Summary

MCP Python SDK 2.2.0 limits HTTP redirects to the endpoint origin, expires idle stateful sessions after 30 minutes and caps concurrent sessions at 10,000. It also validates OAuth issuer and token-resource settings more strictly.

Why it matters

MCP server operators need to review connection lifecycles, scaling limits and authentication assumptions before upgrading.

Sources