MCP extensions get stages: Apps and Auth Stable, Tasks and Skills Beta

The Model Context Protocol has finalized SEP-2133's successor, a SEP that gives MCP extensions a three-stage maturity lifecycle — Experimental, Beta and Stable — with the stage recorded in the repository path (`specification/experimental/`, `specification/beta/`, `specification/stable/`). Under the accepted design, Experimental and Beta extensions iterate with Extension Maintainer approval only and may make breaking changes, while entering Beta and entering Stable each require an Extensions Track SEP, a Stable extension changes only with a new core protocol revision, and promotion into the core specification requires a Standards Track SEP. The change addresses two gaps in SEP-2133 — official extensions carrying no stability signal and undefined change points — and classifies extensions already official at finalization, including `ext-auth` (stable and draft), `ext-tasks` (schema snapshots labeled Stable and Development) and `ext-skills` (stable).

FinalProcess This SEP has reached Final status and is preserved as a historical record of the design as accepted. Changes made to the protocol after finalization are not reflected here. Refer to the current specification https://modelcontextprotocol.io/specification/latest and its changelog for authoritative requirements. Abstract This SEP gives MCP extensions a maturity lifecycle. An extension starts as Experimental, may advance to Beta, and then either becomes Stable as an extension or is promoted into the core specification. The directory that holds the extension’s specification shows the stage specification/experimental/ , specification/beta/ , specification/stable/ . One ext-<area repository can therefore hold extensions at different stages, and no repository is renamed when a stage changes. The stage decides which protocol changes are allowed, who approves them, and what stability implementers can expect. Experimental and Beta extensions iterate with Extension Maintainer approval only, and may make breaking changes. Entering Beta and entering Stable each require an Extensions Track SEP. A Stable extension changes only when a new core protocol revision is released. Promotion to the core specification requires a Standards Track SEP. This SEP updates the extension lifecycle defined in SEP-2133 https://modelcontextprotocol.io/seps/2133-extensions . It does not change how extensions are negotiated. Motivation SEP-2133 defines two kinds of extension: an experimental extension in an experimental-ext- repository with no stability promise, and an official extension in an ext- repository that graduated through an Extensions Track SEP. It has no notion of maturity, and two problems follow. Official extensions carry no stability signal. An Extensions Track SEP is the only gate, and once an extension is official, SEP-2133 lets its maintainers change it at any time without Core Maintainer review. An implementer cannot tell whether an official extension is settled or still being reworked. Extensions signal maturity in different, undefined words: ext-auth uses specification/stable/ and specification/draft/ , ext-tasks labels its schema snapshots “Stable” and “Development”, and ext-skills publishes specification/stable/ . Change points for official extensions are undefined. SEP-2133 lets extension maintainers change an official extension whenever they choose, and requires a new identifier for every breaking change. Implementers need predictable moments when behavior may change. The protocol already provides one, because every request declares a protocol revision, and SEP-2663 https://modelcontextprotocol.io/seps/2663-tasks-extension already defines extension behavior per protocol revision. SEP-2596 https://modelcontextprotocol.io/seps/2596-spec-feature-lifecycle-and-deprecation left “feature maturity tiers” as an open question and pointed to the alpha/beta/GA model in Kubernetes. This SEP answers that question for extensions. Specification Stages Locations are paths inside an ext-<area repository. See Repositories and directories repositories-and-directories . An extension MUST NOT skip Beta, unless the Core Maintainers waive the requirement by a recorded vote. Extensions that are official when this SEP is finalized are classified in Transition transition . Roles An Extension Maintainer is a maintainer of the extension’s repository who is listed in that repository’s MAINTAINERS.md , as ext-tasks already does. As SEP-2133 provides for repository maintainers, the Core Maintainers appoint Extension Maintainers, who are normally the leads of the associated Working Group, or the facilitators of the associated Interest Group. Every extension MUST have at least one Extension Maintainer. “Extension Maintainer approval” means a pull request approved by at least one Extension Maintainer who is not its author. Extension Maintainers SHOULD coordinate changes through the associated Working Group or Interest Group, following its decision-making process https://modelcontextprotocol.io/community/working-interest-groups decision-making-process . The Core Maintainers keep the authority SEP-2133 gives them over every extension, including the ability to modify, deprecate, archive or remove it. Lead Maintainers retain veto authority over each Core Maintainer decision in this SEP, per the governance roles https://modelcontextprotocol.io/community/governance roles . Repositories and directories An official extension lives in an ext-<area repository, which MAY group related extensions as SEP-2133 allows. The extensions in one repository MAY be at different stages. The repository name does not show a stage, and does not change when a stage changes. Inside the repository, the stage is the directory that holds the extension’s specification. For example the extension names are illustrative : - Each extension’s specification MUST be at specification/<stage /<name , where <stage is experimental , beta or stable , and <name is a file or a directory. An extension MUST NOT appear under more than one stage directory. - The stage directory MUST match the extension’s stage, and is the only required marker of it. The layout below <name is for the Extension Maintainers to decide, except as Stable stable requires for revisions. - A stage change is a move from one stage directory to another, or to specification/archived/ . An Extension Maintainer opens a pull request that makes the move and links the SEP that the change requires, if any, and a Core Maintainer approves it. This is the only change to an extension repository that needs Core Maintainer approval. - An Extension Maintainer MAY add a new extension under specification/experimental/ with Extension Maintainer approval only. - GitHub does not redirect a moved path. The Extension Maintainers update the links that a move breaks. - Schemas, SDK packages, examples and other supporting files MAY live elsewhere in the repository. Where they belong to one extension, they SHOULD say which. - specification/archived/ holds extensions that have been promoted to Core or have ended. See Core core and Ending an extension ending-an-extension . Experimental repositories. The experimental-ext-<name repositories that SEP-2133 defines remain. Any Maintainer MAY create one. Everything in it is Experimental, so it needs no stage directories. An extension in an experimental repository enters Beta by moving into an ext-<area repository, under specification/beta/ . That repository is an existing one for the area, or a new one that the Core Maintainers create. The Core Maintainers MAY create it by renaming the experimental repository, as they did for ext-tasks and ext-skills . The following apply at every stage: - Every extension MUST stay associated with a Working Group or Interest Group, as SEP-2133 requires. - The licensing, contributor license grant, trademark and antitrust terms of SEP-2133 apply. - Each extension MUST be listed on the extensions page of the MCP website with its current stage, and a Beta extension with its intended destination. Experimental An Experimental extension is a prototype. An Extension Maintainer MAY add one under specification/experimental/ in an existing ext-<area repository, and any Maintainer MAY create an experimental-ext-<name repository. Either can happen before or after a SEP is drafted. - Extension Maintainers MAY merge any change, including breaking changes, without notice, deprecation or Core Maintainer review. - Implementers MUST NOT expect two revisions of the extension to be compatible. They SHOULD pin to a tag or commit. Beta A Beta extension is one the Core Maintainers are willing to have implementers try. The goal is real usage: implementers learn what needs to change, and the design iterates. Entry. An Extension Maintainer, or the Working Group, submits an Extensions Track SEP under SEP-2133 and the SEP guidelines https://modelcontextprotocol.io/community/sep-guidelines . It is reviewed like a Standards Track SEP, and SEP-2133 already requires it to identify the Working Group and Extension Maintainers and to have a reference implementation in an official SDK. When the SEP is accepted, the extension moves to specification/beta/<name , as Repositories and directories repositories-and-directories describes. Intended destination. The Beta SEP SHOULD state whether the extension is intended to become Stable or to be promoted to Core. The destination is a signal to implementers, not a commitment. Extension Maintainers MAY change it during Beta, and the SEP that moves the extension out of Beta decides. A change of intended destination SHOULD be announced like a breaking change. Iteration. After entry, Extension Maintainers approve changes without further Core Maintainer review. - Extensions SHOULD prefer additive changes, such as new optional fields or capability flags, over breaking changes. - Breaking changes are allowed but SHOULD be infrequent and SHOULD be batched. - Every breaking change MUST appear in a changelog with the revision that introduces it. - Extension Maintainers SHOULD announce a breaking change in the Working Group or Interest Group channel before merging it. - Extension Maintainers SHOULD maintain a public list of known implementations and the feedback received from them. This list is the evidence for the next stage. Exit. A Beta extension advances to Stable or Core, or is archived. Stable A Stable extension is a released, maintained part of the MCP ecosystem that lives outside the core specification. Entry. An Extension Maintainer, or the Working Group, submits a second Extensions Track SEP. It follows the same review and acceptance process as a Standards Track SEP. The SEP MUST: - Link the Beta SEP and the extension’s location, and show that the extension has been in real use, through the known-implementations list. - Show two independent implementations, at least one client-side and one server-side, that interoperate. - Carry a conformance scenario that meets the requirements of SEP-2484 https://modelcontextprotocol.io/seps/2484-conformance-tests-required-for-final-seps for a Standards Track SEP, unless the extension has no observable protocol behavior. This SEP extends SEP-2484 to Extensions Track SEPs that move an extension to Stable. specification/stable/<name , and the Extension Maintainers publish the first Stable revision. Revisions. A Stable extension is published as revisions keyed to core protocol revisions, for example a specification/stable/<name /2026-07-28/ snapshot beside a specification/stable/<name /draft/ directory. - A published revision is immutable. - The extension MAY change only by publishing a new revision together with, or after, a new core protocol revision is released as Current. Proposed changes accumulate in draft/ and are visible to implementers before they take effect. - Extension Maintainer approval is sufficient for a new revision. The Core Maintainers do not review it. - Editorial fixes that do not change the requirements on any implementation MAY be made to a published revision at any time. Compatibility. See Identifiers and compatibility identifiers-and-compatibility . Exit. A Stable extension may be promoted to Core or deprecated. Core An extension that belongs in the core protocol is promoted by a Standards Track SEP, reviewed like any other. The proposal MAY come from a Beta or a Stable extension. The SEP MUST cite the extension’s repository and location. The feature becomes part of the core protocol in a specific core protocol revision R, for example 2027-01-01 . Once R is released, the following rules apply: - R or later. For a request that declares R or later, the feature is core behavior. It applies whether or not the extension identifier is advertised, so a server responding under R or later does not need to advertise the extension or respond with it. - Earlier than R. For a request that declares an earlier revision, the extension applies as defined by its final revision. A client that still supports earlier revisions SHOULD keep advertising the extension identifier, so that a server that does not yet support R can fall back to the extension behavior. - When to stop. A peer stops advertising the extension when it no longer supports any revision earlier than R. There is no separate sunset period. - Differences. The core behavior MAY differ from the extension. The SEP MUST define the differences, so that each protocol revision has one defined behavior. specification/archived/<name , with a notice at the top that points to the core specification section and the SEP. The archived copy keeps the extension’s final revision, which remains the definition for earlier protocol revisions. From that point every change is a core specification change. Other extensions in the same repository are not affected. Ending an extension - Withdrawal or inactivity. An Extension Maintainer MAY withdraw an Experimental or Beta extension, and it then moves to specification/archived/ . The Core Maintainers MAY archive an Experimental or Beta extension that has had no merged change and no Working Group or Interest Group activity for six months. - Deprecation. A Stable extension is deprecated by an Extensions Track SEP, with the requirements, minimum window and Tier 1 SDK obligations that SEP-2596 sets for a core feature. It stays under specification/stable/ while deprecated, and moves to specification/archived/ when it is removed. experimental-ext-<name repository as a whole. Identifiers and compatibility This section replaces the rule in SEP-2133 that every breaking change MUST use a new identifier. - An extension’s identifier is fixed when the extension is created and does not change when its stage changes. - Experimental and Beta. Extensions SHOULD prefer additive changes, such as new optional fields or capability flags in the settings object, over breaking changes. Breaking changes keep the same identifier, and the identifier carries no compatibility promise between revisions. An extension that makes a breaking change SHOULD add or increment a revision string in its settings object so that peers can detect a mismatch. An absent revision means the initial revision. A peer that receives a revision it does not know SHOULD NOT enable the extension. - Stable. Breaking changes appear only in a new revision, keyed to a core protocol revision. The behavior of the extension for a peer pair is the behavior defined for the protocol revision they negotiate. A revision MUST NOT change the behavior already defined for an earlier protocol revision. No new identifier is needed. A new identifier is used only when the old and new behavior must coexist under one protocol revision. - An extension specification MUST state which protocol revisions each of its revisions applies to. - Implementers of all stages SHOULD treat extension data received from a peer as untrusted, as SEP-2133 requires. Transition When this SEP reaches Final: - docs/extensions/overview.mdx and the Extensions Track description in docs/community/sep-guidelines.mdx are updated to match this SEP. - The extensions page lists each extension with its stage. - The extensions in existing repositories are classified as follows. No repository is renamed. The Extension Maintainers of each ext- repository move its specification into the stage directory shown, and a Core Maintainer approves the move. - The classified extensions need no new SEP. Their existing SEPs, including SEP-2127 for ext-server-card , count as the SEP for the stage assigned, and they keep their identifiers and wire behavior. Their existing SEPs do not state an intended destination, so the Extension Maintainers of each Beta extension record one on the extensions page. - Extensions classified as Stable follow the revision rules from Final. Their next revision is keyed to the next core protocol revision, and their existing published specifications keep their content. - Dated snapshots and draft/ directories that sit directly under specification/ today, as in ext-apps and ext-tasks , move under the extension’s own directory, for example specification/beta/tasks/2026-07-28/ . - ext-auth keeps hosting several extensions, and each is classified as Stable. Its specification/stable/ and specification/draft/ directories hold different extensions today. Both extensions move under specification/stable/ , and each gets its own draft/ directory. - ext-skills publishes specification/stable/ today, where “stable” means the released revision. Its specification moves to specification/beta/ . - An experimental-ext- repository that hosts several Experimental extensions, such as experimental-ext-tool-annotations , is unchanged. An extension in it that requests Beta moves to an ext-<area repository, and the others stay. Rationale Why put the stage in a directory, and not in the repository name? An earlier draft of this SEP used the repository name experimental-ext-<name , beta-ext-<name , ext-<name . That allows one stage per repository, but one area often holds work at several stages. The Tasks and Events Working Group plans to stabilize the current Tasks extension while steering and intermediate results incubate beside it agents-wg 29 https://github.com/modelcontextprotocol/agents-wg/pull/29 , and ext-auth already keeps one extension under specification/stable/ and another under specification/draft/ . With stages in repository names, each of those would need a second repository with its own maintainers file, issues and packages. A directory lets them share one. It also avoids renames, which GitHub redirects but which break package names and module paths at every stage change. The directory is still visible in every link to the specification, which a README banner or front-matter label would not be. There are two costs. GitHub does not redirect a moved path, so links to the old path on the default branch break. Links to a tag or commit do not break, and the extensions page on the MCP website is the stable entry point. A move also needs only write access, where a rename needs administrator access. This SEP therefore requires a Core Maintainer to approve the move. Why does Beta need a SEP, but iteration inside Beta does not? Beta is the first stage where the project’s name stands behind an extension, so it gets the full review that SEP-2133 already requires for official extensions. Iteration after that follows the reasoning in SEP-2133: routing every change through Core Maintainer review would bottleneck extensions on a process that already takes months. Why a second SEP for Stable? Stable is a stronger promise than Beta: behavior is fixed within a protocol revision. A second review lets the Core Maintainers judge the evidence from Beta real usage, independent implementations and conformance before making that promise. Why can a Stable extension change only with a core protocol revision? Implementers need known dates for behavior changes. Because every request declares its protocol revision, tying extension revisions to core revisions gives a change a place to take effect without breaking peers on an earlier revision. It also matches current practice: ext-tasks snapshots its schema by core revision, and ext-skills pins its stable specification to 2026-07-28 . Why is Beta required before Stable? The purpose of Beta is real usage before the project commits to a design. The Stable evidence is easier to gather during Beta, and a Beta extension is cheap to change if the evidence shows a problem. The Core Maintainers can still waive the requirement. Why does a Beta extension state an intended destination? The two exits from Beta set different expectations. An extension heading for Core will later be defined by core protocol revisions and its identifier will stop being advertised, while one heading for Stable stays an extension. Implementers deciding how deeply to adopt a Beta extension need to know which to expect. The destination is not binding, because Beta exists to gather the evidence that decides it. Why does the extension stay advertised after promotion to Core? Protocol revisions are negotiated per request, so a client cannot know in advance whether a server supports R. Advertising the extension lets the same client work with servers on either side of R, and the core behavior needs no negotiation once both sides are on R. Alternatives considered. - Put the stage in the repository name experimental-ext-<name , beta-ext-<name , ext-<name . It limits a repository to one stage, so an area with work at several stages needs several repositories, and it renames the repository at every stage change. See the first question above. - Put the extension first and the stage second, for example tasks/beta/spec.md . It keeps an extension’s path prefix fixed across stages, but a reader cannot list everything at one stage, and the stage sits deeper in every link. - Beta by Core Maintainer vote instead of a SEP. Lighter, but it creates a second, unwritten approval path for official extensions and leaves no written record of the design. - Give Experimental and Beta extensions a distinct identifier, for example io.modelcontextprotocol.experimental/<name . It makes the stage visible on the wire, but every stage change would force implementers to change code and identifiers. The revision setting gives most of the benefit at less cost. - Require a new identifier for every Stable breaking change SEP-2133 as written . It leaves old and new behavior coexisting indefinitely and forces both to be implemented. Keying behavior to the negotiated protocol revision reuses a mechanism the protocol already has. Prior art. Kubernetes moves features through alpha, beta and GA stages https://kubernetes.io/docs/reference/command-line-tools-reference/feature-gates/ with different stability promises and deprecation windows https://kubernetes.io/docs/reference/using-api/deprecation-policy/ , which SEP-2596 https://modelcontextprotocol.io/seps/2596-spec-feature-lifecycle-and-deprecation already cites. OpenTelemetry Collector components carry development, alpha, beta and stable stability levels https://github.com/open-telemetry/opentelemetry-collector/blob/main/docs/component-stability.md . The Node.js Stability Index https://nodejs.org/api/documentation.html stability-index marks APIs as experimental or stable, among other levels. Backward Compatibility This SEP changes process only, and changes no message on the wire. - It replaces the identifier rule and the creation, iteration and promotion steps of SEP-2133 with the rules above. - No repository is renamed, so repository URLs, package names and module paths do not change. - Existing Experimental repositories are unchanged. - ext-skills , ext-tasks and ext-server-card are classified as Beta. Their identifiers and wire behavior do not change. Their specifications move to specification/beta/ , which breaks links to the old paths on the default branch. - ext-apps and ext-auth are classified as Stable, and their specifications move to specification/stable/ . From Final, changes to their published specifications wait for a core protocol revision. Security Implications Experimental and Beta extensions iterate without Core Maintainer review, so an insecure design can be implemented before anyone with security expertise reads it. The controls are: - Extensions stay disabled by default at every stage, so an implementer opts in deliberately. - Beta entry requires an Extensions Track SEP, including its Security Implications section, and Stable entry requires a second full SEP review. - An extension enters specification/beta/ or specification/stable/ only through a pull request that a Core Maintainer approves, so an extension cannot show a stage that no SEP has granted. - Stable changes take effect only with a core protocol revision, and are visible in draft/ beforehand. - Core Maintainers keep the authority to archive an extension at any stage, for example when a vulnerability is reported. revision setting, where present, lets a peer refuse a revision it does not know. Reference Implementation This is a Process SEP and has no protocol implementation. On reaching Final it lands the documentation changes and directory moves listed in Transition transition .