Episode 212: MCP Auth Grows Up: Inside the 2026-07-28 Spec
August 4, 2026 · 1 min read
Fresh off 2026-07-28 MCP spec release, there's no better time to zoom in on MCP authorization. This session focuses on how auth has grown up in the new spec. Authorization now sits cleanly on OAuth 2.1 and OpenID Connect, with hardened issuer and token validation, plus cleaner client registration and a stable Enterprise-Managed Authorization extension that eases the repeated consent prompts in enterprise deployments. From there we get honest about what is still unsolved, where agent and human identity blur, how least privilege holds up in a stateless world, and what identity teams should migrate first.
#Speakers
- Host: Mike Schwartz, Founder/CEO Gluu
- Guest: Ayesha Dissanayaka, Associate Director / Architect WSO2
#Homework
- MCP SDK betas for 2026-07-28 to see how the new spec lands in the SDKs. - https://blog.modelcontextprotocol.io/posts/sdk-betas-2026-07-28/
- Why MCP Security Matters: The New Attack Surface of Agentic AI for the threat framing behind why auth matters here. - https://medium.com/@ayshsandu/why-mcp-security-matters-the-new-attack-surface-of-agentic-ai-9fd3bd2aec92
- The Evolution of MCP Auth: Every Spec, Every Lesson, 2024-11-05 to 2026-07-28 for the full arc of how the authorization model got here. - https://medium.com/@ayshsandu/the-evolution-of-mcp-auth-every-spec-every-lesson-2024-11-05-2026-07-28-draft-e3f165a12fdb
- New MCP specification addresses the main barrier to enterprise adoption
#Takeaways
- CIMD enables stateless client onboarding, but identifies a software class—not an individual agent instance.
- The new iss check reduces mix-up attacks, but protection depends on authorization servers actually returning it.
- Declaring application_type: native prevents CLI and desktop clients from being rejected for using localhost callbacks.
- Stateless MCP removes fragile session binding, but host identity and instance-level revocation remain unfinished.