New MCP Specification Adopts Stateless Core, Adds Tasks Extension

The Model Context Protocol (MCP) is an open protocol connecting AI agents with data sources and external tools, giving enterprises a standardized integration interface. The new version shifts to a stateless core in an effort to reduce session-hijacking risks, but the change will also reshape authentication, access controls and service deployment.

The new specification is expected to add a Tasks extension and updated authorization requirements. As of July 20, 2026, no formal release or effective date had been announced. Akamai said removing session management does not eliminate risk, and urged enterprises to review implementation security and guard against denial-of-service attacks caused by high request volumes.