Product updates, MCP security, and the evolving standards for AI agents.
The Agent2Agent Protocol, or A2A, is an open protocol for communication between independent AI agents. It defines how a client discovers the capabilities of a remote agent, selects a compatible interface, sends a message, tracks task execution, and receives the result. A2A does not require…
Updated August 4, 2026 Web Bot Auth is an evolving IETF approach to cryptographic authentication for automated HTTP clients. A bot or AI agent signs a request with a private key, and the website verifies the signature using a published public key. Unlike a User-Agent string, the signature provides…
Updated August 1, 2026 AI agent authentication confirms who sent a request and which private key the sender controls. Authorization determines what that agent may do on behalf of a user, with a specific resource, tool, and set of operation parameters. A valid signature or OAuth token does not…
In Brief AI agent authentication verifies which cryptographic key was used to sign a request. The server then associates that key with an agent, provider, or specific deployment. An OAuth token does not replace agent identity: it conveys the user’s delegated permissions, but a standard bearer token…
On July 21, 2026, we released @agentbouncer/sdk version 0.2.0 and updated AgentBouncer’s policy management tools. The SDK now supports server-side request signing, request-body integrity validation, and user OAuth token forwarding in addition to incoming request verification. Since launching the…
AgentBouncer launches its public beta We are launching the public beta of AgentBouncer, a service for verifying signed requests from AI agents and controlling their access to APIs and MCP tools. The beta includes the first release of our JavaScript and TypeScript SDK, integration documentation, and…
The Internet is learning to recognize AI agents Until recently, websites had to answer a relatively simple question: is this visitor a human or a bot? That distinction is no longer enough. Today, automated web traffic includes search crawlers, model-training bots, user-directed AI assistants,…
