Sponsored by: AWS — Move from SaaS to Agentic SaaS with resources for ISVs at every layer of the stack. Explore how AI for ISVs turns vision into results
核心贡献 · Key contributions
介绍并分析了无状态 MCP 2.0 规范（2026-07-28），该规范用每次工具调用的单个 HTTP 请求取代了两步式会话初始化。 Introduces and analyzes the stateless MCP 2.0 specification (2026-07-28), which replaces two-step session initialization with a single HTTP request per tool call.
通过前后对比示例展示无状态 MCP 如何简化客户端与服务器实现，并更适配可扩展的 Web 应用。 Presents before-and-after examples showing how stateless MCP simplifies client and server implementations and better suits scalable web applications.
构建了 mcp-explorer，一个可通过 uvx 运行的 Python CLI，用于在任意无状态 MCP 服务器上列出和调用工具。 Builds mcp-explorer, a uvx-run Python CLI for listing and invoking tools on any stateless MCP server.
创建了 datasette-mcp，一个 Datasette 插件，暴露 /-/mcp 端点，为智能体提供只读 SQL 工具。 Creates datasette-mcp, a Datasette plugin exposing a /-/mcp endpoint with read-only SQL tools for agents.
发布了 llm-mcp-client alpha 插件，将 LLM CLI 连接到 MCP 服务器，并计划合入 LLM 核心。 Releases llm-mcp-client alpha plugin to connect LLM CLI to MCP servers, with plans to merge into LLM core.
认为 MCP 工具比任意 shell/curl 智能体环境更易审计和控制，从而降低安全风险。 Argues MCP tools are more auditable and controllable than arbitrary shell/curl agent environments, reducing security risks.
局限 · Limitations
无状态 MCP 仍专注于工具接入；带终端和 curl 的智能体框架在许多任务上依然更灵活。 Stateless MCP still focuses on tool access; agent harnesses with a terminal and curl remain more flexible for many tasks.
MCP 仍存在提示注入风险，尤其是当最终用户混搭工具时，数据外泄防御责任被推给用户。 MCP retains prompt injection risks, especially when end users mix and match tools, pushing exfiltration defense onto users.
将 MCP 端点接入 ChatGPT 和 Claude 需要大量调试，显示出集成过程中的摩擦。 Attaching MCP endpoints to ChatGPT and Claude required considerable fiddling, showing integration friction.
datasette-mcp 的 execute_sql 目前只读，限制了其在写操作方面的用途。 datasette-mcp's execute_sql is read-only for now, limiting its usefulness for write operations.
本文属于早期探索；无状态 MCP 的长期安全性与可扩展性权衡仍有待验证。 The post is an early exploration; stateless MCP's long-term security and scalability trade-offs remain to be proven.
论文章节 · Sections（共 9）
Simon Willison 的博客Simon Willison’s Weblog(https://simonwillison.net/)
无状态 MCP 重新引起我的兴趣（并启发了 mcp-explorer 和 datasette-mcp）Stateless MCP has recaptured my interest (and inspired mcp-explorer and datasette-mcp)
无状态 MCP 的便利之处What’s easier with stateless MCP
mcp-explorer：MCP 服务器交互式探测工具mcp-explorer
datasette-mcpdatasette-mcp
llm-mcp-clientllm-mcp-client
MCP 是构建智能体的一种更安全的方式MCP is a safer way to build with agents