The Model Context Protocol (MCP) became stateless at the protocol layer with the 2026-07-28 specification, removing the handshake and session ID header to enable horizontal scaling without sticky sess…
The Model Context Protocol working group shipped MCP 2026-07-28 on July 28, 2026, the fifth and largest revision of the spec since its November 2024 launch, introducing a stateless protocol core and s…
The MCP 2026-07-28 release candidate includes six SEPs that harden the protocol's OAuth layer, addressing issuer validation, credential binding, and client type declaration to fix mix-up attacks preva…
MCP SEP-2468, merged into the Model Context Protocol specification on May 17, 2026, implements RFC 9207's `iss` parameter to defend against OAuth mix-up attacks. The change requires authorization serv…