What changed
The 2026-07-28 MCP specification transitions the protocol from a bidirectional stateful architecture to a stateless request/response model. The initialize/initialized handshake is removed. Mcp-Session-Id is eliminated. Two new required HTTP headers โ Mcp-Method and Mcp-Protocol-Version: 2026-07-28 โ are mandatory on every Streamable HTTP request. Tier 1 SDK betas for Python, TypeScript, Go, C#, and Rust (beta) ship today as the migration path.
TL;DR
MCP is now stateless โ no more session IDs or init handshake; two new required HTTP headers per request; Multi Round-Trip Requests (MRTR) replace server-initiated sampling/elicitation/roots flows; Tier 1 SDK betas landed today; Tasks move to an extension; Roots, Sampling, and Logging deprecated with 12-month offramp.
Developer signal
This is the forcing function: the spec is now final. (1) Remove session logic: strip any server-side code that relies on initialize, initialized, or Mcp-Session-Id. Each request must now be self-describing via _meta, carrying protocol version, client identity, and capabilities inline. (2) Add required headers: every Streamable HTTP request must include Mcp-Protocol-Version: 2026-07-28, Mcp-Method, and Mcp-Name. Missing headers will cause routing failures with compliant clients. (3) Adopt Multi Round-Trip Requests (MRTR): the server-initiated patterns for elicitation/create, sampling/createMessage, and roots/list โ all of which required open streams โ are replaced by a poll-based flow: return resultType: "input_required" with the data you need, and the client retries the original call with answers in inputResponses. (4) Update Tasks: tasks/* moves out of the experimental core and into the io.modelcontextprotocol/tasks extension (poll-based tasks/get + new tasks/update). (5) Authorization hardening: RFC 9207 issuer validation is now required; validate iss before redeeming authorization codes; Dynamic Client Registration is deprecated in favor of Client ID Metadata Documents (CIMD). (6) Timeline: Tier 1 SDK betas are today's migration path. GA is expected around October 2026 after the 10-week validation window. You do not have to migrate today, but the spec is final and new servers should target it.