arXiv AI By Shriti Priya, Teryl Taylor, Frederico Araujo

AEGIS: Preventing Cross-Domain Resource Abuse in MCP

Read the original on arXiv AI →

AEGIS is a policy enforcement component designed to prevent resource abuse in the Model Context Protocol (MCP), an open‑source JSON‑RPC protocol that allows large language models to interact with external systems via tools. By leveraging large language models to analyze, categorize, and normalize diverse tool invocations across text, images, video, and location modalities, AEGIS provides administrators with fine‑grained safeguards that can be enforced through the Open Policy Agent and ContextForge AI Gateway. This approach enables detection and mitigation of abusive behaviors—such as excessively large search requests or long video calls—while maintaining the flexibility of MCP‑based agent ecosystems.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

arXiv AI
Jun 16

MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks

arXiv:2602. 09222v2 Announce Type: replace-cross Abstract: Large language model (LLM) based web agents are increasingly deployed to automate complex online tasks by directly interacting with web sites and performing actions on users' behalf.

By Georgios Syros, Evan Rose, Brian Grinstead, Christoph Kerschbaumer, William Robertson, Cristina Nita-Rotaru, Alina Oprea
arXiv AI
Aug 26

TrustShiftProbe: Characterizing, Benchmarking, and Defending Staged Trust Attacks on MCP Servers

The paper introduces TrustShiftProbe, a framework that characterizes and defends against staged trust attacks on Model Context Protocol (MCP) servers. It defines a temporal threat model where a compromised server behaves benignly during conditioning and later delivers adversarial payloads, and presents a multi‑tier runtime defense called SHIELD that reduces attack success from 69.5% to 42.7%. The work also provides a taxonomy of nine TrustShift variants across different execution mechanisms and objectives.

By Mehrdad Rostamzadeh, Sidhant Narula, Mohammad Ghasemigol, Daniel Takabi