MCP tool-use defense moves from static prompt inspection to lifecycle-aware static-dynamic co-analysis

arXiv 2607.25297·low signalXBlueskyLinkedInCopy link

MTGuard (July 28, 2026) argues that existing MCP defenses fail because they are static — inspecting prompts and generated outputs only — which misses harm that materializes during execution. Its proposal is lifecycle-aware co-analysis pairing static inspection with dynamic runtime observation across the full tool-call lifecycle, reported to mitigate multiple categories of harmful tool use while preserving benign task performance. Marking this low importance deliberately: the abstract states effectiveness qualitatively and I could not retrieve specific detection rates, overhead figures, or baseline comparisons, so the direction is worth tracking but the magnitude is unverified.