Today is the day, MCP is launching the next version of the spec! The 2026-07-28 version brings a bunch of exciting changes like statelessness, but I'm focused on the boring auth side of things that nobody wants to deal with!
• Issuer validation (RFC 9207) • Refresh token and offline_access recommendations • Scope clarifications • Syncing with RFC 8414 .well-known URI
In the mean time, there's been a ton of excitement around MCP's Enterprise-Managed Auth extension, with a beta program running in Claude and Okta and new MCP servers shipping support by the day!
Join me at the MCP spec release party in London tonight to learn about what's new in enterprise MCP security!
{
"type": "entry",
"published": "2026-07-28T14:19:39+01:00",
"url": "https://aaronparecki.com/2026/07/28/15/mcp-spec",
"category": [
"mcp",
"oauth",
"okta",
"ai"
],
"syndication": [
"https://www.linkedin.com/feed/update/urn:li:activity:7487859368864923649/"
],
"content": {
"text": "Today is the day, MCP is launching the next version of the spec! The 2026-07-28 version brings a bunch of exciting changes like statelessness, but I'm focused on the boring auth side of things that nobody wants to deal with! \n\n\u2022 Issuer validation (RFC 9207) \n\u2022 Refresh token and offline_access recommendations \n\u2022 Scope clarifications \n\u2022 Syncing with RFC 8414 .well-known URI \n\nIn the mean time, there's been a ton of excitement around MCP's Enterprise-Managed Auth extension, with a beta program running in Claude and Okta and new MCP servers shipping support by the day! \n\nJoin me at the MCP spec release party in London tonight to learn about what's new in enterprise MCP security! \n\nhttps://luma.com/klu2tegz",
"html": "Today is the day, MCP is launching the next version of the spec! The 2026-07-28 version brings a bunch of exciting changes like statelessness, but I'm focused on the boring auth side of things that nobody wants to deal with! <br /><br />\u2022 Issuer validation (RFC 9207) <br />\u2022 Refresh token and offline_access recommendations <br />\u2022 Scope clarifications <br />\u2022 Syncing with RFC 8414 .well-known URI <br /><br />In the mean time, there's been a ton of excitement around MCP's Enterprise-Managed Auth extension, with a beta program running in Claude and Okta and new MCP servers shipping support by the day! <br /><br />Join me at the MCP spec release party in London tonight to learn about what's new in enterprise MCP security! <br /><br /><a href=\"https://luma.com/klu2tegz\"><span>https://</span>luma.com/klu2tegz</a>"
},
"author": {
"type": "card",
"name": "Aaron Parecki",
"url": "https://aaronparecki.com/",
"photo": "https://aperture-media.p3k.io/aaronparecki.com/41061f9de825966faa22e9c42830e1d4a614a321213b4575b9488aa93f89817a.jpg"
},
"post-type": "note",
"_id": "49056191",
"_source": "16"
}
{
"type": "event",
"name": "\ud83d\uddd3\ufe0f Bizzo! & Friends",
"published": "2026-07-27T21:30:00-0500",
"start": "2026-07-27T21:30:00-0500",
"url": "https://martymcgui.re/2026/07/27/bizzo--friends/",
"featured": "https://res.cloudinary.com/schmarty/image/fetch/w_960,c_fill/https://media.martymcgui.re/0d/c0/75/67/f78809fec45b5bdfe5270dc45752cf927adc17f0c1ffdc784235785d.jpg",
"category": [
"improv",
"show"
],
"location": {
"type": "card",
"name": "The RAT NYC",
"url": "https://www.theratnyc.com/"
},
"content": {
"text": "Bizzo and Friends brings together some of the best improv in New York City, hosted by local faves Bizzo!\nFor our July show, we are planning some fun surprises for one team member\u2019s birthday, so come join the fun.\nCome on out to see Bizzo! And also friends! I\u2019ll be playing with Bizzo!!\nDetails: https://events.ticketleap.com/tickets/bizzoandfriends/bizzo-amp-friends",
"html": "<p>Bizzo and Friends brings together some of the best improv in New York City, hosted by local faves Bizzo!</p>\n<p>For our July show, we are planning some fun surprises for one team member\u2019s birthday, so come join the fun.</p>\n<p>Come on out to see Bizzo! And also friends! I\u2019ll be playing with Bizzo!!</p>\n<p>Details: <a href=\"https://events.ticketleap.com/tickets/bizzoandfriends/bizzo-amp-friends\">https://events.ticketleap.com/tickets/bizzoandfriends/bizzo-amp-friends</a></p>"
},
"author": {
"type": "card",
"name": "Marty McGuire",
"url": "https://martymcgui.re/",
"photo": "https://martymcgui.re/images/logo.jpg"
},
"post-type": "event",
"_id": "49054036",
"_source": "175"
}
Well, that was a lousy race for Ferrari. Bad strategy, bad pace, bad driving, and bad luck. I probably shouldn’t complain, but after FP1 and FP2, it seemed the pace was there to get the top two steps of the podium. Alas, we head into the summer break with a stinker. Demoralizing. #F1
{
"type": "entry",
"published": "2026-07-26T18:42:28.576635+00:00",
"url": "https://cleverdevil.io/2026/well-that-was-a-lousy-race-for-ferrari-b",
"syndication": [
"https://cleverdevil.club/@jonathan/116987746631989595",
"https://bsky.app/profile/cleverdevil.io/post/3mrkzvwf7rd2d"
],
"content": {
"text": "Well, that was a lousy race for Ferrari. Bad strategy, bad pace, bad driving, and bad luck. I probably shouldn\u2019t complain, but after FP1 and FP2, it seemed the pace was there to get the top two steps of the podium. Alas, we head into the summer break with a stinker. Demoralizing. #F1",
"html": "<p>Well, that was a lousy race for Ferrari. Bad strategy, bad pace, bad driving, and bad luck. I probably shouldn\u2019t complain, but after FP1 and FP2, it seemed the pace was there to get the top two steps of the podium. Alas, we head into the summer break with a stinker. Demoralizing. #F1</p>"
},
"author": {
"type": "card",
"name": "Jonathan LaCour",
"url": "https://cleverdevil.io",
"photo": "https://cleverdevil.io/profile/photo"
},
"post-type": "note",
"_id": "49039332",
"_source": "10"
}
