MCP Releases Stateless Core Spec with Enterprise Extensions and Security Upgrades

Model Context Protocol (MCP) released a candidate specification on 2026-07-28, the largest upgrade since its launch. The core change shifts from stateful sessions to a stateless request/response model, removing the initialize handshake and session, making all requests self-contained with multi-round trip (MRTR) semantics. This allows remote MCP servers to be deployed directly on serverless and edge infrastructure and horizontally scaled via any load balancer, significantly reducing the complexity of distributed agent architectures. The Transport Working Group co-led by Google Cloud contributed to this work.

Confirmed

• Stateless Core: Session state requirements are removed; servers become default stateless HTTP workloads, no longer needing sticky sessions or Redis. Cloudflare is considered an ideal hosting environment.
• New Features and Framework: The spec adds and strengthens the Extensions framework, Tasks, and MCP Apps, supports server-side rendering of interactive UI, and introduces multi-language SDK v2.0.
• Security and Governance: Authentication mechanisms (e.g., default CIMD identity) and authorization models are enhanced, with a formal 12-month deprecation policy to meet enterprise security and compliance needs.
• Adoption Scale: MCP SDK weekly downloads exceed 250 million, indicating it is rapidly becoming foundational infrastructure for enterprise AI agents.

Unconfirmed

• Enterprise Authentication Challenges: Author Ecocitivanz notes that the stateless design may introduce complex authentication challenges for enterprise security teams, potentially blocking deployment.
• Client Adaptation Timeline: Author xeophon points out that the new version (referred to by some as v2 or v5) includes many breaking changes, and existing clients and servers may take considerable time to achieve full compatibility.

Why it matters

The stateless transformation of MCP removes the core scalability bottleneck, significantly lowering the barrier and infrastructure cost for deploying distributed AI agents. By completing enterprise-grade security and governance frameworks, MCP is evolving from a cutting-edge technology into a mature, deployable industry standard.

2026-07-28 ~ 2026-07-30 · 27 related posts

Full story(4 episodes)→

• Episode 1: MCP Protocol's Largest Update: Shifting to Stateless on July 28(2026-07-22, 9 posts)
• Episode 2: MCP Releases Stateless Core Spec with Enterprise Extensions and Security Upgrades(2026-07-28, 27 posts)
• Episode 3: DBHub Upgrades to Latest MCP Spec: Engineering Practices(2026-07-29, 2 posts)
• Episode 4: MCP Protocol Undergoes Major Refactor: Shift to Stateless Architecture(2026-07-30, 5 posts)

• MCP Protocol's Largest Update: Moves to Stateless Core, Introduces Server-Rendered UIs — tristanbob · 2026-07-28
• [source] MCP’s next spec makes the core stateless and ships July 28 with Tasks and MCP Apps — burkov · 2026-07-28
• MCP update goes stateless to remove scaling bottlenecks and tighten security — CackleRooster · 2026-07-28
• MCP passes 250M weekly SDK downloads as major enterprise update adds stateless auth — MichaelFNunez · 2026-07-28
• Anthropic ships MCP’s biggest update yet, making the protocol stateless — thesaraharminta · 2026-07-29
• MCP goes stateless, enabling serverless and edge deployments behind load balancers — EricBuess · 2026-07-29
• [source] Major MCP Update: Introduces Stateless Architecture, Enterprise Extensions, and SDK v2.0 — dsp_ · 2026-07-29
• Agentic AI Foundation updates MCP with stateless architecture and 12-month deprecation policy — MichaelFNunez · 2026-07-29
• Netlify says the new MCP spec makes servers stateless and easier to ship — thisiskp_ · 2026-07-29
• New MCP Spec Introduces Stateless Core for Enhanced Reliability — rseroter · 2026-07-29
• MCP spec update lands as benchmark shows models still depend heavily on docs — craigsdennis · 2026-07-29
• MCP Protocol Launches Major Update: Full Support for Stateless Remote Deployment — EricBuess · 2026-07-29
• MCP v5 adds interactive UI, stateless serverless support and enterprise auth — aigclink · 2026-07-29
• Anthropic’s MCP overhaul goes stateless as monthly SDK downloads top 400 million — 新智元 · 2026-07-29
• MCP’s 2026-07-28 spec removes sessions and adds stateless multi-round-trip requests — CraftyScore4348 · 2026-07-29
• Anthropic rewrites MCP to make servers cloud-friendly and stateless — xiaohu · 2026-07-29
• Anthropic makes MCP stateless to simplify scaling remote agent servers — rohanpaul_ai · 2026-07-29
• MCP shifts to a stateless protocol to ease large-scale AI agent deployments — lee_stott · 2026-07-29
• MCP 2026-07-28 spec goes stateless to scale agent servers — lee_stott · 2026-07-29
• MCP goes stateless, making serverless deployments and scale-to-zero much easier — Arindam_1729 · 2026-07-29
• MCP 2026-07-28 drops sessions and aligns the protocol with static sites — VeryWellVersed · 2026-07-29
• MCP v2 introduces massive breaking changes, client adaptation may take ages — xeophon · 2026-07-29
• ClaudeDev says stateless MCP can now run on serverless and edge infrastructure — IndraVahan · 2026-07-29

4 near-duplicate retellings: rseroter · dfinke · breath_mirror · lee_stott