MCP News: Every Major Update, Tracked (July 2026)

MCP news in 2026 is dominated by three stories: the 2026-07-28 specification release candidate that makes the Model Context Protocol stateless (the largest revision since launch, finalizing July 28, 2026), MCP Apps shipping as the first production-ready extension on January 26, 2026, and the protocol's December 2025 move from Anthropic to the Linux Foundation's new Agentic AI Foundation. This page is a dated, reverse-chronological record of verified MCP ecosystem developments, spec revisions, registry milestones, adoption news, and security research, and it gets refreshed as new items ship. Alongside it we maintain a live directory of 13,870 MCP servers and a free JSON API over that directory.

How to Read This Page

This page lists MCP news newest first, with each entry giving the date, what happened, why it matters, and a primary source link. It covers the four threads that actually move the ecosystem: specification revisions, the official registry and governance, adoption by major platforms, and security research. Minor SDK patches and individual server releases live elsewhere; for those, browse the official MCP blog or search our server directory, which tracks 13,870 servers across 14 categories.

If you are new to the protocol itself, our MCP vs API integrations explainer and best MCP servers ranking are better starting points, then come back here to stay current.

Latest MCP News (2026)

The first half of 2026 delivered the biggest protocol revision since MCP launched, the first production extension, and managed MCP offerings from both AWS and Google Cloud. Entries run newest first.

June 29, 2026: Beta SDKs ship for the 2026-07-28 spec

What happened: All four Tier 1 SDKs shipped betas targeting the upcoming spec revision: Python v2, TypeScript v2, Go v1.7.0-pre.1, and C# v2.0.0-preview.1, per the official announcement.

Why it matters: Server and client authors can start migrating to the stateless protocol now, a month before the spec finalizes on July 28, 2026.

June 18, 2026: Enterprise-Managed Authorization goes stable

What happened: The Enterprise-Managed Authorization extension reached stable, enabling zero-touch OAuth for MCP servers through Identity Assertion JWT grants during SSO, with Okta as the first identity provider and Claude and VS Code as launch clients, per the MCP blog. Launch servers included Asana, Atlassian, Canva, Figma, Linear, and Supabase.

Why it matters: Enterprise IT can now grant agents access to SaaS MCP servers through existing SSO instead of per-user OAuth dances, removing the biggest blocker to org-wide MCP rollouts.

May 21, 2026: The 2026-07-28 spec release candidate lands

What happened: The largest MCP revision since launch was locked as a release candidate, finalizing July 28, 2026. Headline changes from the official RC post: a stateless protocol core that removes the initialize handshake and session IDs, new Mcp-Method and Mcp-Name headers so gateways and load balancers can route without parsing bodies, caching metadata, extensions as first-class citizens with independent versioning, six authorization SEPs, and a formal deprecation policy. Roots, Sampling, and Logging are deprecated (working until at least mid-2027).

Why it matters: Stateless MCP is built for scale-out infrastructure. It is the clearest signal yet that the protocol expects MCP gateways, load balancers, and serverless deployments to be the norm rather than single long-lived connections.

May 6, 2026: AWS MCP Server reaches general availability

What happened: AWS made its managed remote MCP Server generally available, exposing 15,000+ API operations across AWS services through a call_aws tool plus documentation search and sandboxed scripting, free beyond the resources you use, per the AWS News Blog.

Why it matters: A hyperscaler running MCP as a managed, GA service moves the protocol firmly out of the experimental column for enterprise buyers.

April 29, 2026: Google Cloud ships 50+ managed MCP servers

What happened: At Next '26, Google Cloud announced 50+ Google-managed MCP servers across BigQuery, Cloud Run, GKE, Spanner, Google Workspace, and Maps, with Cloud IAM integration and prompt-injection defense via Model Armor, per Google Cloud's announcement.

Why it matters: Together with AWS's GA, both major clouds now treat MCP servers as first-party product surface rather than community add-ons.

April 16, 2026: STDIO transport security research

What happened: Ox Security published research arguing that MCP's STDIO transport enables command execution by design, estimating around 200,000 exposed servers across popular packages; Anthropic responded that the behavior is expected and issued hardening guidance rather than a protocol change, as covered by The Register.

Why it matters: Local MCP servers run with your permissions, full stop. Treat server installation like installing any executable; our guide to securing MCP connections covers the practical defenses.

March 9, 2026: The official 2026 roadmap

What happened: Lead maintainer David Soria Parra published the 2026 MCP roadmap with four priorities: transport scalability (the stateless work), agent communication via refined Tasks, governance maturation, and enterprise readiness delivered as extensions.

Why it matters: Everything that shipped in H1 2026 traces back to this document, which makes it the best single predictor of what lands next.

January 26, 2026: MCP Apps becomes the first production extension

What happened: MCP Apps (SEP-1865, co-authored by Anthropic and OpenAI maintainers) went live as the first official production-ready MCP extension, letting tools return interactive UI, dashboards, forms, and visualizations rendered in sandboxed iframes via ui:// resources. Launch clients included Claude on web and desktop, Goose, and VS Code Insiders, with ChatGPT following the same week, per the official announcement.

Why it matters: MCP servers stopped being text-only. Tool results can now carry the interface with them, which collapses a whole category of "chat plus separate dashboard" products into single MCP servers.

2024-2025 Milestones: How MCP Got Here

MCP went from an Anthropic side release to industry standard in thirteen months. The dates that mattered:

• December 9, 2025: Anthropic donated MCP to the new Agentic AI Foundation under the Linux Foundation, alongside Block's goose and OpenAI's AGENTS.md, with AWS, Google, Microsoft, Bloomberg, and Cloudflare as platinum members.
• November 25, 2025: The 2025-11-25 spec revision shipped on MCP's first anniversary: experimental async Tasks, OAuth improvements, icons metadata, and the extensions framework. The official registry passed roughly 2,000 entries, up 407% since September.
• November 21, 2025: The MCP Apps extension was announced jointly by Anthropic and OpenAI maintainers, building on MCP-UI and the OpenAI Apps SDK.
• October 6, 2025: OpenAI launched the Apps SDK at DevDay, explicitly built on MCP.
• September 8, 2025: The official MCP Registry opened in preview at registry.modelcontextprotocol.io, a metadata-only index with reverse-DNS namespacing, backed by Anthropic, GitHub, PulseMCP, and Microsoft.
• June 18, 2025: Spec revision 2025-06-18: elicitation, structured tool output, OAuth resource-server classification, and a dedicated security best practices page.
• May 19, 2025: Microsoft announced native MCP support in Windows 11 at Build 2025.
• April 9, 2025: Google DeepMind committed Gemini models and SDKs to MCP; Demis Hassabis called it "rapidly becoming an open standard for the AI agentic era."
• March 26, 2025: OpenAI adopted MCP across its products, and spec revision 2025-03-26 introduced streamable HTTP transport and OAuth 2.1 authorization.
• November 25, 2024: Anthropic open-sourced MCP with SDKs, reference servers, and early adopters including Block, Zed, Replit, and Sourcegraph.

MCP by the Numbers

The most citable MCP figures come from the Linux Foundation's December 2025 announcement and the official anniversary post; mid-2026 totals are directory-level measurements. Key numbers with their sources and dates:

No official mid-2026 SDK download or server-count refresh has been published; when one lands, it will appear here.

Where to Follow MCP News

Four sources cover essentially all primary MCP news: the official MCP blog for spec, registry, and governance announcements, the specification changelog for exact protocol diffs, the modelcontextprotocol GitHub org for SDK releases, and vendor engineering blogs (AWS, Google Cloud, Docker) for platform adoption.

For discovering what all this news produces, our MCP directory tracks 13,870 servers with categories, stars, and install commands, and the free directory API exposes the same data as keyless, CORS-enabled JSON if you want to build on it. Broader curation options are compared in our MCP server directories roundup.

Limitations

This is a curated community record, not the official one: dates are drawn from primary announcements wherever possible, but always verify spec details against modelcontextprotocol.io before building on them. Two specific cautions as of July 2026: the official registry is still in preview with breaking changes possible before GA, and any "total MCP server" count depends heavily on who is counting and how duplicates are handled, which is why the table above dates every figure.

Related Guides

• Best MCP Servers in 2026: The Complete Ranked List
• MCP Gateway: What It Is and the Real Options in 2026
• Claude Code MCP: How to Add and Manage MCP Servers
• Best MCP Server Directories in 2026