@techreport{mohiuddin-mcp-security-considerations-00,
    number =    {draft-mohiuddin-mcp-security-considerations-00},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-mohiuddin-mcp-security-considerations/00/},
    author =    {Anas Mohiuddin Syed},
    title =     {{Security Considerations for Model Context Protocol (MCP) Implementations in AI Agent Systems}},
    pagetotal = 7,
    year =      2026,
    month =     jun,
    day =       1,
    abstract =  {The Model Context Protocol (MCP) connects large language models (LLMs) to external tools, data sources, and services. The MCP specification does not define normative security requirements. This document analyzes recurring vulnerability classes that have been publicly reported in MCP server implementations, describes an automated detection approach implemented in the open-source tool mcp- safeguard, and proposes security considerations and mitigations for implementors and operators. The document also describes Protocol Pivoting, a cross-protocol lateral-movement pattern in systems that compose MCP with other agent protocols.},
}