Model Context Protocol maintainers · Jul 2026 · protocol release
MCP specification, 2026-07-28 release
Authorization hardening in the protocol itself: RFC 9207 issuer validation, a formal shift from Dynamic Client Registration to client metadata documents, Enterprise Managed Authorization as an extension, and a twelve-month minimum deprecation window.
Source: modelcontextprotocol.io↗
Other MCP guidance
- Careful Adoption of Agentic AI Services CISA, NSA, ACSC, CCCS, NCSC-UK, NCSC-NZ · advisory guidance
- Managing the cyber risk of agentic AI NCSC-UK · advisory guidance
- MCP Top 10 OWASP · risk list
- Secure MCP Server Development OWASP GenAI Security Project · guide
- Third-Party MCP Servers CheatSheet OWASP GenAI Security Project · cheat sheet
- MCP-Security-Checklist SlowMist · checklist