MCP Tool Poisoning in Agentic AI Frameworks: A Cross-Framework Measurement Study

Shaikh, Farooq, Montaruli, Biagio

DOI: 10.48550/arxiv.2611.03555
Published: 2026
Container: Not recorded
Publisher: arXiv
Open access: no

Credibility signals

limited evidence Score 41/100 under policy 1.0.0. This is a metadata assessment, not a judgment of the paper's conclusions.

Show all credibility signals

cautionDOI registered: No matching Crossref record was present in this response. Source: Crossref; license: CC0 metadata
cautionDOI resolves: No matching Crossref record was present in this response. Source: Crossref; license: CC0 metadata
not scoredDirectory of Open Access Journals: No matching DOAJ record was present in this response. No allow-list match; this is not evidence of low credibility. Source: DOAJ; license: CC0
not scoredMEDLINE indexed: Not checked or no result supplied; no credibility inference made. Source: No authority result supplied; license: Unknown
not scoredOpenAlex core source: Not checked or no result supplied; no credibility inference made. Source: No authority result supplied; license: Unknown
not scoredKnown publisher allow-list: Not checked or no result supplied; no credibility inference made. Source: No authority result supplied; license: Unknown
not scoredROR affiliation: Not checked or no result supplied; no credibility inference made. Source: No authority result supplied; license: Unknown
not scoredRetraction Watch retraction: No retraction notice matched this DOI in the deployed snapshot. No matching event found; coverage may be incomplete. Source: Retraction Watch; license: CC BY 4.0
not scoredRetraction Watch expression of concern: No expression of concern notice matched this DOI in the deployed snapshot. No matching event found; coverage may be incomplete. Source: Retraction Watch; license: CC BY 4.0
not scoredRetraction Watch correction: No correction notice matched this DOI in the deployed snapshot. No matching event found; coverage may be incomplete. Source: Retraction Watch; license: CC BY 4.0
not scoredRetraction Watch reinstatement: No reinstatement notice matched this DOI in the deployed snapshot. No matching event found; coverage may be incomplete. Source: Retraction Watch; license: CC BY 4.0
not scoredOpen access status: Not checked or no result supplied; no credibility inference made. Source: No authority result supplied; license: Unknown
supportingPublication license: A publication license was supplied: http://arxiv.org/licenses/nonexclusive-distrib/1.0/. Presence improves reuse transparency, not research validity. Source: Normalized work metadata; license: Caller-provided; provenance license not supplied to scorer
cautionPublication version: Identified as a preprint; peer review and later versions may change the record. Source: Normalized work metadata; license: Caller-provided; provenance license not supplied to scorer
cautionMetadata completeness: 5 of 6 scored descriptive metadata groups are present; missing fields increase uncertainty. Source: Normalized work metadata; license: Caller-provided; provenance license not supplied to scorer

Cite this work

BibTeX

@article{allodium:10.48550/arxiv.2611.03555,
  title = {MCP Tool Poisoning in Agentic AI Frameworks: A Cross-Framework Measurement Study},
  author = {Shaikh, Farooq and Montaruli, Biagio},
  year = {2026},
  doi = {10.48550/arxiv.2611.03555},
  url = {https://doi.org/10.48550/arxiv.2611.03555}
}

RIS

TY  - JOUR
TI  - MCP Tool Poisoning in Agentic AI Frameworks: A Cross-Framework Measurement Study
AU  - Shaikh, Farooq
AU  - Montaruli, Biagio
PY  - 2026
DO  - 10.48550/arxiv.2611.03555
UR  - https://doi.org/10.48550/arxiv.2611.03555
ER  -

APA

Farooq, S., & Biagio, M. (2026). MCP Tool Poisoning in Agentic AI Frameworks: A Cross-Framework Measurement Study. https://doi.org/10.48550/arxiv.2611.03555

Source records

datacite · retrieved 2026-11-10T16:45:29.554Z