Vibe CodingMCP 2026 Roadmap: Server Cards, Enterprise Extensions, Working GroupsMCP Blog·high signalOfficial MCP roadmap: stateless scaling, Server Cards for capability discovery, Tasks primitive, audit trails, SSO auth, config portability.SourceSource pageMCP Blog↳ Follow the threadPolicy dependency / Update threadRoots, Sampling, and Logging are deprecated — new capabilities now ship as opt-in extensionsModel Context Protocol BlogUpdate threadThe Tasks extension rebuilds long-running work for a stateless world — the server decides what becomes a taskModel Context Protocol BlogSame source domain / Semantic neighborPattern: MCP Is Going Stateless — Session-Bound Server Designs Are Now LegacyModel Context Protocol BlogStack layer / Threat patternSnyk's Evo Agentic Development Security Hit GA June 29 — an Enforcement Layer That Polices MCP Servers and Coding Agents at RuntimeSiliconANGLEStack layer / Threat patternAWS open-sources Loom, an enterprise agent platform built on Strands Agents + Bedrock AgentCore RuntimeAWS Open Source BlogStack layer / Threat patternNSA issues official MCP hardening guidance after Amazon Q auto-execution CVEs (CVSS 8.5) enable AWS credential theftWizPolicy dependency / Stack layerKastra Launches Policy Enforcement for Claude Code, Cursor, and CodexHacker NewsSame source domain / Semantic neighborMCP goes stateless on July 28 — delete your session store and route on Mcp-MethodModel Context Protocol Blog