The 2025-06-18 MCP transport spec says Streamable HTTP replaces HTTP+SSE, lets one server handle multiple client connections, and requires Origin validation to prevent DNS rebinding. In production, that is the moment MCP stops being a clever tool demo and becomes a platform engineering problem about identity, isolation, and load control …