Model Context Protocol (MCP) Receives Major Upgrade, Fully Transitions to Stateless Architecture

July 29th, according to VentureBeat, the Model Context Protocol (MCP) has received its largest update since its launch in November 2024, managed by the Agentic AI Foundation (AAIF) under the Linux Foundation. This update completes the transition to a fully stateless architecture, allowing MCP servers to be deployed behind standard load balancers without relying on "sticky routing" or shared session states, thereby simplifying large-scale cloud-native and Kubernetes deployments. In terms of security, the new MCP version enforces the validation of the issuer (iss) parameter for OAuth and OpenID Connect to prevent mix-up attacks and introduces an enterprise-hosted authorization extension to support unified enterprise identity governance. The protocol also establishes a formal deprecation policy, ensuring a minimum of 12 months between the announcement of deprecation and the earliest removal of features. MCP Apps and MCP Tasks have also been upgraded to official extensions, supporting servers in providing interactive interfaces to AI clients and executing interruptible, resumable long-running asynchronous tasks via persistent task handles, respectively. According to MCP co-creator David Soria Parra, related SDK weekly downloads have reached approximately 250 million, doubling in the past six months.