News · Breaking

MCP Python SDK 2.2.0 · origin redirects, 30 min idle, OAuth issuer

By NO FEEDEdition date 8 September 2026

Origin-only redirect following; 30-minute idle session expiry on legacy Streamable HTTP; 10k session cap; OAuth issuer match on the legacy path. Docs: py.sdk.modelcontextprotocol.io. Twin defaults on 1.30.0.¹²

Relevant to: Anyone hosting or calling MCP over HTTP with the official Python SDK

What the verdict meansWill break existing code: deprecation or API change.

Sources

github — modelcontextprotocol/python-sdk v2.2.0 · read 8 September 2026
github — modelcontextprotocol/python-sdk v1.30.0 · read 8 September 2026

Originally part of the 8 September 2026 edition.

Sources

The useful part, in your inbox.