmarking Agent Safety Against Decomposition Attacks with DECOMPBENCH12 Jun 2026
- 2026Agentic Environment Engineering for Large Language Models: A Survey of Environment Modeling, Synthesis, Evaluation, and Application10 Jun 2026
- 2026Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback17 May 2026
- 2026ClawMark: A Living-World Benchmark for Multi-Turn, Multi-Day, Multimodal Coworker Agents26 Apr 2026
- 2026OccuBench: Evaluating AI Agents on Real-World Professional Tasks via Language Environment Simulation13 Apr 2026
- 2026MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security8 Apr 2026
- 2026PHMForge: Evaluating LLM Agents on Industrial Prognostics through MCP-Native, Algorithm-Grounded Tools2 Apr 2026
- 2026OmniGAIA: Towards Native Omni-Modal AI Agents26 Feb 2026
- 2026From Tool Orchestration to Code Execution: A Study of MCP Design Choices17 Feb 2026
- 2026Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents13 Feb 2026
- 2026LOCA-bench: Benchmarking Language Agents Under Controllable and Extreme Context Growth8 Feb 2026
- 2026ARTIS: Agentic Risk-Aware Test-Time Scaling via Iterative Simulation2 Feb 2026
- 2026MCP-Atlas: A Large-Scale Benchmark for Tool-Use Competency with Real MCP Servers31 Jan 2026
- 2026World of Workflows: A Benchmark for Bringing World Models to Enterprise Systems29 Jan 2026
- 2026CodeDelegator: Mitigating Context Pollution via Role Separation in Code-as-Action Agents21 Jan 2026
- 2026AgencyBench: Benchmarking the Frontiers of Autonomous Agents in 1M-Token Real-World Contexts16 Jan 2026
- 2025Can LLM Infer Risk Information From MCP Server System Logs?8 Nov 2025
- 2025EdgeRunner 20B: Military Task Parity with GPT-5 while Running on the Edge30 Oct 2025
- 2025TokenCake: A KV-Cache-centric Serving Framework for LLM-based Multi-Agent Applications21 Oct 2025
- 2026Kimi K3: Open Frontier Intelligencecited by 99
- 2026MCP-Atlas: A Large-Scale Benchmark for Tool-Use Competency with Real MCP Serverscited by 46
- 2026Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agentscited by 28
- 2026AgencyBench: Benchmarking the Frontiers of Autonomous Agents in 1M-Token Real-World Contextscited by 26
- 2026OmniGAIA: Towards Native Omni-Modal AI Agentscited by 21
- 2026ClawMark: A Living-World Benchmark for Multi-Turn, Multi-Day, Multimodal Coworker Agentscited by 15
- 2026LOCA-bench: Benchmarking Language Agents Under Controllable and Extreme Context Growthcited by 12
- 2026Agentic Environment Engineering for Large Language Models: A Survey of Environment Modeling, Synthesis, Evaluation, and Applicationcited by 8
- 2026OccuBench: Evaluating AI Agents on Real-World Professional Tasks via Language Environment Simulationcited by 6
- 2026CodeDelegator: Mitigating Context Pollution via Role Separation in Code-as-Action Agentscited by 4
- 2026From Tool Orchestration to Code Execution: A Study of MCP Design Choicescited by 3
- 2026PHMForge: Evaluating LLM Agents on Industrial Prognostics through MCP-Native, Algorithm-Grounded Toolscited by 3
12 most cited of 28 All 28 (JSON)
- 2026ControlScope: Workflow Revision and Reliability in LLM Agents28 Sep 2026
- 2026On the Behavioral Traits of LLM Agents26 Sep 2026
- 2026Beyond Approved Actions: Runtime Validation of Persistent Outcomes in Agent Workflows25 Sep 2026
- 2026Qwen-Planner-Agent: A Closed-Loop AI-for-AI Framework for Real-World Mobile Planner Agents24 Sep 2026
- 2026Where Does Exactly-Once Live? Model, Harness, and Tool-Contract Effects on Duplicate Side Effects in LLM Agents24 Sep 2026
- 2026CraftBench-UE: Deterministic Evaluation for Coding Agents in Unreal Engine19 Sep 2026
- 2026AgentBrew: Offline Tool-Use Agent Learning from Raw Real-World Trajectories5 Sep 2026
- 2026What Makes Good Agentic Data? An ACE Lens on Data Generation for LLM Agents27 Aug 2026
- 2026PeakBench: Benchmarking Resource-Aware Tool Invocation in LLM Agents25 Aug 2026
- 2026One Success Isn't Reliability: Thinkingbox, a Sandbox and Benchmark for Agents in Stateful Business Workflows20 Aug 2026
- 2026Nanbeige4.2-3B on Apple Silicon: Fixing Deployment Bugs and Decreasing Looped Transformer Memory Overhead14 Aug 2026
- 2026Kimi K3: Open Frontier Intelligence27 Jul 2026
12 newest of 28 All 28 (JSON)
- 2025EdgeRunner 20B: Military Task Parity with GPT-5 while Running on the Edgecited by 1
- 2026Autonomous Event-Driven Multi-Agent Orchestration for Enterprise AI at Scalecited by 0
- 2026Learning with a Single Rollout via Monte Carlo Pass@k Criticcited by 0
- 2026AgentMercury: Your Agent Can Synthesize Verifiable Environments for Business Scenarios at scalecited by 0
- 2026AgentMercury: Your Agent Can Synthesize Verifiable Environments for Business Scenarios at scale21 Aug 2026
- 2026Learning with a Single Rollout via Monte Carlo Pass@k Critic24 Jun 2026
- 2026Autonomous Event-Driven Multi-Agent Orchestration for Enterprise AI at Scale18 Jun 2026
- 2025EdgeRunner 20B: Military Task Parity with GPT-5 while Running on the Edge30 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2025MCP-Bench: Benchmarking Tool-Using LLM Agents with Complex Real-World Tasks via MCP Servers
- 2026MCPEvol-Bench: Benchmarking LLM Agent Performance Across Dynamic Evolutions of MCP Servers
- 2026MCP-GRANITE Benchmark: GRANularity Interface TEsting for MCP-Based LLM Agents
- 2025MCPAgentBench: A Real-world Task Benchmark for Evaluating LLM Agent MCP Tool Use
- 2026DynamicMCPBench: A Trace-Grounded, Effect-Scored Benchmark for LLM Agents over Live MCP Servers
- 2026AgentPerfBench: A Benchmarking and Evaluation Suite for Inference Performance of Agentic LLMs
- 2026ComplexMCP: Evaluation of LLM Agents in Dynamic, Interdependent, and Large-Scale Tool Sandbox
- 2025MCP-Flow: Facilitating LLM Agents to Master Real-World, Diverse and Scaling MCP Tools