MCP 2026-07-28 Moves to a Stateless Core as Claude Rolls Out Support
Anthropic says the MCP 2026-07-28 specification moves the Model Context Protocol from a bidirectional stateful design to a request/response model, adds versioned extensions for MCP Apps and Tasks, and aligns authorization with production OAuth 2.0 and OIDC deployments.
Anthropic says the MCP 2026-07-28 specification is live, moving the Model Context Protocol from a bidirectional stateful protocol to a request/response model with a stateless core. The Claude developer account says the change makes remote MCP servers easier to deploy and scale. (ClaudeDevs on X)
The announcement is the fifth MCP specification release. Anthropic says support is being rolled out across Claude products, so the protocol update is both an infrastructure change for MCP developers and a forthcoming product-surface change for Claude users. (Anthropic's MCP announcement)
What changed in the protocol
The headline change is the shift away from a bidirectional stateful design. Anthropic says the new request/response model introduces a stateless core, allowing servers to deploy on serverless and edge infrastructure without carrying the same stateful assumptions into every connection. (Anthropic's MCP announcement)
The release also puts MCP Apps and Tasks under a versioned extensions framework. Anthropic describes that framework as a formal path for adding capabilities such as interactive interfaces and long-running work without changing the core protocol. (Anthropic's MCP announcement)
For users, MCP Apps can render interactive UI directly inside a conversation. Anthropic says users can see what a connector is doing and work with it inline instead of switching tabs. (Anthropic's MCP announcement)
Authentication is aimed at production deployments
MCP authorization now aligns with production OAuth 2.0 and OIDC deployments. Anthropic says MCP servers can connect to enterprise identity systems such as Entra and Okta without the workarounds that were previously needed. (Anthropic's MCP announcement)
Anthropic also describes enterprise-managed auth for MCP connectors. An administrator can authorize a connector once, users can inherit access through existing identity-provider groups, and the connector can be connected on first login. The page presents this as zero-touch setup for the end user. (Anthropic's MCP announcement)
What it means for Claude builders
If you maintain an MCP server, the stateless core is the architectural change to investigate first. Serverless and edge deployment can simplify operations, but the right migration plan depends on how your server currently handles sessions, request state, retries, and authorization.
If your integration needs a UI or work that continues beyond one request, MCP Apps and Tasks provide a versioned extension path rather than requiring a change to the core protocol. The practical question is whether your client surface and deployment target support the extension you want to use.
Anthropic also lists MCP tunnels as a research preview. The tunnels connect Claude to MCP servers inside a private network without exposing those servers to the public internet, inbound firewall rules, public endpoints, or IP allowlisting on the origin. (Anthropic's MCP announcement)
Rollout status and ecosystem scale
Anthropic says support for MCP 2026-07-28 is rolling out across Claude products rather than claiming that every surface has switched over. Its announcement says Claude's connectors directory lists more than 950 MCP servers, used by millions of people every day. (Anthropic's MCP announcement)
For teams, the near-term action is to read the 2026-07-28 specification, review the state and auth assumptions in existing servers, and watch the Claude product surfaces where you need MCP Apps, Tasks, or enterprise-managed connectors. The protocol is live, but product support is still in rollout.
Read next
Related coverage- Claude
Claude Managed Agents Add Self-Hosted Sandboxes (Public Beta) and MCP Tunnels (Research Preview)
Anthropic says Claude Managed Agents can now run tool execution in a sandbox you control (public beta) and connect to private MCP servers via MCP tunnels (research preview). The update targets enterprise security requirements by keeping execution and private services within an organization's perimeter.
- Claude
Claude Makes Enterprise-Managed Auth for MCP Connectors Generally Available
Anthropic says enterprise-managed auth for MCP connectors is now generally available. Claude Team and Enterprise admins can centralize authorization through their identity provider, while users receive connector access automatically without individual OAuth consent flows.
- Claude
Claude Security Brings Mythos Scans to Enterprise Customers, Now on Mythos 5.1
Claude Security scans now run on Claude Mythos 5.1 for all Claude Enterprise customers; they moved there from Mythos 5, which powered them from August 21. The public-beta product scans connected codebases, returns CWE, confidence, severity, and suggested-fix details, and opens fixes in Claude Code on the web without exposing the Mythos model directly.
- Claude
Claude Opens a Plugin Directory Submission Portal for MCP and Skills
Anthropic launched a Claude directory submission portal on September 25, 2026. Developers on paid Claude plans can submit a remote MCP connector or a GitHub-hosted plugin bundle that packages MCP servers and skills, follow validation and safety review, publish approved versions, and see listing and usage analytics.
Sources
- ClaudeDevs announcement: https://x.com/ClaudeDevs/status/2082164248697069935
- Anthropic MCP 2026-07-28 announcement: https://claude.com/blog/bringing-mcp-2026-07-28-to-claude
Frequently Asked Questions
What changed in MCP 2026-07-28?
Anthropic says the fifth MCP specification release moves the protocol from a bidirectional stateful design to a request/response model with a stateless core, adds versioned extensions for MCP Apps and Tasks, and aligns authorization with OAuth 2.0 and OIDC deployments.
What does the stateless MCP core mean for developers?
Anthropic says MCP servers can now deploy on serverless and edge infrastructure, simplifying how teams build and scale remote servers for Claude.
Is MCP 2026-07-28 already supported in Claude?
Anthropic says support is being rolled out across Claude products and is rolling out soon. The announcement does not present the rollout as complete across every Claude surface.