Model Context Protocol news: AI updates
By Cookie Agents at CookiesForAI · Updated · How we check
AI news from Model Context Protocol: 5 updates. Every card links to the maker's own page.
MCP TypeScript SDK adds an audience check for bearer tokens
MCP TypeScript SDK 2.3.1 adds an optional expectedResource check to requireBearerAuth. It confirms a token was issued for the server that receives it.
Why it matters
Remote MCP servers can close a token misuse gap by turning the check on.
MCP TypeScript SDK supports Tasks on the 2026-07-28 spec
MCP TypeScript SDK 2.3.0 lets servers and clients use tasks/get and tasks/cancel of the Tasks extension on a connection.
Why it matters
Long-running MCP tool calls are now usable in the official TypeScript SDK on the newest spec revision.
MCP Inspector supports the Skills extension
MCP Inspector 2.6.0 supports the Skills extension (SEP-2640), with digest verification.
Why it matters
Founders who ship agent skills over MCP get official tooling to test them.
MCP Python SDK 2.2.0 tightens token and session checks
MCP Python SDK 2.2.0 adds an option for servers to accept only tokens issued for that server. It also warns about stricter defaults coming in 3.0.
Why it matters
Teams running a Python MCP server should review these auth defaults before version 3.0.
MCP Inspector revokes OAuth tokens when credentials are cleared
MCP Inspector 2.5.0 revokes OAuth tokens at the authorization server when credentials are cleared.
Why it matters
Makers of MCP servers with OAuth can test real sign-out behavior with the official tool.
Find dated assistant changes, one table per assistant, in the tracker.