MCP server cards are now Final. They list no tools, on purpose.
By Lior AharonovFounder, 7IT Solutions ·
On Tuesday, 6 October 2026, SEP-2127 was merged into the MCP repository with status Final, on the Extensions Track. A remote server can now describe itself before anyone connects (name, version, transports and protocol versions) at <streamable-http-url>/server-card, with an optional AI Catalog at /.well-known/ai-catalog.json.
An agent can now learn what your server speaks before it opens a session. But the card leaves out tools, resources and prompts by design, so nobody builds access rules on a list that went stale last week.
If you run a remote MCP server, publish a card at /server-card next to your endpoint and bump its version with every release.
The card tells an agent who you are. It can not tell it whether you answered a minute ago. That part still has to be measured.
Lior Aharonov · my takeSources
Researched with AI tools; every fact is checked against the linked sources.