agenticweb.wiki

Agentic web daily · 2026-10-21

IETF DAWN Agent Discovery Framework reaches revision -09; Cloudflare introduces full-transaction WAF inspection

At the IETF, the DAWN Agent Discovery Framework published draft revision -09 extending expiration to 24 April 2027, while the Python a2a-sdk shipped v1.2.3 on PyPI. Cloudflare also announced full-transaction WAF detection correlating HTTP requests with origin responses.

← 2026-10-20 · 2026-10-22 → · JSON for agents · Atom · JSON Feed

Stories

1. IETF publishes draft-zhang-dawn-agent-discovery-framework-09

spec A Framework for Agent Discovery in DAWN

The authors of A Framework for Agent Discovery in DAWN published revision -09 on the IETF Datatracker on 21 Oct 2026. The updated Internet-Draft extends the active review window through 24 April 2027 and refines the discovery model for autonomous agents operating across administrative domains.

Why it matters: Teams tracking IETF agent-discovery drafts alongside ANP and DNS-AID should update citations from -08 to -09.

2. Cloudflare introduces full-transaction WAF detection across requests and responses

security Cloudflare Content Signals Policy

Cloudflare announced full-transaction detection in its Web Application Firewall, correlating inbound HTTP requests with outbound origin responses to detect data exposure and misconfigurations that request-only inspection misses.

Why it matters: Origins serving agent manifests and MCP endpoints behind Cloudflare WAF should verify that response-correlated rules do not false-positive on structured JSON-RPC or Markdown twin payloads.

The numbers

We re-check a fixed panel of 219 domains every day through the same /check/ report anyone can run. 218 answered today (1 could not be checked and are left out of every comparison). This is the first snapshot, so there is nothing to compare yet.

A+ABCDF
10217670635

Adoption across the panel

StandardDomainsChange
AI Crawler User-Agent Tokens in robots.txt173 / 218–
llms.txt105 / 218–
Content Signals Policy36 / 218–
api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs19 / 218–
OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization)19 / 218–
AI Catalog well-known file17 / 218–
AGENTS.md14 / 218–
Agent2Agent Protocol13 / 218–
OAuth Client ID Metadata Document13 / 218–
Model Context Protocol7 / 218–
MCP Server Cards (SEP-2127)7 / 218–
agents.txt6 / 218–
Agentic Resource Discovery6 / 218–
auth.md6 / 218–
Really Simple Licensing3 / 218–
Text and Data Mining Reservation Protocol3 / 218–
Web Bot Auth HTTP Message Signatures3 / 218–
Identity Assertion JWT Authorization Grant2 / 218–
Agent Directory Service1 / 218–
agent-permissions.json1 / 218–
agents.json1 / 218–
Agora Protocol1 / 218–
Universal Commerce Protocol1 / 218–

Official MCP Registry: 1708 servers (3000 versions) published or updated since 2026-10-19.

Changes to our records

How this digest was made

Items are written only from the cited sources and our own measurements; every number in an item appears in a source it cites. VERIFIED = fetched from the standard's issuer or a standards body; REPORTED = a claim by press or a third party.

Sources searched: feeds 0, datatracker 0, hn 0, arxiv 12, exa 107, parallel 5, tips 19. 143 candidates, 130 new, 49 kept by triage (claude-haiku-5-5), 30 facts given to the writer (claude-opus-5-5).

Window 2026-10-20T21:30:57Z to 2026-10-21T21:00:00Z. Generated 2026-10-21T21:00:00Z. Licence CC BY 4.0.

Newsletter

Get the daily digest and standard changes by email.