Data Overview

• Snapshot Week: 2026-07-03 to 2026-07-09
• Tracker: ArXiv cs.AI Weekly Papers Tracker (view all historical snapshots: /tech/ai-agents/data/?tracker=arxiv-cs-ai-weekly)
• Update Frequency: Weekly
• Primary Sources: ArXiv cs.AI RSS Feed, ArXiv cs.CL RSS Feed, ArXiv API (AI Agent Papers query)

Key Facts

• Who: 100+ research teams across 67 cs.AI and 29 cs.CL submissions, plus 4 cross-listed papers
• What: 100 agent-related papers out of 241 total unique submissions (41.5% agent density); 2 first-ever MCP security vulnerability disclosures; 5 orchestration frameworks; 12 new benchmarks
• When: Snapshot covers submissions from 2026-07-03 to 2026-07-09
• Impact: 3 MCP-related papers (2 security disclosures + 1 MCP-enabled architecture), 18 multi-agent papers, 11 papers scoring Trend Score 10

Methodology

Data was collected from three primary sources: the ArXiv cs.AI RSS feed, the ArXiv cs.CL RSS feed, and the ArXiv API with a targeted query for agent-related papers (searching for “agent”, “LLM”, “multi-agent”, “tool-use”, “reasoning”, or “RAG” in cs.AI). Papers were deduplicated across sources by ArXiv ID. Each paper was classified for agent relevance and assigned a Trend Score (1-10) based on novelty, topic alignment with current agent research frontiers, and cross-referencing with community engagement signals (HuggingFace Papers links). The HuggingFace Daily Papers RSS feed was queried but returned a 404 error this week. Data as of 2026-07-09.

This Week’s Data

Title	Authors	ArXiv ID	Category	Key Topics	Trend Score
Danus: Orchestrating Mathematical Reasoning Agents with Fact-Graph Memory	Jihao Liu, Guoxiong Gao, Zeming Sun et al.	2607.06447	cs.AI	agent, reasoning, planning, orchestration	10
Agents That Teach: Towards Designing Incidental Learning Back into AI-Assisted Software Development	Rohit Mehra, Samdyuti Suri, Prithviraj K Tagadinamani et al.	2607.06101	cs.AI	agent, multi-agent, reasoning, autonomous	10
PolyWorkBench: Benchmarking Multilingual Long-Horizon LLM Agents	Hongliang Li, Yijin Liu, Zhiwei Zhang et al.	2607.06008	cs.AI	agent, reasoning, tool-use, LLM, planning	10
Beyond the Leaderboard: A Synthesis of Tool-Use, Planning, and Reasoning Failures in Large Language Model Agents	Wael Albayaydh, Rui Zhao, Ivan Flechais	2607.05775	cs.AI	agent, multi-agent, reasoning, tool-use, LLM, planning	10
Beyond Static Evaluation: Building Simulation Environments for Scalable Agentic Reinforcement Learning	Akshay Arora, Ishan Nigam, Ashutosh Aggarwal et al.	2607.05773	cs.AI	agent, tool-use, LLM, autonomous	10
KAT-Coder-V2.5 Technical Report	Bo Huang, Fengxiang Li, Hao Xu et al.	2607.05471	cs.AI	agent, tool-use, autonomous	10
CanvasAgent: Enabling Complex Image Creation and Editing via Visual Tool Orchestration	Hairui Zhu, Yiying Yang, Tengjin Weng et al.	2607.05465	cs.AI	agent, reasoning, tool-use, orchestration	10
Prompt-to-Paper: Agentic AI System for Bioinformatics	Ramsha Kamran, Maheera Amjad, Zartasha Mustansar et al.	2607.05456	cs.AI	agent, multi-agent, LLM, autonomous	10
CHARLIE: An On-Premise Multi-Agent RAG System for Evidential Reasoning in Forensic Science	Leandro D. Carneiro, Andre L. S. Meirelles et al.	2607.05428	cs.AI	agent, multi-agent, reasoning, planning, orchestration	10
When Lower Privileges Suffice: Investigating Over-Privileged Tool Selection in LLM Agents	Kaiyue Yang, Yuyan Bu, Jingwei Yi et al.	2606.20023	cs.CL	agent, tool-use, autonomous	10
PolyJarvis: An LLM-Orchestrated Agent for Automated All-Atom Molecular Dynamics of Amorphous Homopolymers	Alexander Zhao, Achuth Chandrasekhar, Amir Barati Farimani	2604.02537	cs.CL	agent, LLM, MCP, orchestration	10
From Voting to Agent Collaboration: Answer-Type-Aware LLM Pipelines for BioASQ 14b	Taeyun Roh, Eunha Lee, Wonjune Jang et al.	2607.06452	cs.CL	agent, multi-agent, reasoning, LLM	9
LLM Agents for Deliberative Collaboration: A Study on Joint Decision Making Under Partial Observability	Chenxu Wang, Yongkun Yang, Boyuan Du et al.	2607.06157	cs.CL	agent, multi-agent, reasoning, LLM	9
Tangent classes of matroids and wonderful compactifications	Ronnie Cheng, Shurui Liu, Guoxiong Gao	2607.05835	cs.AI	agent, reasoning, autonomous	9
From Passive Retrieval to Active Memory Navigation: Learning to Use Memory as a Structured Action Space	Yue Xu, Yutao Sun, Yihao Liu et al.	2607.05794	cs.AI	agent, reasoning, tool-use	9
Rethinking Scientific Discovery in the Agentic Era	Yining Zheng, Yuxin Wang, Jiahao Lu et al.	2607.03863	cs.CL	agent, multi-agent, autonomous	9
An Experimental Design Approach to Evaluating Agentic AI’s Autonomous Model Discovery	Hao He, Xueying Liu, Chris J. Kuhlman et al.	2607.06413	stat.ME	agent, LLM, autonomous	8
Information Limits and Attractor Dynamics in Economies of Frontier LLM Agents: A Pre-Registered Test	Cheng Qian	2607.06001	cs.AI	agent, multi-agent, reasoning	8
When Agents Lie: Premeditation, Persistence, and Exploitation in Repeated Games	Jerick Shi, Terry Jingcheng Zhang, Bernhard Scholkopf et al.	2607.05132	cs.CL	agent, LLM, autonomous	8
When Does Tool Use Increase the Expressive Power of Finite-Precision Recurrent Models?	Nikola Zubic, Qian Li, Yuyi Wang et al.	2607.06155	cs.CL	agent, tool-use	7
MCP-Enabled Agentic AI for Autonomous IPoDWDM Network Lifecycle Automation	Chunmin Xia, Jakub Harbaczewski, Nikhil Dsilva et al.	2607.05975	cs.AI	agent, autonomous	7
Agentic AI for IPoDWDM Network Lifecycle Automation: An MCP-Enabled Architecture	Chunmin Xia, Jakub Harbaczewski, Nikhil Dsilva et al.	2607.05958	cs.AI	agent, autonomous	7
Controlling Tool Use with Heading-Specific Activation Steering	Yuqi Chen, Vincent Siu, Yang Liu et al.	2607.05790	cs.AI	reasoning, tool-use, LLM	7
Unicode TAG-Block Concealment of Tool-Metadata Payloads in the Model Context Protocol: An Approval-View Fidelity Gap Across Three Independent Server Implementations	Mohammadreza Rashidi	2607.05744	cs.AI	agent, MCP	7
The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and TOCTOU Vulnerabilities	Mohammadreza Rashidi	2607.05743	cs.AI	agent, MCP	7
Decision Protocols in Multi-Agent Large Language Model Conversations	Lars Benedikt Kaesberg	2607.05477	cs.AI	agent, multi-agent, LLM	7
Bridging Physical Reasoning and Task Generalization via Visual Action Outcome Reasoning Alignment	Han-Jun Ko, Jr-Jen Chen, Haobo Yuan et al.	2607.06522	cs.AI	agent, reasoning	6
Multi-Agent Deep Reinforcement Learning for Multi Objective Battery Management in Dairy Farms	Marcos Eduardo Cruz Victorio, Karl Mason	2607.06489	cs.AI	agent, multi-agent	6
Finding H. pylori in the Fine Print: Evidence-Linked Multi-Agent Case Finding from Gastric Biopsy Reports	Yufan Wang, Anit Kumar Sahu, Yan Fei Ng et al.	2607.06435	cs.AI	agent, multi-agent	6
RuBench: A Repository-Level Agentic Coding Benchmark with Natively Authored Russian Task Specifications	Evgeny Shilov	2607.06411	cs.CL	agent, reasoning	6
Task Decomposition-Guided Reranking for Adaptive Agent Skill Retrieval	Yanping Chen, Weijie Shi, Weijie Shi, Wen Yang et al.	2607.06283	cs.AI	agent, planning	6
Demonstrating TOFFEE: A Learned System for Synthesizing Data Agent Trajectories at Scale	Ziting Wang, Yin Li, Zuhao Yang et al.	2607.06233	cs.AI	agent, reasoning	6
A toy framework for single and multi-agent human-AI curiosity ecosystems	Ilya E. Monosov	2607.06214	cs.AI	agent, multi-agent	6
From Blueprint to Reality: Modeling and Applying Putnam’s Social Capital Theory with LLM-based Multi-agent Simulations	Shiyi Ling, Zhi Zheng, Hui Zheng et al.	2607.06080	cs.AI	agent, multi-agent	6
Reward-Density Heuristic for Dynamic Multi-Vehicle Routing: Performance and Computational Efficiency	Manish Kolachalam, Rani Malhotra	2607.06066	cs.AI	autonomous, planning	6
SearchEyes: Towards Frontier Multimodal Deep Search Intelligence via Search World Simulation	Zhengbo Jiao, Yiming Cheng, Yilei Jiang et al.	2607.05943	cs.AI	agent, reasoning	6
StateFuse: Deterministic Conflict-Preserving Memory for Multi-Agent Systems	Sergey Volkov, Yang Li, Ye Luo	2607.05844	cs.AI	agent, multi-agent	6
Onnes: A Physics-Grounded Multi-Agent LLM Simulator for Cryogenic Fault Diagnosis in Quantum Computing Infrastructure	Praneeth Narisetty, Uday Kumar Reddy Kattamanchi et al.	2607.05805	cs.AI	agent, multi-agent	6
FORGE: Towards Functional Tool-Use Generalization via Keypoint Trajectory Reasoning	Chuhao Zhou, Liquan Wang, Shuxin Cao et al.	2607.05780	cs.AI	reasoning, tool-use	6
IMR: Iterative Mode-World Weighted Regression for Multi-Agent Trajectory Prediction	Honglin Wang, Shiyao Pan, Yun-Fu Liu	2607.05705	cs.AI	agent, multi-agent	6
FirstResearch: Auditable Question Formation for LLM Scientific Discovery Agents	Yufeng Wang	2607.05682	cs.AI	agent, planning	6
Evaluating calibrated refusal and safe usefulness in dual-use biology settings	Edwin H. Wintermute, Harmon Bhasin et al.	2607.05462	cs.AI	agent, reasoning	6
Proof of Execution: Runtime Verification for Governed AI Agent Actions	James Rhodes, George Kang	2607.05397	cs.AI	agent, planning	6
LLM-as-a-Verifier: A General-Purpose Verification Framework	Jacky Kwok, Shulu Li, Pranav Atreya et al.	2607.05391	cs.CL	agent, reasoning	6
Unified Audio Intelligence Without Regressing on Text Intelligence	Zhifeng Kong, Sang-gil Lee, Jaehyeon Kim et al.	2607.05196	cs.CL	agent, reasoning	6
EgoDyn-Bench: Evaluating Ego-Motion Understanding in Vision-Centric Foundation Models for Autonomous Driving	Finn Rasmus Schafer, Yuan Gao, Dingrui Wang et al.	2604.22851	cs.CL	reasoning, autonomous	6
SecureCode: A Production-Grade Multi-Turn Dataset for Training Security-Aware Code Generation Models	Scott Thornton	2512.18542	cs.CL	agent, multi-agent	6
MASCA: LLM based-Multi Agents System for Credit Assessment	Gautam Jajoo, Atharva Pandey et al.	2507.22758	cs.CL	agent, multi-agent	6

Week-over-Week Summary

Metric	This Week	Last Week	Delta
Total papers scanned	241	32	+209
Agent-related papers	100	22	+78
Multi-agent papers	18	2	+16
New benchmarks	12	5	+7
MCP-related papers	3	0	+3
Orchestration frameworks	5	0	+5
Tool-use papers	10	3	+7
Reasoning papers	42	12	+30
Autonomous agent papers	15	4	+11
Agent density	41.5%	68.8%	-27.3pp

Note: The apparent drop in agent density (68.8% to 41.5%) reflects broader capture scope this week, including cross-listed papers from cs.CL, stat.ME, cs.FL, and cs.CV. The absolute number of agent-related papers increased substantially (+78).

Trends & Observations

• MCP security emerges as a first-class research concern: Two independent vulnerability disclosure papers by Mohammadreza Rashidi (2607.05744, 2607.05743) represent the first academic security analyses of the Model Context Protocol. The first reveals Unicode TAG-Block concealment attacks that can hide malicious tool-metadata payloads from approval views across three independent MCP server implementations. The second catalogs TOCTOU (Time-of-Check-to-Time-of-Use) vulnerabilities in execution security for AI coding agents. This 0-to-2 transition in a single week signals that as MCP adoption accelerates (2 new MCP-enabled telecom architectures also appeared this week), the security research community is catching up.

• Agent orchestration becomes an explicit research topic: Five papers this week propose explicit orchestration architectures — Danus (fact-graph memory for math reasoning), CanvasAgent (visual tool orchestration for image creation), CHARLIE (multi-agent RAG for forensic science), PolyJarvis (MCP-based molecular dynamics), and the MCP-Enabled IPoDWDM telecom automation pair. This marks a shift from single-agent tool-calling patterns toward structured multi-step, multi-tool coordination.

• Domain-specific agents proliferate across verticals: This week saw agents targeting bioinformatics (Prompt-to-Paper), forensic science (CHARLIE), CAD/industrial design (ArtisanCAD, CanvasAgent), telecom networking (MCP-Enabled IPoDWDM), molecular dynamics (PolyJarvis), dairy farm energy management, quantum computing infrastructure (Onnes), and credit assessment (MASCA). The breadth suggests agent architectures are reaching sufficient maturity for domain-specific deployment.

• Agent memory architectures diversify: Three distinct memory paradigms appeared this week — fact-graph memory (Danus, for mathematical reasoning), in-process retrieval-as-working-memory (Memory in the Loop), and narrative world models (for long-form fiction). This diversification suggests the community is moving beyond simple vector-store retrieval toward structured, task-specific memory systems.

• Multilingual agent evaluation gap addressed: PolyWorkBench is the first benchmark to explicitly evaluate multilingual long-horizon agent performance, challenging the English-centric assumption of existing benchmarks. RuBench complements this with natively authored Russian task specifications for repository-level coding agents.

• Notable change: The most significant structural shift this week is the emergence of MCP security research from zero to two papers in a single week, coinciding with two new MCP-enabled architecture papers. This convergence of adoption and vulnerability disclosure mirrors the typical security lifecycle seen in web and cloud infrastructure — and suggests the agent ecosystem is entering a phase where infrastructure security will increasingly shape adoption decisions.

🔺 Scout Intel: What Others Missed

Most weekly ArXiv roundups will highlight the 11 Trend Score 10 papers and the surge in agent framework count. The signal that matters more: MCP security has arrived as an academic research topic, and it arrived with two vulnerability disclosures in a single week. The Unicode TAG-Block concealment attack (2607.05744) is particularly consequential — it demonstrates that MCP’s approval-view mechanism, the primary user-facing safety control for tool invocation, can be subverted by embedding invisible Unicode characters in tool metadata. This means the “review before approve” pattern that most MCP deployments rely on has a concrete, implementable exploit. The TOCTOU paper (2607.05743) further shows that execution-security research for coding agents is fragmented across sandbox isolation, access control, and race-condition literatures that rarely cross-reference each other. Together, these papers suggest that the agent infrastructure layer — protocols, execution environments, and approval mechanisms — is becoming the next critical research frontier, even as most attention remains focused on agent capabilities and benchmarks. Organizations deploying MCP-based agents should treat these disclosures as early warning signals rather than theoretical concerns.

Previous Snapshots

• Week of Jul 2, 2026
• Week of Jun 25, 2026
• Week of Jun 18, 2026
• Week of Jun 11, 2026
• Week of May 28, 2026
• Week of May 14, 2026
• Week of Apr 23, 2026

Sources

• ArXiv cs.AI RSS Feed — ArXiv, 2026-07-07
• ArXiv cs.CL RSS Feed — ArXiv, 2026-07-07
• ArXiv API - AI Agent Papers — ArXiv, 2026-07-07