The Stack
How to Make Your MCP Client Pass the 2026-07-28 Auth Checks: the iss Validation That 401s You Next Week
The stateless rewrite got the headlines; the auth hardening is what will break your integration on July 28. Three client-side fixes — validate iss, declare application_type, discover the server the right way — with the exact code.