{"id":"https://openalex.org/W7224377331","doi":"https://doi.org/10.5281/zenodo.23752412","title":"MCP Safety: Measuring Useful Action across Tool Trust Boundaries","display_name":"MCP Safety: Measuring Useful Action across Tool Trust Boundaries","publication_year":2026,"publication_date":"2026-10-29","ids":{"openalex":"https://openalex.org/W7224377331","doi":"https://doi.org/10.5281/zenodo.23752412"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.23752412","doi":"https://doi.org/10.5281/zenodo.23752412","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23752412","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"volume":null,"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.23752412","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5158865149","display_name":"Pooria Arab","orcid":"https://orcid.org/0009-0005-9964-6841","observed_orcids":["https://orcid.org/0009-0005-9964-6841"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Pooria Arab","raw_affiliation_strings":["Independent researcher"],"raw_orcid":"https://orcid.org/0009-0005-9964-6841","affiliations":[{"raw_affiliation_string":"Independent researcher","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5158865149"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5512999892234802,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5512999892234802,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.15379999577999115,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.10429999977350235,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/tool-safety","display_name":"tool safety","score":0.5479999780654907},{"id":"https://openalex.org/keywords/trust-boundaries","display_name":"trust boundaries","score":0.7910000085830688},{"id":"https://openalex.org/keywords/malicious-attack-detection","display_name":"malicious attack detection","score":0.367000013589859},{"id":"https://openalex.org/keywords/deterministic-replay","display_name":"deterministic replay","score":0.527999997138977}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6389999985694885},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.6363999843597412},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.5791000127792358},{"id":"https://openalex.org/C2908647359","wikidata":"https://www.wikidata.org/wiki/Q2625603","display_name":"Population","level":2,"score":0.5613999962806702},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.48809999227523804},{"id":"https://openalex.org/C18555067","wikidata":"https://www.wikidata.org/wiki/Q8375051","display_name":"Joint (building)","level":2,"score":0.4341000020503998},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.41920000314712524},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.400299996137619},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3919000029563904},{"id":"https://openalex.org/C98184364","wikidata":"https://www.wikidata.org/wiki/Q1780131","display_name":"Argument (complex analysis)","level":2,"score":0.3750999867916107},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3303000032901764},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.3264000117778778},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.3010999858379364},{"id":"https://openalex.org/C2778334786","wikidata":"https://www.wikidata.org/wiki/Q1586270","display_name":"Variation (astronomy)","level":2,"score":0.27219998836517334},{"id":"https://openalex.org/C2779545769","wikidata":"https://www.wikidata.org/wiki/Q5135364","display_name":"Closeness","level":2,"score":0.260699987411499},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.25949999690055847},{"id":"https://openalex.org/C44280652","wikidata":"https://www.wikidata.org/wiki/Q104837","display_name":"Phase (matter)","level":2,"score":0.25780001282691956},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2517000138759613}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.23752412","doi":"https://doi.org/10.5281/zenodo.23752412","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23752412","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.23752413","doi":"https://doi.org/10.5281/zenodo.23752413","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23752413","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.5281/zenodo.23752412","doi":"https://doi.org/10.5281/zenodo.23752412","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23752412","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7166724583","https://openalex.org/W7155100997","https://openalex.org/W7129222944","https://openalex.org/W7214126280","https://openalex.org/W7128702750","https://openalex.org/W7203995855","https://openalex.org/W7155503413","https://openalex.org/W7117244050","https://openalex.org/W7219774259","https://openalex.org/W7168235978"],"abstract_inverted_index":{"MCP":[0,11],"tools":[1],"expose":[2],"descriptions,":[3],"returned":[4],"content,":[5],"and":[6,44,127],"actions":[7],"across":[8,36],"trust":[9],"boundaries.":[10],"Safety":[12],"measures":[13],"whether":[14],"an":[15],"agent":[16],"completes":[17,77],"a":[18,128],"requested":[19,111],"lookup":[20],"without":[21],"forbidden":[22],"calls":[23],"or":[24,134],"literal":[25],"canary":[26],"disclosure.":[27],"Its":[28],"40":[29],"synthetic":[30],"tasks":[31],"form":[32],"20":[33],"benign/malicious":[34],"pairs":[35],"6":[37],"attack":[38,104],"categories.":[39],"Deterministic":[40],"replay":[41],"scores":[42],"safety":[43],"usefulness":[45],"separately,":[46],"then":[47],"requires":[48],"both":[49,107],"for":[50],"success.":[51,87],"In":[52],"560":[53],"local":[54],"scripted":[55],"episodes,":[56],"the":[57,78],"privileged":[58],"good":[59],"control":[60,76],"achieves":[61,81],"100.0":[62],"[83.9,":[63],"100.0]":[64],"percent":[65,85],"joint":[66,86],"success":[67],"in":[68],"each":[69],"stratum":[70],"(95%":[71],"Wilson":[72],"intervals).":[73],"The":[74],"bad":[75],"work":[79],"but":[80],"0.0":[82],"[0.0,":[83],"16.1]":[84],"An":[88],"additional":[89],"16000-episode":[90],"simulated":[91,103],"population":[92],"sweep":[93],"separates":[94],"argument":[95],"filtering":[96,119],"from":[97],"task-aware":[98],"action":[99],"filtering.":[100],"At":[101],"maximal":[102],"following,":[105],"combining":[106],"filters":[108],"preserves":[109],"all":[110],"work;":[112],"either":[113],"filter":[114],"alone":[115],"leaves":[116],"failures.":[117],"Blanket":[118],"loses":[120],"legitimate":[121],"work.":[122],"These":[123],"are":[124],"diagnostic":[125],"controls":[126],"stipulated":[129],"simulation,":[130],"not":[131],"learned-model":[132],"results":[133],"evidence":[135],"of":[136],"deployment":[137],"security.":[138]},"counts_by_year":[],"updated_date":"2026-10-31T12:09:11.096373","created_date":"2026-10-30T00:00:00"}