Paper recorded by Signals 4 on 2026-10-30 in cs.CL. Abstract reproduced from arXiv; link to the original below.
Published 2026-10-30 on arXiv · recorded by Signals 4 on 2026-11-02
Category: cs.CL · 自然语言处理 · first seen 2026-11-02
Large language model (LLM)-based agents interact with external tools through protocols such as the Model Context Protocol (MCP), producing tool-call traces that may expose behavioral signals about users. In this work, we systematically study the risk of user-profile inference from MCP tool-call traces, where observers infer user attributes from protocol-valid tool interactions without access to us