Connect Clawsmith to your coding agent. Ship products like crazy.Unlimited usage during betaGet API Key โ†’
โ† Back to dashboard
clawsmith.com/signal/mcp-stateless-spec-migration-compliance-scanner
โš  IssueUnderservedai_agent_mcpLive

MCP 2026-07-28 stateless spec creates six breaking changes that 7900+ production servers must migrate by July 28

The MCP 2026-07-28 Release Candidate (locked May 21, final July 28) eliminates protocol-level sessions, removes the initialize handshake, kills the Mcp-Session-Id header, mandates two new HTTP headers, changes error codes, and deprecates three first-class primitives (roots, sampling, logging). Every stateful MCP server in production must be updated before July 28 or stop working with RC-compliant clients. 7900+ MCP servers are in the ecosystem. SDK support is patchy: Tier 1 SDKs have a 10-week window, community SDKs have no guarantee. The Microsoft agent-governance-toolkit opened a Priority HIGH RFC (issue #2597, May 26, 2026) noting their entire framework will fail to interoperate with RC-compliant clients without a dual-stack shim. No tool exists that: scans a deployed MCP server or codebase for the 6 breaking changes, generates per-file diff patches for the migration, and provides a dual-stack compatibility shim that makes an old server respond correctly to both 2025-11-25 and 2026-07-28 clients during the transition window. Teams are currently hand-reading migration guides and manually rewriting server code.

Product Idea from this Signal

A static linter that audits MCP server code for 2026-07-28 stateless spec compliance and flags every breaking change before it ships

532 โ–ฒ

MCP server maintainers have no automated way to detect whether their server still uses patterns the 2026-07-28 stateless RC removed or deprecated. The RC is a breaking protocol shift: sessions are gone (Mcp-Session-Id header removed, SEP-2567), _meta fields must appear inline on requests (not stripped), three new HTTP headers are mandatory, error code -32002 maps to -32602, and three constructs are formally deprecated with a 12-month removal clock (SEP-2596). Every team that ships an MCP server must audit for all of these manually today. This tool is a CLI and CI-friendly static scanner that reads TypeScript and Python MCP server source files, traces handler registrations, and flags exactly which of these breaking or deprecation-category issues are present, with per-finding fix guidance that cites the spec section. It is not an interactive inspector (that is MCP Inspector, a different tool) and is not a generic linter (existing tools like mcp-lint validate tool schemas for cross-client compatibility, not protocol-level stateless-spec compliance). Revenue comes from a CI/team tier (per-seat or per-repo subscription) and a hosted check service where teams paste a repo URL and get a compliance report without a local install.

mcpdeveloper-toolingstatic-analysisai-agentcompliancelinterci-cd
Competitive4 leadsView Opportunity โ†’

Score Breakdown

HN
500
GitHub
32

Gap Assessment

UnderservedExisting solutions leave gaps

Hard deadline (July 28, 2026, six weeks out). 7900+ servers need migration. Microsoft opened a Priority HIGH issue for their own framework. No automated migration scanner or dual-stack shim exists as a product. Teams are doing this by hand. The existing web app idea in the DB is positioned as a planning aid; this signal is about an automated code-level scanner and shim that generates migration patches. Differentiated enough to be a distinct product.