{"id":"https://openalex.org/W7208735451","doi":"https://doi.org/10.5281/zenodo.22305899","title":"MCP Servers in Agentic AI - Architecture, Adoption, and Security of the Model Context Protocol","display_name":"MCP Servers in Agentic AI - Architecture, Adoption, and Security of the Model Context Protocol","publication_year":2026,"publication_date":"2026-09-02","ids":{"openalex":"https://openalex.org/W7208735451","doi":"https://doi.org/10.5281/zenodo.22305899"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.22305899","doi":"https://doi.org/10.5281/zenodo.22305899","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22305899","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"volume":null,"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.22305899","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119804558","display_name":"Deepthi Rajagopal","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I123946342","display_name":"Binghamton University","ror":"https://ror.org/008rmbt77","country_code":"US","type":"education","lineage":["https://openalex.org/I123946342"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Rajagopal, Deepthi","raw_affiliation_strings":["Binghamton University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Binghamton University","institution_ids":["https://openalex.org/I123946342"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5119804558"],"corresponding_institution_ids":["https://openalex.org/I123946342"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8026999831199646,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8026999831199646,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13904","display_name":"Artificial Intelligence Applications","score":0.06790000200271606,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.024900000542402267,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/model-context-protocol","display_name":"Model Context Protocol","score":0.9990000128746033},{"id":"https://openalex.org/keywords/agentic-ai","display_name":"agentic AI","score":0.8970000147819519},{"id":"https://openalex.org/keywords/llm-based-agents","display_name":"LLM agents","score":0.7020000219345093},{"id":"https://openalex.org/keywords/tool-integration","display_name":"tool integration","score":0.41200000047683716},{"id":"https://openalex.org/keywords/tool-poisoning","display_name":"tool poisoning","score":0.7900000214576721},{"id":"https://openalex.org/keywords/prompt-injection","display_name":"prompt injection","score":0.8209999799728394},{"id":"https://openalex.org/keywords/ai-coding-tools","display_name":"AI coding tools","score":0.7229999899864197},{"id":"https://openalex.org/keywords/protocol-security","display_name":"protocol security","score":0.5590000152587891},{"id":"https://openalex.org/keywords/open-standards","display_name":"open standards","score":0.36899998784065247}],"concepts":[{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.8695999979972839},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7646999955177307},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5659999847412109},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5424000024795532},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5411999821662903},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39890000224113464},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.33399999141693115},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.30070000886917114},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.29670000076293945},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.29089999198913574},{"id":"https://openalex.org/C2778348673","wikidata":"https://www.wikidata.org/wiki/Q739302","display_name":"Production (economics)","level":2,"score":0.28769999742507935},{"id":"https://openalex.org/C38677869","wikidata":"https://www.wikidata.org/wiki/Q724168","display_name":"Petri net","level":2,"score":0.287200003862381},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.27869999408721924},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.27399998903274536},{"id":"https://openalex.org/C183322885","wikidata":"https://www.wikidata.org/wiki/Q17007702","display_name":"Context model","level":3,"score":0.272599995136261},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.27230000495910645},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.2696000039577484},{"id":"https://openalex.org/C164554305","wikidata":"https://www.wikidata.org/wiki/Q71550","display_name":"Application server","level":2,"score":0.2540999948978424}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.22305899","doi":"https://doi.org/10.5281/zenodo.22305899","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22305899","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.22305900","doi":"https://doi.org/10.5281/zenodo.22305900","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22305900","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.5281/zenodo.22305899","doi":"https://doi.org/10.5281/zenodo.22305899","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22305899","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"id":"https://metadata.un.org/sdg/15","display_name":"Life on land","score":0.4324604868888855}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7223461795","https://openalex.org/W7172516002","https://openalex.org/W7131898710","https://openalex.org/W4414597551","https://openalex.org/W7126158361","https://openalex.org/W4413807101","https://openalex.org/W7139035971","https://openalex.org/W7160943940","https://openalex.org/W7164181070","https://openalex.org/W7114797566"],"abstract_inverted_index":{"The":[0],"Model":[1],"Context":[2],"Protocol":[3],"(MCP),":[4],"introduced":[5],"by":[6],"Anthropic":[7],"in":[8,113,174],"late":[9],"2024,":[10],"has":[11,49],"emerged":[12],"as":[13,52],"a":[14,53,63,107],"widely":[15],"adopted":[16],"open":[17],"standard":[18],"forconnecting":[19],"large":[20],"language":[21],"model":[22],"(LLM)":[23],"applications":[24],"to":[25,46,106],"external":[26],"tools,":[27,90,150],"data":[28],"sources,":[29],"and":[30,40,92,94,125,143,151,178],"services.":[31],"By":[32],"standardizing":[33],"the":[34,41,78,81,86,95,99,119,126],"interfacebetween":[35],"an":[36,102,179],"AI":[37,76,148],"host":[38],"application":[39],"servers":[42,72,124,172],"that":[43,155],"expose":[44],"capabilities":[45],"it,":[47],"MCP":[48,71,123,161,171],"been":[50],"described":[51],"USB-C-like":[54],"connectorfor":[55],"agentic":[56,75,176],"AI,":[57],"replacing":[58],"bespoke,":[59],"one-off":[60],"integrations":[61],"with":[62,166],"single,":[64],"reusable":[65],"protocol.":[66],"This":[67],"paper":[68],"explains":[69],"how":[70],"work":[73],"within":[74],"systems:":[77],"host-client-server":[79],"architecture,":[80],"JSON-RPC":[82],"2.0":[83],"messaging":[84],"layer,":[85],"core":[87,112],"primitives":[88],"of":[89,98,122,129],"resources,":[91],"prompts,":[93],"rapid":[96],"evolution":[97],"specification":[100],"from":[101],"initial":[103],"local-only":[104],"design":[105],"stateless,":[108],"horizontally":[109],"scalable":[110],"protocol":[111],"its":[114],"2026-07-28":[115],"revision.":[116],"We":[117,164],"review":[118],"growing":[120],"ecosystem":[121],"parallel":[127],"emergence":[128],"complementary":[130],"agent-to-agent":[131],"protocols,":[132],"synthesize":[133],"empirical":[134],"security":[135],"research":[136],"documenting":[137],"tool":[138],"poisoning,":[139],"indirect":[140],"prompt":[141],"injection,":[142],"auto-execution":[144],"vulnerabilities":[145],"across":[146],"production":[147,175],"coding":[149],"summarize":[152],"benchmarking":[153],"efforts":[154],"evaluate":[156],"LLM":[157],"agents":[158],"against":[159],"real-world":[160],"server":[162],"environments.":[163],"conclude":[165],"governance":[167],"guidance":[168],"for":[169,181],"deploying":[170],"safely":[173],"systems":[177],"agenda":[180],"future":[182],"research.":[183]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-09-05T00:00:00"}