New MCP spec dropped. The big changes:
- Protocol is now stateless (request/response instead of bidirectional). You can finally deploy servers on serverless/edge without fighting the protocol.
- Extensions framework for Apps and Tasks — versioned, so you can add UIs and long-running jobs without messing with core.
- Auth is proper OAuth 2.0 / OIDC now. Entra, Okta, etc. just work.
