| 1 | [](https://pypi.org/project/arxiv-mcp-server/) |
| 2 | [](https://pypi.org/project/arxiv-mcp-server/) |
| 3 | [](https://github.com/blazickjp/arxiv-mcp-server/stargazers) |
| 4 | [](https://github.com/blazickjp/arxiv-mcp-server/forks) |
| 5 | [](https://github.com/blazickjp/arxiv-mcp-server/actions/workflows/tests.yml) |
| 6 | [](https://www.python.org/downloads/) |
| 7 | [](https://opensource.org/licenses/Apache-2.0) |
| 8 | [](https://smithery.ai/server/arxiv-mcp-server) |
| 9 | [](https://vscode.dev/redirect/mcp/install?name=arxiv-mcp-server&config=%7B%22type%22%3A%22stdio%22%2C%22command%22%3A%22uvx%22%2C%22args%22%3A%5B%22arxiv-mcp-server%22%5D%7D) |
| 10 | [](https://insiders.vscode.dev/redirect/mcp/install?name=arxiv-mcp-server&config=%7B%22type%22%3A%22stdio%22%2C%22command%22%3A%22uvx%22%2C%22args%22%3A%5B%22arxiv-mcp-server%22%5D%7D&quality=insiders) |
| 11 | [](https://kiro.dev/launch/mcp/add?name=arxiv-mcp-server&config=%7B%22command%22%3A%22uvx%22%2C%22args%22%3A%5B%22arxiv-mcp-server%22%5D%7D) |
| 12 | [](./.codex-plugin/plugin.json) |
| 13 | |
| 14 | # ArXiv MCP Server |
| 15 | |
| 16 | <!-- mcp-name: io.github.blazickjp/arxiv-mcp-server --> |
| 17 | |
| 18 | > 🔍 Enable AI assistants to search and access arXiv papers through a simple MCP interface. |
| 19 | |
| 20 | The ArXiv MCP Server provides a bridge between AI assistants and arXiv's research repository through the Model Context Protocol (MCP). It allows AI models to search for papers and access their content in a programmatic way. |
| 21 | |
| 22 | <div align="center"> |
| 23 | |
| 24 | 🤝 **[Contribute](https://github.com/blazickjp/arxiv-mcp-server/blob/main/CONTRIBUTING.md)** • |
| 25 | 📝 **[Report Bug](https://github.com/blazickjp/arxiv-mcp-server/issues)** |
| 26 | |
| 27 | <a href="https://www.pulsemcp.com/servers/blazickjp-arxiv-mcp-server"><img src="https://www.pulsemcp.com/badge/top-pick/blazickjp-arxiv-mcp-server" width="400" alt="Pulse MCP Badge"></a> |
| 28 | </div> |
| 29 | |
| 30 | ## ✨ Core Features |
| 31 | |
| 32 | - 🔎 **Paper Search**: Query arXiv papers with filters for date ranges and categories |
| 33 | - 📄 **Paper Access**: Download and read paper content |
| 34 | - 📋 **Paper Listing**: View all downloaded papers |
| 35 | - 🗃️ **Local Storage**: Papers are saved locally for faster access |
| 36 | - 📝 **Prompts**: A set of research prompts for paper analysis |
| 37 | |
| 38 | |
| 39 | |
| 40 | ## 🔒 Security |
| 41 | |
| 42 | ### Prompt Injection Risk |
| 43 | |
| 44 | **Paper content retrieved from arXiv is untrusted external input.** |
| 45 | |
| 46 | When an AI assistant downloads or reads a paper through this server, the paper's |
| 47 | text is passed directly into the model's context. A maliciously crafted paper |
| 48 | could embed adversarial instructions designed to hijack the AI's behavior — for |
| 49 | example, instructing it to exfiltrate data, invoke other tools with unintended |
| 50 | arguments, or override system-level instructions. This is a known class of |
| 51 | attack described by OWASP as **LLM01: Prompt Injection** and by the OWASP |
| 52 | Agentic AI framework as **AG01: Prompt Injection in LLM-Integrated Systems**. |
| 53 | |
| 54 | ### Recommended Mitigations |
| 55 | |
| 56 | 1. **Use read-only MCP configurations** — where possible, configure the MCP |
| 57 | client so that the arxiv-mcp-server cannot trigger write operations or invoke |
| 58 | other tools on y |