Stateless MCP 2026-07-28 Specification Update (Informational)
First seen Aug 1, 2026 · Updated Aug 1, 2026
This article is a blog post by Simon Willison describing the new stateless MCP (Model Context Protocol) specification released 2026-07-28, which simplifies client/server implementation by collapsing session initialization and tool calls into a single HTTP request. It is a descriptive, non-adversarial piece about protocol design changes and tooling (mcp-explorer) built to interact with MCP servers; it does not describe any exploit, vulnerability, or attack.
Technical Analysis
The content explains the difference between legacy stateful MCP (requiring an initialize call to obtain an Mcp-Session-Id followed by a separate tools/call request) and the new stateless variant, which embeds method, tool name, and client info headers/metadata into a single request without server-side session state. This is a legitimate architectural simplification intended to ease scalability and reduce implementation complexity for both clients and servers. No malicious payloads, injection vectors, or abuse techniques are discussed; the author's own commentary about shell/curl-based agent harnesses being 'fraught with risk' is a general risk observation, not a specific threat report tied to this update.
Affected Systems
mcp-explorer, datasette-mcp; protocols: MCP
Detection Signatures
- N/A - no attack indicators present in this content; this is a protocol specification announcement, not an incident report.
Remediation Steps
- 1
No action required
This is informational content about a protocol update. Security teams may wish to review the stateless MCP spec for its own security implications (e.g., loss of session-based tracking/auth context) as part of routine protocol adoption review, but no active threat requires remediation.
Respond to this threat
Pro subscribers get a full AI-generated incident-response playbook for this threat — detection, containment, eradication, and recovery steps — plus an unlimited AI Threat Advisor for questions about your environment.