MCP 2025-11-25 is here: async Tasks, better OAuth, extensions, and a smoother agentic future
Blog post from WorkOS
The Model Context Protocol (MCP) has released a significant update on the anniversary of its public launch, introducing several key features driven by community feedback for improved production workflows. The update includes an experimental Tasks primitive for asynchronous operations, simplifying long-running workflows by allowing requests to return a task handle for later status checks and results retrieval. OAuth processes are streamlined with Client ID Metadata Documents (CIMD), replacing the complex Dynamic Client Registration setup and enhancing security through a decentralized trust model. Security features are bolstered with better client installation protocols and standardized OAuth scope names, facilitating smoother enterprise deployments. Extensions are formalized, enabling faster ecosystem innovation without bloating the core, and introducing Authorization Extensions for machine-to-machine OAuth flows and enterprise IdP policy controls. The update also includes URL Mode Elicitation for secure credential handling, Sampling with Tools for agentic workflows, and various developer experience enhancements, such as standardized tool-name formats and improved spec version management. Together, these developments mark a move towards more reliable enterprise deployments and a stable MCP production environment.