New Enterprise-Ready MCP Specification Brings New Security Challenges

▤ Summary

MCP is moving from a single-user integration tool to an enterprise-ready protocol for cloud-native AI deployments. The new specification adds stateless operation, new HTTP headers, and long-running tasks, which changes where security responsibility sits. Akamai highlights both improvements and new risks, including workflow hijacking, data leakage, cross-tenant access, and denial-of-service exposure. Enterprises now need to review implementations, validate SDK and client changes, and harden MCP servers before the final release and deprecation window.

▦ Linked Companies