Product updates, MCP security, and the evolving standards for AI agents.
The Agent2Agent Protocol, or A2A, is an open protocol for communication between independent AI agents. It defines how a client discovers the capabilities of a remote agent, selects a compatible interface, sends a message, tracks task execution, and receives the result. A2A does not require…
Updated August 4, 2026 Web Bot Auth is an evolving IETF approach to cryptographic authentication for automated HTTP clients. A bot or AI agent signs a request with a private key, and the website verifies the signature using a published public key. Unlike a User-Agent string, the signature provides…
Updated August 1, 2026 AI agent authentication confirms who sent a request and which private key the sender controls. Authorization determines what that agent may do on behalf of a user, with a specific resource, tool, and set of operation parameters. A valid signature or OAuth token does not…
In Brief AI agent authentication verifies which cryptographic key was used to sign a request. The server then associates that key with an agent, provider, or specific deployment. An OAuth token does not replace agent identity: it conveys the user’s delegated permissions, but a standard bearer token…
