MCP’s Auth Hardening: What the Six New OAuth SEPs Fix, and What They Still Don’t

In short, the MCP 2026-07-28 release candidate is getting attention for going stateless. The quieter story is a package of six SEPs that harden the protocol’s OAuth layer: issuer validation, credential binding, client type declaration,… The post MCP’s Auth Hardening: What the Six New OAuth SEPs Fix, and What They Still Don’t appeared first on Tigera – Creator of Calico .