English
Related papers

Related papers: Beyond the Protocol: Unveiling Attack Vectors in t…

200 papers

The increased adoption of the Model Context Protocol (MCP) for AI Agents necessitates robust security for Enterprise integrations. This paper introduces the MCP Gateway to simplify self-hosted MCP server integration. The proposed…

Cryptography and Security · Computer Science 2025-04-29 Ivo Brett

The rapid development of LLMs coupled with the introduction of Model Context Protocol (MCP) has revolutionized how intelligent agents interact with APIs through deterministic and structured methods \cite{ModelContextProtocolIntro2025}.…

Software Engineering · Computer Science 2026-05-28 Aditya Pujara , Xiaogang Zhu , Hsiang-Ting Chen

Large Language Models (LLMs) consume vast quantities of human-generated content for both training and real-time inference, yet the creators of that content remain largely invisible in the value chain. Existing approaches to data attribution…

Cryptography and Security · Computer Science 2026-03-31 Praneel Panchigar , Torlach Rush , Matthew Canabarro

LLM agents are beginning to invoke industrial asset-management tools through the Model Context Protocol (MCP), yet whether they can act reliably on this substrate for safety-critical \emph{Prognostics and Health Management (PHM)} is…

Artificial Intelligence · Computer Science 2026-05-12 Tianjun Feng , Yunfeng Chen , Chun-Yi Tsai , Yihan Sun , Ayan Das , Kaoutar El Maghraoui , Shuxin Lin , Dhaval Patel

With the rise of LLMs, a large number of Model Context Protocol (MCP) services have emerged since the end of 2024. However, the effectiveness and efficiency of MCP servers have not been well studied. To study these questions, we propose an…

Information Retrieval · Computer Science 2025-04-21 Zhiling Luo , Xiaorong Shi , Xuanrui Lin , Jinyang Gao

MCP standardizes how LLMs interact with external systems, forming the foundation for general agents. However, existing MCP benchmarks remain narrow in scope: they focus on read-heavy tasks or tasks with limited interaction depth, and fail…

The agent--tool interaction loop is a critical attack surface for modern Large Language Model (LLM) agents. Existing denial-of-service (DoS) attacks typically function at the user-prompt or retrieval-augmented generation (RAG) context layer…

Cryptography and Security · Computer Science 2026-03-12 Kaiyu Zhou , Yongsen Zheng , Yicheng He , Meng Xue , Xueluan Gong , Yuji Wang , Xuanye Zhang , Kwok-Yan Lam

Large language models (LLMs) and LLM-based agents have been widely deployed in a wide range of applications in the real world, including healthcare diagnostics, financial analysis, customer support, robotics, and autonomous driving,…

Cryptography and Security · Computer Science 2025-05-20 Wenrui Xu , Keshab K. Parhi

This paper introduces \textbf{FinMCP-Bench}, a novel benchmark for evaluating large language models (LLMs) in solving real-world financial problems through tool invocation of financial model context protocols. FinMCP-Bench contains 613…

Artificial Intelligence · Computer Science 2026-03-27 Jie Zhu , Yimin Tian , Boyang Li , Kehao Wu , Zhongzhi Liang , Junhui Li , Xianyin Zhang , Lifan Guo , Feng Chen , Yong Liu , Chi Zhang

Large Language Model (LLM) agents remain vulnerable to safety threats from the external environment, where attackers inject adversarial content into external observations such as tool-returned data, webpages, or MCP context, causing harmful…

Artificial Intelligence · Computer Science 2026-05-28 Yongxiang Li , Moxin Li , Zhixin Ma , Fengbin Zhu , Dongrui Liu , Wenjie Wang , Fuli Feng

Industrial automation increasingly requires flexible control strategies that can adapt to changing tasks and environments. Agents based on Large Language Models (LLMs) offer potential for such adaptive planning and execution but lack…

Artificial Intelligence · Computer Science 2025-12-04 Niklas Jobs , Luis Miguel Vieira da Silva , Jayanth Somashekaraiah , Maximilian Weigand , David Kube , Felix Gehlhoff

While fine-tuning services drive the rapid expansion of task capabilities in large language models (LLMs), they are often accompanied by the degradation and reorganization of safety-aligned representations, making models more prone to…

Machine Learning · Computer Science 2026-02-02 Bing Han , Feifei Zhao , Dongcheng Zhao , Guobin Shen , Ping Wu , Yu Shi , Yi Zeng

Effective multi-agent systems cannot be designed by selecting prompts or communication graphs in isolation. Agent behavior depends on the information an agent receives, while the usefulness of a communication edge depends on how the…

Artificial Intelligence · Computer Science 2026-05-28 Yi Ding , Zijie Xuan , Haowei Zhou , Zhenyu Ju , Xiaoxiao Dong , Jingwen Zhang , Xingyu Zhu , Leixin Sun , Haochi Zhang

Large language models (LLMs) can now access a wide range of external tools, thanks to the Model Context Protocol (MCP). This greatly expands their abilities as various agents. However, LLMs rely entirely on the text descriptions of tools to…

Artificial Intelligence · Computer Science 2025-09-23 Kazem Faghih , Wenxiao Wang , Yize Cheng , Siddhant Bharti , Gaurang Sriramanan , Sriram Balasubramanian , Parsa Hosseini , Soheil Feizi

AI development environments are evolving into observability first platforms that integrate real time telemetry, prompt traces, and evaluation feedback into the developer workflow. This paper introduces telemetry aware integrated development…

Software Engineering · Computer Science 2025-06-16 Vincent Koc , Jacques Verre , Douglas Blank , Abigail Morgan

Large Language Models (LLMs) face critical challenges when analyzing security vulnerabilities in real world codebases: token limits prevent loading entire repositories, code embeddings fail to capture inter procedural data flows, and LLMs…

Cryptography and Security · Computer Science 2026-03-27 Ahmed Lekssays

The AI agent ecosystem has converged on two protocols: the Model Context Protocol (MCP) for tool invocation and Agent-to-Agent (A2A) for single-principal task delegation. Both assume a single controlling principal, meaning one person or…

Multiagent Systems · Computer Science 2026-04-14 Kaiyang Qian , Xinmin Fang , Zhengxiong Li

As AI agents powered by large language models (LLMs) increasingly use external tools for high-stakes decisions, a critical reliability question arises: how do errors propagate across sequential tool calls? We introduce the first theoretical…

Artificial Intelligence · Computer Science 2026-02-17 Flint Xiaofeng Fan , Cheston Tan , Roger Wattenhofer , Yew-Soon Ong

LLM-based programming assistants offer the promise of programming faster but with the risk of introducing more security vulnerabilities. Prior work has studied how LLMs could be maliciously fine-tuned to suggest vulnerabilities more often.…

Cryptography and Security · Computer Science 2024-07-17 John Heibel , Daniel Lowd

The MCP Solver bridges Large Language Models (LLMs) with symbolic solvers through the Model Context Protocol (MCP), an open-source standard for AI system integration. Providing LLMs access to formal solving and reasoning capabilities…

Artificial Intelligence · Computer Science 2025-04-08 Stefan Szeider