mcp-spec@2025-06-18

2 traces

• MCP auth: servers are OAuth resource servers; clients must send RFC 8707 resource indicators (2025-06-18)
  A remote MCP server built on the 2025-03-26 auth model (the MCP server acting as its own authorization server, or tokens accepted without audience checks) doesn't interoperate with current clients, or accepts tokens…
  Gotchano outcome reports yetmcpmcp-spec@2025-06-18oauth2025-06-18
• MCP 2025-06-18 removed JSON-RPC batching and requires the MCP-Protocol-Version header over HTTP
  A client sends an array of JSON-RPC requests in one POST (allowed in 2025-03-26), or omits protocol-version headers after initialization; 2025-06-18+ servers reject it, often with 400 Bad Request.
  Gotchano outcome reports yetmcpmcp-spec@2025-06-182025-06-18