English
Related papers

Related papers: When MCP Servers Attack: Taxonomy, Feasibility, an…

200 papers

Large language models(LLMs) are increasingly integrated with external systems through the Model Context Protocol(MCP),which standardizes tool invocation and has rapidly become a backbone for LLM-powered applications. While this paradigm…

Cryptography and Security · Computer Science 2026-05-04 Shuli Zhao , Qinsheng Hou , Zihan Zhan , Yanhao Wang , Yuchong Xie , Yu Guo , Libo Chen , Shenghong Li , Zhi Xue

The Model Context Protocol (MCP), introduced by Anthropic in November 2024 and now governed by the Linux Foundation's Agentic AI Foundation, has rapidly become the de facto standard for connecting large language model (LLM)-based agents to…

Cryptography and Security · Computer Science 2026-04-08 Nirajan Acharya , Gaurav Kumar Gupta

Model Context Protocol (MCP) is increasingly adopted for tool-integrated LLM agents, but its multi-layer design and third-party server ecosystem expand risks across tool metadata, untrusted outputs, cross-tool flows, multimodal inputs, and…

Cryptography and Security · Computer Science 2026-04-24 Run Hao , Zhuoran Tan

Agentic AI systems built around large language models (LLMs) are moving away from closed, single-model frameworks and toward open ecosystems that connect a variety of agents, external tools, and resources. The Model Context Protocol (MCP)…

Cryptography and Security · Computer Science 2026-02-03 Xinyi Hou , Shenao Wang , Yifan Zhang , Ziluo Xue , Yanjie Zhao , Cai Fu , Haoyu Wang

As Agentic AI gain mainstream adoption, the industry invests heavily in model capabilities, achieving rapid leaps in reasoning and quality. However, these systems remain largely confined to data silos, and each new integration requires…

Cryptography and Security · Computer Science 2025-05-20 Sonu Kumar , Anubhav Girdhar , Ritesh Patil , Divyansh Tripathi

The Model Context Protocol (MCP), introduced by Anthropic, provides a standardized framework for artificial intelligence (AI) systems to interact with external data sources and tools in real-time. While MCP offers significant advantages for…

Cryptography and Security · Computer Science 2025-05-06 Vineeth Sai Narajala , Idan Habler

The Model Context Protocol (MCP) is a new and emerging technology that extends the functionality of large language models, improving workflows but also exposing users to a new attack surface. Several studies have highlighted related…

Cryptography and Security · Computer Science 2026-04-14 Tobias Mattsson , Samuel Nyberg , Anton Borg , Ricardo Britto

Large Language Models (LLMs) demonstrate strong capabilities in solving complex tasks when integrated with external tools. The Model Context Protocol (MCP) has become a standard interface for enabling such tool-based interactions. However,…

Cryptography and Security · Computer Science 2026-01-23 Jiayi Fu , Yuansen Zhang , Yinggui Wang

The Model Context Protocol (MCP) is an open and standardized interface that enables large language models (LLMs) to interact with external tools and services, and is increasingly adopted by AI agents. However, the security of MCP-based…

Cryptography and Security · Computer Science 2026-03-10 Yuhang Huang , Boyang Ma , Biwei Yan , Xuelong Dai , Yechao Zhang , Minghui Xu , Kaidi Xu , Yue Zhang

The Model Context Protocol (MCP) has emerged as a widely adopted mechanism for connecting large language models to external tools and resources. While MCP promises seamless extensibility and rich integrations, it also introduces a…

Cryptography and Security · Computer Science 2025-07-10 Zhihao Li , Kun Li , Boyang Ma , Minghui Xu , Yue Zhang , Xiuzhen Cheng

The Model Context Protocol (MCP) has emerged as a standard for connecting Large Language Models (LLMs) to external tools and data. However, MCP servers often expose privileged capabilities, such as file system access, network requests, and…

Cryptography and Security · Computer Science 2026-03-24 Charoes Huang , Xin Huang , Amin Milani Fard

The Model Context Protocol (MCP) enables large language models to invoke external tools through natural-language descriptions, forming the foundation of many AI agent applications. However, MCP does not enforce consistency between…

Cryptography and Security · Computer Science 2026-02-04 Zhihao Li , Boyang Ma , Xuelong Dai , Minghui Xu , Yue Zhang , Biwei Yan , Kun Li

As Model Context Protocol (MCP) introduces an easy-to-use ecosystem for users and developers, it also brings underexplored safety risks. Its decentralized architecture, which separates clients and servers, poses unique challenges for…

Computation and Language · Computer Science 2025-09-30 Huihao Jing , Haoran Li , Wenbin Hu , Qi Hu , Heli Xu , Tianshu Chu , Peizhao Hu , Yangqiu Song

By providing a standardized interface for LLM agents to interact with external tools, the Model Context Protocol (MCP) is quickly becoming a cornerstone of the modern autonomous agent ecosystem. However, it creates novel attack surfaces due…

Cryptography and Security · Computer Science 2025-08-22 Zhiqiang Wang , Yichao Gao , Yanting Wang , Suyuan Liu , Haifeng Sun , Haoran Cheng , Guanquan Shi , Haohua Du , Xiangyang Li

Model Context Protocol (MCP) has emerged as a standard interface for connecting LLM agents to external tools. Because MCP servers expose privileged operations such as shell execution, network access, and file-system manipulation to…

Cryptography and Security · Computer Science 2026-05-21 Pengyu Sun , Qishu Jin , Enhao Huang , Zifeng Kang , Xin Liu , Dakun Shen , Song Li

While Large Language Models (LLMs) have achieved remarkable performance, they remain vulnerable to jailbreak. The integration of Large Language Models (LLMs) with external tools via protocols such as the Model Context Protocol (MCP)…

Cryptography and Security · Computer Science 2026-01-09 Wenpeng Xing , Zhonghao Qi , Yupeng Qin , Yilin Li , Caini Chang , Jiahui Yu , Changting Lin , Zhenzhen Xie , Meng Han

This paper identifies and analyzes a novel vulnerability class in Model Context Protocol (MCP) based agent systems. The attack chain describes and demonstrates how benign, individually authorized tasks can be orchestrated to produce harmful…

Cryptography and Security · Computer Science 2025-08-28 David Noever

Model Context Protocol (MCP) have quickly become the interface layer between LLM agents and external tools, yet they also introduce unsafe data flows that existing analyzers handle poorly. Vulnerabilities manifest in two directions:…

Software Engineering · Computer Science 2026-05-11 Xinyi Hou , Yanjie Zhao , Haoyu Wang

The Model Context Protocol (MCP) is rapidly emerging as the middleware for LLM-based applications, offering a standardized interface for tool integration. However, its built-in security mechanisms are minimal: while schemas and declarations…

Cryptography and Security · Computer Science 2025-12-04 Biwei Yan , Yue Zhang , Minghui Xu , Hao Wu , Yechao Zhang , Kun Li , Guoming Zhang , Xiuzhen Cheng

The Model Context Protocol (MCP) is emerging as a common interface connecting large language models (LLMs) with external services. Remote deployments are becoming increasingly important as agents connect to user-linked online services, such…

Cryptography and Security · Computer Science 2026-05-22 Huijun Zhou , Xiaohan Zhang , Haozhe Zhang , Haoyang Zhang , Mi Zhang , Min Yang