Open standards.

The protocols and specifications behind OpenA2A. Identity, trust, authorization, threat modeling, and conformance for AI agents. Each is published openly under the vendor-neutral opena2a-standards organization and implemented by the OpenA2A tools.

Identity and trust

Agent Identity Protocol (AIP)

Draft

Open standard for AI agent identity, capabilities, and trust.

Agent Trust Protocol (ATP)

Draft

Open standard for verifiable trust assertions about AI agents.

ATX

Draft, v1.1

Agent Trust eXtension credential format. v1.1 signs capabilities, scan summary, issuer chain, and publisher over a canonical JCS (RFC 8785) projection.

did:opena2a

W3C registration filed

W3C-style DID method for registry-resolved identifiers across registries, authorities, publishers, agents, MCP servers, AI tools, LLMs, and skills. Apache-2.0.

Authorization

Agent Authorization Protocol (AAP)

Draft

Resolves an agent's ATX trust into scoped resource access through a grant reference, with no credential value entering the agent context. Defines the decision and enforcement split and the Credential Provider Interface (Retrieve, Assume, Exchange).

Threat modeling and governance

Agent Threat Matrix

Published

Tactics and techniques for attacks on AI agent systems. 57 techniques across 9 tactics, mapped to MITRE, ATLAS, and OWASP.

ABGS

Draft

Agent Behavioral Governance Specification. What goes in a SOUL.md file.

AIIS Signatures

Draft

AI Injection Signature Standard. YARA-style signatures for AI agent prompt injections in web content.

Benchmark and observability

OASB

Published

Open Agent Security Benchmark. 222 attack scenarios mapped to MITRE ATLAS, with a product-agnostic adapter interface.

OTel SemConv for agent identity

Draft

OpenTelemetry semantic conventions for AI agent authorization observability.

Conformance and SDKs

ATX Conformance

Conformance suite

Reference verifiers and fixtures for ATX v1.0 and v1.1 (Agent Trust Credential).

A2A-IDF Conformance

Conformance suite

Canonical conformance suite for A2A-IDF (Agent-to-Agent Identity Framework, a2aproject/A2A#1496).

A2A-IDF SDK

SDK

TypeScript SDK for A2A-IDF. RFC 9421 and Ed25519 wire signatures, attestation envelopes, delegation chains. Paired with the A2A-IDF conformance suite.