STRIATUM-CTF uses MCP schemas to keep CTF agents grounded
The point
STRIATUM-CTF mediates between LLM reasoning and tool execution using the Model Context Protocol. Tools are strictly typed, schema-validated functions, and the protocol rejects out-of-schema calls before execution, returning structured observations for self-correction.
Why it matters
For builders, schema validation offers a concrete guardrail for tool-using agents.
Key details
- In 180 runs across 15 CTF challenges, it succeeded on 77.8 to 86.7 percent of attempts
- A schema-only setup with no procedural documentation already reached 77.8 percent
- At a live Florida State University CTF, it placed first against more than 30 teams by 10 points
Original ~6 min → 25 sec here Source: arXiv cs.AI, Nov 2, 2026