IBL News | New York
The MCP (Model Context Protocol) — the open standard that became the bridge between AI agents and software — got its largest update this week since Anthropic released it in 2025, with the goal of making agentic AI ready for massive enterprise production deployments.
The update, released under the stewardship of Linux Foundation’s Agentic AI Foundation (AAIF), hardens MCP’s authentication model against a known class of attacks and lets organizations run MCP servers behind standard load balancers using the Kubernetes and cloud-native DevOps tooling they already operate.
“It’s probably the biggest change we’ve ever made to the protocol, and with that, it’s a big step up in maturing it for use by really big players,” said David Soria Parra, MCP’s co-creator and a lead maintainer at Anthropic.
The stateless architecture of the new release is key to running AI agents at enterprise scale because, under the old design, an MCP client had to maintain a persistent session with a specific server instance, making that requirement poison.
The new capability enables any MCP client to speak to a load balancer that connects with any server.
For most developers, migration should be nearly painless, because the vast majority of the ecosystem builds on official SDKs in TypeScript, Python, C#, Rust, Java, and other languages.
The release also ships significant authorization hardening, aligning MCP’s auth specification with how OAuth 2.0 and OpenID Connect are actually deployed in practice.
It will be a 12-month deprecation policy to give enterprises and developers stability.