Yufa Shi1,#, Jiaxing Hu2,#, Lipeng Wang1,3,*, Rui Ma1,3,*, Mengyao Wang1, Zhijuan Jia1,3
CMC-Computers, Materials & Continua, Vol.89, No.1, 2026, DOI:10.32604/cmc.2026.085633
- 13 August 2026
Abstract AI agents frequently access external files, databases, and application programming interfaces (APIs) through the Model Context Protocol (MCP). However, these external resources typically lie outside the security boundary of the agent. During data circulation, attackers can not only tamper with the external data but also manipulate critical metadata, such as access permissions, validity periods, and authorization scopes. Even when the underlying data remains intact, such attacks can cause proxies to ingest expired or policy-violating resources, leading to severe privacy breaches and risks of unauthorized execution. To address these challenges, we propose SecuAudit, a privacy-enhancing decentralized… More >