The MCP SDK just shipped DPoP and scope challenges. Here's what to do about it.

A first look at how the official Model Context Protocol SDK is turning the 2026-07-28 spec's authorization hardening into code, and what it means for anyone running an MCP server.