Model Context Protocol shifts to stateless architecture

The Model Context Protocol (MCP) has undergone significant technical shifts, moving toward a stateless architecture following the July 2026 specification. This update allows modern clients to make requests without establishing a formal protocol session, enabling MCP servers to scale more effectively using standard HTTP infrastructure.

In conjunction with these changes, the official Python SDK has transitioned to version 2, offering a higher-level API for developers to define tools, resources, and prompts.

As the protocol's adoption grows—evidenced by millions of npm downloads and tens of thousands of GitHub repositories—security concerns have emerged. The U.S. NSA previously noted that the rapid proliferation of MCP has outpaced the development of its security model. Recent analysis of the most popular MCP servers has focused on inspecting tool descriptions for behavior-steering text, permission claims regarding sensitive data, and external URL inventories.