The Model Context Protocol working group shipped MCP 2026-07-28 on July 28, 2026, the fifth and largest revision of the spec since its November 2024 launch, introducing a stateless protocol core and s…
The MCP 2026-07-28 release candidate includes six SEPs that harden the protocol's OAuth layer, addressing issuer validation, credential binding, and client type declaration to fix mix-up attacks preva…
The Model Context Protocol (MCP) released specification version 2026-07-28, transforming from a bidirectional stateful protocol into a stateless request/response core for improved reliability and scal…
MCP SEP-2468, merged into the Model Context Protocol specification on May 17, 2026, implements RFC 9207's `iss` parameter to defend against OAuth mix-up attacks. The change requires authorization serv…