{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,2]],"date-time":"2026-10-02T10:31:06Z","timestamp":1790937066007,"version":"4.1.0"},"publisher-location":"New York, NY, USA","reference-count":15,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,4,12]],"date-time":"2026-04-12T00:00:00Z","timestamp":1775952000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,4,12]]},"DOI":"10.1145\/3786160.3788471","type":"proceedings-article","created":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T07:46:16Z","timestamp":1778831176000},"page":"41-48","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["MCP-Scanner: Detecting Security Risks in Model Context Protocol Systems"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0004-9532-5269","authenticated-orcid":false,"given":"Parya","family":"Abadeh","sequence":"first","affiliation":[{"name":"University of Guelph, Guelph, ON, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9037-4687","authenticated-orcid":false,"given":"Martin","family":"Lochner","sequence":"additional","affiliation":[{"name":"eSentire Inc, Waterloo, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-6492-3683","authenticated-orcid":false,"given":"Taha","family":"Ansari","sequence":"additional","affiliation":[{"name":"eSentire Inc, Waterloo, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2102-9190","authenticated-orcid":false,"given":"Fattane","family":"Zarrinkalam","sequence":"additional","affiliation":[{"name":"University of Guelph, Guelph, ON, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,5,15]]},"reference":[{"key":"e_1_3_3_1_2_2","unstructured":"Anthropic. 2024. MCP Documentation. https:\/\/www.anthropic.com\/news\/model-context-protocol."},{"key":"e_1_3_3_1_3_2","unstructured":"Anthropic. 2025. Anthropic Documentation. https:\/\/www.anthropic.com\/news\/model-context-protocol."},{"key":"e_1_3_3_1_4_2","unstructured":"Equixly. 2025. Exuixly Documentation. https:\/\/equixly.com\/blog\/2025\/03\/29\/mcp-server-new-security-nightmare\/."},{"key":"e_1_3_3_1_5_2","unstructured":"Mohammed\u00a0Mehedi Hasan Hao Li Emad Fallahzadeh Bram Adams and Ahmed\u00a0E Hassan. 2025. Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2506.13538 (2025)."},{"key":"e_1_3_3_1_6_2","unstructured":"HiddenLayer. 2025. HiddenLayer Documentation. https:\/\/hiddenlayer.com\/innovation-hub\/exploiting-mcp-tool-parameters\/##Parameters."},{"key":"e_1_3_3_1_7_2","doi-asserted-by":"crossref","unstructured":"Xinyi Hou Yanjie Zhao Shenao Wang and Haoyu Wang. 2025. Model context protocol (mcp): Landscape security threats and future research directions. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2503.23278 (2025).","DOI":"10.1145\/3796519"},{"key":"e_1_3_3_1_8_2","unstructured":"Invariant-Labs. 2025. MCP-Scan. https:\/\/github.com\/invariantlabs-ai\/mcp-scan."},{"key":"e_1_3_3_1_9_2","unstructured":"Invariant-Labs. 2025. MCP-Shield. https:\/\/github.com\/riseandignite\/mcp-shield."},{"key":"e_1_3_3_1_10_2","first-page":"11","volume-title":"Conference on multimedia, interaction, design and innovation","author":"Kalbaliyev Emil","year":"2020","unstructured":"Emil Kalbaliyev and Samir Rustamov. 2020. Text similarity detection using machine learning algorithms with character-based similarity measures. In Conference on multimedia, interaction, design and innovation. Springer, 11\u201319."},{"key":"e_1_3_3_1_11_2","doi-asserted-by":"crossref","unstructured":"Sonu Kumar Anubhav Girdhar Ritesh Patil and Divyansh Tripathi. 2025. Mcp guardian: A security-first layer for safeguarding mcp-based ai system. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2504.12757 (2025).","DOI":"10.2139\/ssrn.5259751"},{"key":"e_1_3_3_1_12_2","unstructured":"LangChain. 2024. LangChain Documentation. https:\/\/python.langchain.com\/docs\/introduction\/."},{"key":"e_1_3_3_1_13_2","unstructured":"LlamaIndex. 2024. LlamaIndex Documentation. https:\/\/www.llamaindex.ai\/."},{"key":"e_1_3_3_1_14_2","unstructured":"Vineeth\u00a0Sai Narajala and Idan Habler. 2025. Enterprise-grade security for the model context protocol (mcp): Frameworks and mitigation strategies. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2504.08623 (2025)."},{"key":"e_1_3_3_1_15_2","unstructured":"OpenAI. 2023. Plugin. https:\/\/openai.com\/index\/chatgpt-plugins\/. Accessed: 2025-06-17."},{"key":"e_1_3_3_1_16_2","unstructured":"Brandon Radosevich and John Halloran. 2025. Mcp safety audit: Llms with the model context protocol allow major security exploits. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2504.03767 (2025)."}],"event":{"name":"EnCyCriS '26: ACM\/IEEE 7th International Workshop on Engineering and Cybersecurity of Critical Systems","location":"Rio de Janeiro Brazil","acronym":"EnCyCriS '26","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS","Faculty of Engineering of University of Porto"]},"container-title":["Proceedings of the 2026 ACM\/IEEE 7th International Workshop on Engineering and Cybersecurity of Critical Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3786160.3788471","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T07:47:21Z","timestamp":1778831241000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3786160.3788471"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,12]]},"references-count":15,"alternative-id":["10.1145\/3786160.3788471","10.1145\/3786160"],"URL":"https:\/\/doi.org\/10.1145\/3786160.3788471","relation":{},"subject":[],"published":{"date-parts":[[2026,4,12]]},"assertion":[{"value":"2026-05-15","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}