Z. Wang, “MPMA: Preference Manipulation Attack Against Model Context Protocol”, AAAI, vol. 40, no. 42, pp. 35838–35846, Mar. 2026.