{
 "acronym": "AAP",
 "adoption": {
  "by": null,
  "level": "unmeasured",
  "probe_run": null
 },
 "aliases": [
  "OpenA2A AAP",
  "draft-fane-opena2a-aap",
  "Agent Authorization Protocol (OpenA2A)"
 ],
 "analog": "A token that says which agent is acting, what it may do, and who delegated that authority",
 "collisions": [
  "Agent Authorization Profile (draft-aap-oauth-profile-01), the expired individual draft recorded as aap",
  "Agent Attribution Protocol, an unrelated use of the AAP acronym"
 ],
 "discovery": {
  "mechanism": "Token model for identity, grants, delegation, attestation, federation, and revocation. The named broker layer is not specified in this draft, and no well-known file is defined.",
  "path": null
 },
 "dispute": null,
 "evidence": [
  {
   "claim": "draft-fane-opena2a-aap-02, OpenA2A Agent Authorization Protocol, is a Standards Track individual submission by A. Fane (OpenA2A), dated 30 September 2026 and expiring 3 April 2027. The header says Individual Submission. It is not a working-group document. The token model covers identity, scoped grants, delegation, attestation, federation, and revocation. A companion broker layer is named and is not specified in this file.",
   "date": "2026-09-30",
   "label": "VERIFIED",
   "url": "https://www.ietf.org/archive/id/draft-fane-opena2a-aap-02.txt"
  },
  {
   "claim": "Datatracker document page for draft-fane-opena2a-aap.",
   "date": "2026-09-30",
   "label": "VERIFIED",
   "url": "https://datatracker.ietf.org/doc/draft-fane-opena2a-aap/"
  }
 ],
 "form": "document-format",
 "governance": "IETF individual submission by A. Fane, OpenA2A. Standards Track intent. Not a working-group document.",
 "group": null,
 "history": [
  {
   "date": "2026-10-20",
   "note": "added from staged research 2026-10-20; header read from draft-fane-opena2a-aap-02. Kept separate from the expired aap record (draft-aap-oauth-profile-01)."
  }
 ],
 "id": "opena2a-aap",
 "implementation": "none-found",
 "last_verified": "2026-10-20",
 "name": "OpenA2A Agent Authorization Protocol",
 "native_status": "Internet-Draft, individual submission, Intended status: Standards Track; draft-fane-opena2a-aap-02 dated 2026-09-30, expires 2027-04-03",
 "origin": {
  "org": "A. Fane, OpenA2A",
  "date": "2026-09-30"
 },
 "part_of": null,
 "parties": [
  "agent-agent",
  "agent-site"
 ],
 "phase": "draft",
 "probe": {
  "method": "n/a",
  "path": "n/a (token model; the broker layer is named and not specified)",
  "parse": "n/a. The draft specifies a token model. It does not define a fixed path to fetch.",
  "on_absent": "No public artifact is defined, so absence at an origin is expected."
 },
 "question": "How does an agent present identity, a scoped grant, a delegation, and an attestation when it calls another agent or a tool?",
 "scope": "general",
 "spec_url": "https://www.ietf.org/archive/id/draft-fane-opena2a-aap-02.txt",
 "step": "permit",
 "summary_md": "The OpenA2A Agent Authorization Protocol (AAP) is an individual IETF Internet-Draft, `draft-fane-opena2a-aap-02`, dated 30 September 2026 and expiring 3 April 2027 [1]. The header says Standards Track and Individual Submission. The author is A. Fane, OpenA2A. It is not a working-group document [1].\n\nThe draft is an authorization complement to A2A and MCP. It specifies a token model for agent identity assertion, scoped capability grants, cross-agent delegation, behavioral attestation, federation, and revocation [1]. A companion broker layer is named and is not specified in this document [1].\n\nThis is a different document from the expired `draft-aap-oauth-profile-01`, which this map records as `aap`. The -02 text was current on 2026-10-20. The Workload Authorization Grant, the identity-continuation assertion, and the Agent-Delegation header are separate records from this one. The datatracker entry for the draft is [2].",
 "track": "ietf",
 "version": {
  "label": "draft-fane-opena2a-aap-02",
  "date": "2026-09-30"
 },
 "watch": [
  {
   "type": "ietf",
   "doc": "draft-fane-opena2a-aap"
  }
 ],
 "use_cases": [
  "delegate-user-authority",
  "prove-agent-identity",
  "audit-agent-actions"
 ],
 "audience": [
  "agent-builder",
  "platform",
  "standards-body"
 ],
 "pairs_with": [
  "aap",
  "a2a",
  "mcp",
  "oauth-agent-delegation",
  "workload-authz-grant"
 ],
 "prerequisites": [],
 "freshness": "current"
}