Handshake

On July 28th, the MCP maintainers shipped the 2026-07-28 revision. No more initialize. No more initialized. No more Mcp-Session-Id. David Soria Parra called it

CometBFT completes the full SecretConnection STS handshake - an X25519 Diffie-Hellman exchange and an Ed25519 signature verification - for any connecting peer before checking whether that peer's node-ID is allowlisted, so an unauthenticated remote source

We ran a live MCP handshake against every server in our index. 277 of 995 answered; 39 cleared the bar we call MCPExplorer Verified. The full funnel, the tool-risk breakdown, and the method.

The University reported Austin Franco '28 to the Office of Civil Rights for a bias incident in which he responded to a job offer with "Not interested in working for a jew. Thanks." on Handshake, according to a June 8 X post.

What twelfth-century merchants on the Malabar Coast knew about counterparty risk, and what we have spent a thousand years trying to forget.

Visualize the SSL/TLS handshake process for any domain. Check TLS version support, cipher suites, certificate details, and protocol security. Free, instant results.

Live MCP ecosystem health: 5,197 agent-ready sites indexed, 673 (12.9%) MCP-verified via JSON-RPC handshake. 3,036 publish llms.txt, 829 publish OpenAPI. Category breakdown, newly-indexed servers, gaps.