We Checked 61 Official MCP Servers Against the Auth Spec
An external audit of 61 official remote MCP servers requiring login found that all implement HTTP 401 challenges and PKCE with S256, but adoption of newer parts of the 2026-07-28 MCP authorization spec lags: only 25 adve…