{"schema_version":"newruntime-agent-readable-v0.2","type":"post","stable_id":"post:mcp-2026-stateless-core","slug":"mcp-2026-stateless-core","title":"MCP 2026 Makes The Protocol Stateless","description":"The 2026-07-28 MCP specification moves the protocol to a stateless request-response core, formalizes extensions, and hardens enterprise authorization.","retrieval_nugget":"The 2026-07-28 MCP specification moves the protocol to a stateless request-response core, formalizes extensions, and hardens enterprise authorization. MCP 2026-07-28 is a protocol reset around a smaller core. Earlier HTTP MCP deployments established a session, returned a session identifier, and expected later tool calls to preserve that state. The new core uses a direct request-response model.","status":"published","published_at":"2026-08-01","updated_at":"2026-08-01","record_date":"2026-08-01","date_kind":"published_at","topics":["mcp","protocols","authorization","agent-infrastructure"],"source_urls":["https://blog.modelcontextprotocol.io/posts/2026-07-28","https://claude.com/blog/bringing-mcp-2026-07-28-to-claude"],"visuals":[{"id":"mcp-2026-stateless-core","kind":"editorial-diagram","role":"hero","src":"https://newruntime.com/images/posts/mcp-2026-stateless-core.webp","alt":"Hand-drawn split diagram where a sticky session protocol becomes one stateless HTTP request, with apps, tasks, and enterprise authorization attached as versioned extensions.","caption":"MCP 2026 reduces the core to stateless HTTP and moves richer behavior into explicit extensions.","credit":"New Runtime synthesis from the MCP and Claude release notes","source_url":"https://blog.modelcontextprotocol.io/posts/2026-07-28","generated_with":"gemini-3.1-flash-image","width":1600,"height":900,"legend":[{"label":"Stateless core","description":"Each tool request carries the protocol information it needs without server-side session affinity."},{"label":"Extensions","description":"Apps and Tasks evolve under a versioned framework instead of expanding the core protocol."},{"label":"Authorization","description":"OAuth 2.0, OIDC, and enterprise identity integrations become first-class deployment concerns."}]}],"routes":{"html":"https://newruntime.com/posts/mcp-2026-stateless-core/","markdown":"https://newruntime.com/posts/mcp-2026-stateless-core.md","json":"https://newruntime.com/posts/mcp-2026-stateless-core.json"},"source_format":"markdown","next_reads":[{"type":"topic","path":"/topics/mcp/","reason":"Explore the mcp topic hub.","url":"https://newruntime.com/topics/mcp/","title":"MCP - New Runtime","media_type":"text/html"},{"type":"related_material","path":"/posts/cline-hooks-agent-harness-guardrails/","reason":"Shares mcp.","url":"https://newruntime.com/posts/cline-hooks-agent-harness-guardrails/","title":"Cline Hooks Put Deterministic Rules Inside The Agent Loop","media_type":"text/html"},{"type":"related_material","path":"/posts/copilotkit-react-mcp-client-interface/","reason":"Shares mcp.","url":"https://newruntime.com/posts/copilotkit-react-mcp-client-interface/","title":"CopilotKit Brings MCP Tool Calls Into The React Interface","media_type":"text/html"},{"type":"related_material","path":"/posts/anthropic-tool-search-programmatic-calls/","reason":"Shares mcp.","url":"https://newruntime.com/posts/anthropic-tool-search-programmatic-calls/","title":"Anthropic Moves Large Tool Libraries Out Of Context","media_type":"text/html"},{"type":"related_material","path":"/posts/drskill-agent-loadout-audit/","reason":"Shares mcp.","url":"https://newruntime.com/posts/drskill-agent-loadout-audit/","title":"Dr. Skill Audits What An Agent Loads Before It Works","media_type":"text/html"}]}