The Model Context Protocol (MCP) has undergone its biggest upgrade, fully transitioning to a stateless architecture

According to VentureBeat, the Model Context Protocol (MCP) has received its largest update since its launch in November 2024, managed by the Agentic AI Foundation (AAIF) under the Linux Foundation. This update completes the transition to a fully stateless architecture, allowing MCP servers to be deployed behind standard load balancers without relying on "sticky routing" or shared session state, thereby simplifying large-scale cloud-native and Kubernetes deployments.

In terms of security, the new version of MCP enforces validation of the issuer (iss) parameter for OAuth and OpenID Connect to prevent mix-up attacks and introduces enterprise-hosted authorization extensions to support unified identity governance for enterprises. The protocol also establishes a formal deprecation policy, ensuring that features are announced for deprecation at least 12 months before their earliest removal. MCP Apps and MCP Tasks have also been upgraded to official extensions, supporting servers in providing interactive interfaces to AI clients and executing interruptible, resumable long-running asynchronous tasks through persistent task handles. According to MCP co-creator David Soria Parra, the related SDK's weekly download volume has reached approximately 250 million, doubling in the past six months.