2026-07-27
MCP's 2026-07-28 revision removes sessions, the initialize handshake, the GET stream and resumability. Legacy HTTP+SSE is deprecated, not removed. What that means for your server, with the exact status codes and headers.
Articles tagged: Security
AI-assistant and MCP security from Calmara — tool poisoning, leaked tokens, audit trails, and how to vet what you connect before you trust it.
The July 28 MCP revision breaks both eras: what to fix in your server
Is MCP safe? The security risks AI assistants don't mention
2026-07-05
MCP servers can poison AI tool calls, leak credentials, and hijack accounts. Peer-reviewed 2026 research shows what's at risk and how to defend it.