Public-Sharing Labels and Verbatim Field Egress in an MCP-to-A2A Agent Configuration: A Controlled Multi-Model Study

arXiv:2609.01693 · cs.CR, cs.AI · Submitted 2026-09-01 · Read on arXiv

cs.CR, cs.AI

Submitted: 2026-09-01

Updated: 2026-09-01

Comments: 12 pages, 1 figure. Code and reproducibility artifacts: https://github.com/ArpanKumarM/agent-interop-bench/releases/tag/paper-v1

Code: https://github.com/ArpanKumarM/agent-interop-bench

Project page: https://safo-lab.github.io/A2ASecBench

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

Benchmark — 7× in this paper · explained in 2 episodes
Model Context Protocol — 6× in this paper
Trace — 6× in this paper · explained in 2 episodes
Provenance — 4× in this paper · explained in 3 episodes
Robustness — 4× in this paper · explained in 5 episodes
AI Agents — 2× in this paper · explained in 2 episodes
Generalization — 2× in this paper · explained in 13 episodes
In International Conference on Learning Representations — 2× in this paper
LLM judge — 2× in this paper · explained in 2 episodes
Model Context Protocol (MCP) — 2× in this paper · explained in 8 episodes
Ablation — 1× in this paper · explained in 1 episode
Benchmarking — 1× in this paper · explained in 3 episodes
Communication Overhead — 1× in this paper · explained in 2 episodes
Data Provenance — 1× in this paper · explained in 2 episodes
Multi-Agent System — 1× in this paper · explained in 5 episodes

Sources

Related papers