Extensions are also first-class — a formal path to extend the protocol. Examples: 1. MCP Apps: server-rendered UIs in a sandboxed iframe 2. Tasks: long-running and async operations 3. Enterprise Managed Auth: control MCP server access centrally via your identity provider
