THRONE
See report Verify server

registry / record

arxiv-mcp-server

uvx / sealed 2026-06-12 / No. 1fad4ad3

> throne registry arxiv-mcp-server sealed
receiptsealed evidence
scan id
1fad4ad3a3de49cfb458b10f14f55359
target
uvx arxiv-mcp-server
sealed at
2026-06-12 18:31:25Z
evidence hash
sha256:91f7b8e19f50bb3cbfe1683e7a56492be481a68cf24976ba3fbfc5ce9332944f
01connectPASS929ms

initialize ok: server arxiv-mcp-server 0.5.0, negotiated protocolVersion 2025-11-25, capabilities ['experimental', 'prompts', 'tools']

02discoverPASS8ms

supported: tools/list (10 tools), prompts/list (7); method not found (tolerated): resources/list

03validate_schemasPASS15ms

all 10 tool inputSchemas are valid JSON Schema

04smoke_test_toolsPASS4.5s

called 10 of 10 tools (cap 10): 4 ok, 6 returned tool-level errors (expected for synthesized args)

05error_handlingPASS4.0s

structured error responses, connection survived — wrong_type_args: accepted (returned result); unknown_method: error(-32602); invalid_id: no response (silent), connection alive

06streamingPASS1ms

no streaming-capable tool declared by this server; not applicable (pass-na)

07resource_lifecyclePASS6ms

resources capability not declared; not applicable (pass-na)

08concurrent_callsPASS56ms

ladder 1/2/4/8 overlapping list_papers calls: max_observed_stable_concurrency=8; all ids answered exactly once at every level

09reconnectPASS962ms

transport closed and relaunched; re-handshake ok (protocolVersion 2025-11-25, first session was 2025-11-25)

01connectPASS763ms

initialize ok: server arxiv-mcp-server 0.5.0, negotiated protocolVersion 2025-11-25, capabilities ['experimental', 'prompts', 'tools']

02discoverPASS6ms

supported: tools/list (10 tools), prompts/list (7); method not found (tolerated): resources/list

03validate_schemasPASS17ms

all 10 tool inputSchemas are valid JSON Schema

04smoke_test_toolsPASS3.7s

called 10 of 10 tools (cap 10): 4 ok, 6 returned tool-level errors (expected for synthesized args)

05error_handlingPASS4.0s

structured error responses, connection survived — wrong_type_args: accepted (returned result); unknown_method: error(-32602); invalid_id: no response (silent), connection alive

06streamingPASS0ms

no streaming-capable tool declared by this server; not applicable (pass-na)

07resource_lifecyclePASS7ms

resources capability not declared; not applicable (pass-na)

08concurrent_callsPASS37ms

ladder 1/2/4/8 overlapping list_papers calls: max_observed_stable_concurrency=8; all ids answered exactly once at every level

09reconnectPASS941ms

transport closed and relaunched; re-handshake ok (protocolVersion 2025-11-25, first session was 2025-11-25)

chatgpt desktopemulation profile pending real-traffic captureCOMING SOON
SECURITY: REVIEW / 1 finding(s) / review material, not a verdict
LOWTHR-NET-05 / Hardcoded outbound endpoints

3 non-local endpoint host(s) referenced in code — verify each is expected for this server's purpose: api.semanticscholar.org (arxiv_mcp_server-0.5.0/src/arxiv_mcp_server/tools/citation_graph.py:16), arxiv.org (arxiv_mcp_server-0.5.0/src/arxiv_mcp_server/tools/download.py:179), export.arxiv.org (arxiv_mcp_server-0.5.0/src/arxiv_mcp_server/tools/search.py:71)

arxiv_mcp_server-0.5.0/src/arxiv_mcp_server/tools/citation_graph.py:16
VERDICT: FIT TO SHIPSANDBOXED RUN — submitted server executed in a disposable microVM — compatibility: 0 fail / 0 warn across 2 clients / security: review — 1 finding(s), 0 highsealed by THRONE / No. 1fad4ad3 / 2026-06-12
THRONE: FIT TO SHIPwear the crown

paste this in your README. it renders the live verdict and links back to this record. if a release ever breaks the verdict, the badge says so on its own.

[![THRONE: FIT TO SHIP](https://api.usethrone.dev/api/badge/uvx%20arxiv-mcp-server)](https://usethrone.dev/server/arxiv-mcp-server)
executed in a disposable microVM, created for this scan and destroyed after it. nothing outlives a run.

maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.

this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.