The MCP Skills extension went Final: `skills/list` and `skills/get` with digest-bound approval
Model Context Protocol·high signal
SEP-2640 was marked Final on 2026-09-11 and merged 2026-09-13, and the docs pages and support tracking landed through 2026-09-16. Servers declaring `io.modelcontextprotocol/skills` must implement `skills/list` and `skills/get` and serve skill files through `resources/read`; every skill entry carries full YAML frontmatter plus a manifest of each file's URI, SHA-256 digest and byte size. Hosts must restrict reads to the retained manifest, verify digest and size before use, and re-request user approval when any file changes, and servers should stay under 512 files or 16 MiB per skill.