Hybrid Analysis for Secure MCP Tool Use in LLM Agents

arXiv:2607.25297 · cs.CR, cs.AI · Submitted 2026-07-28 · Read on arXiv

Ping He, Yuexiang Xie, Yaliang Li, Shouling Ji

cs.CR, cs.AI

Submitted: 2026-07-28

Code: https://github.com/Tencent/AI-Infra-Guard

License: http://creativecommons.org/licenses/by-nc-nd/4.0/

The gist: The rapid development of large language model (LLM) agents has enabled their broad adoption across diverse real-world tasks.

Terminology

Abstract

The rapid development of large language model (LLM) agents has enabled their broad adoption across diverse real-world tasks. To standardize interactions between LLM agents and external environments, Model Context Protocol (MCP) tools have emerged as a de facto standard and have been widely integrated into these systems. However, the use of MCP tools also introduces new safety risks, as LLM agents can be induced to perform malicious or unauthorized actions. Although prior work has proposed defenses for securing tool use in LLM agents, most methods rely on static analysis, i.e., inspecting prompts and generated outputs, which limits the defense effectiveness and robustness. To address these limitations, we propose MTGuard, a hybrid analysis-based defense framework designed to safeguard the use of MCP tools in LLM agents by leveraging lifecycle-aware static-dynamic co-analysis. Extensive evaluation demonstrates that MTGuard effectively mitigates multiple categories of harmful tool use across different LLM agents while maintaining performance on benign user tasks.

Sources

Related papers