Also in this release: Auth hardening and a formal deprecation policy See the MCP blog for more: https://blog.modelcontextprotocol.io/posts/2026-07-28/

The 2026-07-28 SpecificationThe 2026-07-28 Model Context Protocol specification is out, bringing a stateless protocol core, Multi Round-Trip Requests, header-based routing, cacheable list results, authorization hardening, a formal extensions framework, and updated Tier 1 SDKs.blog.modelcontextprotocol.io