arXiv AI By Daeyeon Son

Governed MCP: Kernel-Level Tool Governance for AI Agents via Logit-Based Safety Primitives

Read the original on arXiv AI →

arXiv:2604. 16870v2 Announce Type: replace-cross Abstract: AI agents increasingly call external tools (file system, network, APIs) through the Model Context Protocol (MCP).

Summary generated by The Flow from the publisher's feed. The full article lives at arXiv AI.

arXiv AI
Jul 7

Securing Multi-Tool AI Agent Chains With Dynamic, Real-Time Compositional Policies

arXiv:2607. 03423v1 Announce Type: cross Abstract: Modern AI agent implementations such as frontier coding agents chain multiple tools at runtime that create a security surface that per-tool guardrails are unable to address, as individually permitted tools can violate organizational policies when composed.

By Chris Schneider, Kriti Faujdar, Philipp Schoenegger, Ben Bariach
arXiv AI
Jun 2

Attested Tool-Server Admission: A Security Extension to the Model Context Protocol

arXiv:2605. 24248v2 Announce Type: replace-cross Abstract: The Model Context Protocol (MCP) standardizes how a large-language-model (LLM) agent and an external tool server exchange messages, but not trust: a host reads a server's self-declared tool list and dispatches calls, with no notion of which servers it may use, at what sensitivity, or which of a server's tools are in bounds.

By Alfredo Metere