The MCP SDK just shipped DPoP and scope challenges. Here's what to do about it.
The official Model Context Protocol TypeScript SDK released version 2.1.0, adding DPoP sender-constrained access tokens (RFC 9449, shipped as SEP-1932) and request-time OAuth scope challenges from the 2026-07-28 authoriz…