How BlueBear handles the work
Inventory protocol assumptions
Record every client, server, transport, session dependency, capability negotiation path, deprecated feature, and custom proxy behavior before changing production traffic.
Evidence: Versioned client/server inventory and compatibility test results
Test stateless and distributed paths
The 2026 protocol core is stateless and supports plain round-robin load balancing. Test reconnection, retries, task state, duplicate requests, and horizontally scaled servers as separate failure cases.
Evidence: Load, retry, idempotency, and recovery traces
Revalidate authorization
Review OAuth/OIDC alignment, resource targeting, token audience, enterprise-managed authorization, and token-passthrough prohibitions. Protocol support does not replace an enterprise access policy.
Evidence: Issuer, audience, resource, scope, actor, and denial evidence
Stage extensions and breaking changes
Adopt Tasks, MCP Apps, extensions, Mcp-Method, and tools/list ttlMs only after capability negotiation and fallback behavior are tested across the actual client/server matrix.
Evidence: Canary results, rollback trigger, owner, and accepted compatibility envelope