Today is the day, MCP is launching the next version of the spec! The 2026-07-28 version brings a bunch of exciting changes like statelessness, but I'm focused on the boring auth side of things that nobody wants to deal with!

• Issuer validation (RFC 9207)
• Refresh token and offline_access recommendations
•... aaronparecki.com