agenticweb.wiki

Agentic web daily · 2026-10-23

Anthropic donates Agent Skills to the Agentic AI Foundation

Anthropic is donating the Agent Skills standard to the Agentic AI Foundation, which says it now hosts 10 projects, including MCP and A2A. Separately, Cloudflare's MCP servers stopped serving /sse, and press coverage says a v0.1 draft of Meta and Sierra's Personal Agent Protocol is due.

← 2026-10-20 · JSON for agents · Atom · JSON Feed

Stories

1. Agent Skills moves to the Agentic AI Foundation

governance Agent Skills, Model Context Protocol, Agent2Agent Protocol, AGENTS.md

Anthropic says it is donating Agent Skills to the Agentic AI Foundation (AAIF) under the Linux Foundation. The donation includes the name, logo, GitHub organization and agentskills.io domain. AAIF says the addition, alongside Open Responses from OpenAI, OpenEnv from Hugging Face and OpenSandbox from Alibaba, brings it to 10 hosted projects. Anthropic says more than 70 agent platforms have integrated Agent Skills since it was published in December 2025, and that contributors do not need to join AAIF.

Why it matters: Agent Skills now sits under the same foundation as MCP, A2A and AGENTS.md. Implementers should watch the agentskills.io repository for changes to the governance and maintainer process.

2. Meta and Sierra announce Personal Agent Protocol for agent-to-business connections

launch Personal Agent Protocol (Poppy)

Sierra says it and Meta are developing Personal Agent Protocol, an open standard for how personal agents interact with businesses. Industry partners are Genesys, Instinct, Rocket, Shopify, Stripe and Walmart. Sierra says it is designed to handle authentication and to give companies visibility into what agents do through their websites, APIs or company agents. According to Tilt, a v0.1 specification is due later this month with OAuth-based sessions and read-only agent access by default.

Why it matters: This is a proposed direct channel to replace agents clicking through pages. Businesses evaluating agent access should review the v0.1 draft once it is published.

3. Cloudflare MCP servers drop /sse; clients must switch to /mcp

adoption Model Context Protocol

Cloudflare says its product-specific MCP servers now serve only /mcp. A request to /sse returns 410 Gone with the server's /mcp URL. Clients configured with an /sse URL must change it to /mcp. Users who signed in through /sse will be asked to sign in again.

Why it matters: Check MCP client configurations that point at Cloudflare /sse endpoints and update them. Connections already on /mcp are unaffected.

4. MCP 2026-07-28 removes the initialize handshake, per a server-author walkthrough

spec Model Context Protocol

A dev.to post summarizes the official spec pages for MCP 2026-07-28 for authors of 2025-11-25 servers. The initialize handshake is gone. Every request carries io.modelcontextprotocol/protocolVersion and io.modelcontextprotocol/clientCapabilities in _meta, and servers MUST reject requests missing them with error -32602, which is a 400 on HTTP. The changelog also removes ping, logging/setLevel and notifications/roots/list_changed.

Why it matters: Server authors upgrading need to stop relying on session setup and validate _meta on every request. The post's authors say they read the pages and did not run a conformance suite.

5. WebMCP switched on at platform scale by Commerce.com and Cafe24

adoption WebMCP

According to WebProNews, Commerce.com is using Cloudflare's edge WebMCP beta to expose tools such as search_products across its storefronts, with a per-merchant opt-out. Commerce.com runs almost 100,000 domains on Cloudflare. Cafe24 says it applied WebMCP to all its shopping malls with 11 functions, from product search to cart and order lookup. Login and final payment stay with the user. Cafe24 says the feature works in the ChatGPT desktop app's built-in browser.

Why it matters: WebMCP is reaching merchants through platforms rather than one site at a time. Agent builders can test tool calls on these storefronts. Both rollouts leave checkout to the shopper.

6. x402 payment demos from Mastercard and from Proof with Circle

adoption x402, x401: HTTP Proof Requirement Protocol

AI Tamer reports that Mastercard showed Agent Pay for Machines on 20 October and opened early access to buyer- and seller-side APIs. Mastercard says the service builds on x402, with agents issuing signed payment vouchers within a set budget. Forkast reports that Proof and Circle demoed an identity-gated purchase. In that flow a merchant returns an x401 request, the agent presents a selectively disclosed credential, and settlement runs over x402 using USDC.

Why it matters: Both vendors pair x402 with an extra layer for spending authority or identity. Implementers should check which layer a counterparty expects before integrating.

7. Study questions how much x402 volume on Base reflects real services

research x402, Machine Payments Protocol

EconoTimes reports on an arXiv paper that counted 136,708,672 x402 settlements worth $44,121,383.81 on Base. The authors classified 21.20% as fictitious and found $187,861.35 reached an advertised catalog service. They note this is a floor, not proof of misconduct. The same report says AWS Bedrock AgentCore payments support x402 and MPP, with per-session budgets and expiration times.

Why it matters: x402 itself does not set spending authority or confirm off-chain delivery. Treat raw settlement counts with caution and add budget controls on the agent side.

8. Data suggests llms.txt is rarely read unless linked

research llms.txt

getmind.io says that over 27 days of logs covering 218,657 requests, no major AI crawler requested /llms.txt. Over the same period, 2,386 requests asked for pages as Markdown via Accept: text/markdown. According to WebPulse, Ora's research presented on Vercel's show found agents reached llms.txt in 32% of cases, and 86% of those visits came through a link on the site. Our panel shows llms.txt on 111 of 204 domains.

Why it matters: If you publish llms.txt, link to it from your pages. Serving Markdown on request may matter more than the file itself.

9. New IETF drafts on agent delegation, OIDC agent claims and continuity records

spec Attenuated Delegation Profile for Automated Agents, HTTP Message Signatures

draft-hamr-oauth-agent-delegation-03 builds on RFC 9421. It defines an Agent-Delegation header carrying a chain of links, each of which can only narrow scope and expiry. draft-sharif-openid-agent-identity-02 profiles OpenID Connect Core 1.0 with claims for agent ownership, trust posture and sanctions screening. draft-watts-agent-continuity-evidence-00 proposes experimental signed records that track agents across sessions and delegations. All three are individual drafts.

Why it matters: These are early, unadopted proposals. They are worth reading if you sign agent requests with HTTP Message Signatures and need to express who the agent acts for.

10. Panel: large swings in Markdown for Agents, Agent Skills and robots.txt AI tokens

adoption Markdown for Agents, Agent Skills, AI Crawler User-Agent Tokens in robots.txt

Our checks covered 204 of 212 panel domains today. Markdown for Agents is published by 40 of 204 (+38 since 2026-10-20), and Agent Skills by 27 of 204 (+26 since 2026-10-20). AI crawler user-agent tokens in robots.txt fell to 66 of 204 (-96 since 2026-10-20). Today's grades were A+ 22, A 15, B 35, C 53, D 10, F 69.

Why it matters: Moves this large in two days on a fixed panel affect many site grades. Site owners should recheck their own pages before drawing conclusions.

The numbers

We re-check a fixed panel of 212 domains every day through the same /check/ report anyone can run. 204 answered today (8 could not be checked and are left out of every comparison). Changes compare the 192 domains checked cleanly on both 2026-10-20 and 2026-10-23.

A+ABCDF
221535531069

Published or withdrawn since 2026-10-20

Grade changes

DomainWasNow
agentclientprotocol.comA (46)A+ (75)
agentman.aiB (35)C (20)
agentskills.ioB (41)A+ (70)
agntcy.orgC (20)F (0)
ai.google.devC (20)F (0)
aioseo.comB (35)C (20)
alibabacloud.comC (20)F (0)
angulararchitects.ioC (20)F (0)
ant-intl.comF (0)C (20)
anthropic.comC (20)F (0)
asana.comC (20)D (10)
atlassian.comB (35)C (20)
atscale.comC (20)D (10)
auth-md.comF (0)A (46)
auth0.comB (35)C (20)
aws.amazon.comC (20)F (0)
azure.microsoft.comC (20)F (0)
benstone-ai.comC (20)F (0)
bingx.comC (20)F (0)
blog.cloudflare.comB (38)F (0)
byteiota.comB (35)C (20)
chrishood.comB (35)C (20)
claude.comC (20)F (0)
cloud.google.comC (20)F (0)
cloud.tencent.comB (35)C (20)
cloudflare.comA (49)A+ (60)
code.visualstudio.comB (35)C (20)
comcastadvertising.comB (41)F (0)
copilotkit.aiB (35)C (20)
crawlytics.appB (35)C (20)
crewai.comA (54)A+ (65)
cursor.comB (35)C (20)
danads.comB (35)C (20)
danilchenko.devB (35)C (20)
datatracker.ietf.orgC (20)F (0)
dev.toB (35)C (20)
developer.chrome.comC (20)F (0)
developers.google.comC (20)F (0)
developers.openai.comB (35)C (20)
docs.adcontextprotocol.orgA (49)A+ (75)
docs.ag-ui.comB (41)A+ (70)
docs.augmentcode.comB (41)A+ (70)
docs.cdp.coinbase.comC (28)A+ (70)
docs.n8n.ioA (52)A+ (60)
docs.perplexity.aiA (49)A+ (75)
drupal.orgC (20)F (0)
edakrong.comC (20)F (0)
ethereum-magicians.orgC (20)F (0)
etsy.comB (35)C (20)
exchangewire.comC (20)F (0)
gitbook.comA (49)A+ (65)
google.comC (20)F (0)
hsbc.co.ukC (20)F (0)
hubspot.comB (35)C (20)
huggingface.coA+ (60)A (57)
iabtechlab.comC (20)F (0)
infoq.comC (20)F (0)
jetbrains.comC (20)F (0)
juliamaehler.comB (35)C (20)
karangoyal.ccB (35)C (20)
linear.appB (35)C (20)
linuxfoundation.orgC (20)F (0)
mapsoft.comB (35)C (20)
microsoft.comC (20)F (0)
modelcontextprotocol.ioB (41)A+ (70)
mozilla.orgC (20)F (0)
notion.soD (15)F (5)
okta.comB (35)C (20)
openai.comC (20)F (0)
openknowledge.aiB (35)C (20)
openrsl.orgC (20)F (0)
outshift.cisco.comC (20)F (0)
packalyst.comB (35)C (20)
paypal.comA (48)B (30)
perplexity.aiC (20)F (0)
pmg.comB (35)C (20)
ppc.landC (20)F (0)
prnewswire.comB (35)C (20)
proof.comA+ (60)A (49)
reddit.comC (20)F (0)
rslstandard.orgC (20)D (10)
rtblint.orgB (35)C (20)
salesforce.comC (20)F (5)
salespeak.aiB (35)A+ (67)
samsung.comC (20)B (35)
satgate.ioB (35)C (20)
sentry.ioB (44)A (55)
shopify.comB (35)C (20)
slack.comB (35)C (20)
snowflake.comC (23)D (10)
springernature.comC (20)D (10)
stm-assoc.orgB (35)C (20)
stripe.comB (35)C (20)
stytch.comB (35)C (20)
supabase.comA (52)A+ (65)
support.claude.comB (35)C (20)
support.wix.comC (20)F (0)
taskade.comA+ (64)B (36)
techradar.comC (20)F (0)
techzine.euC (20)F (0)
tempo.xyzA (51)A+ (67)
theguardian.comC (20)D (10)
thewaltdisneycompany.comC (20)F (0)
trendshift.ioC (20)F (0)
ucpregistry.comC (20)F (5)
wikipedia.orgC (20)F (0)
wppmedia.comC (20)F (0)
yoast.comB (35)C (20)

Adoption across the panel

StandardDomainsChange
llms.txt111 / 204+4
AI Crawler User-Agent Tokens in robots.txt66 / 204-96
Markdown for Agents40 / 204+38
Content Signals Policy36 / 204+1
Agent Skills27 / 204+26
api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs23 / 204+6
OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization)18 / 204-2
AI Catalog well-known file17 / 2040
Agent2Agent Protocol15 / 204+1
AGENTS.md13 / 2040
Model Context Protocol11 / 204+3
MCP Server Cards (SEP-2127)11 / 204+3
OAuth Client ID Metadata Document10 / 204-3
auth.md7 / 204+1
agents.txt6 / 2040
Agentic Resource Discovery6 / 2040
Web Bot Auth HTTP Message Signatures4 / 204+1
Really Simple Licensing3 / 2040
Text and Data Mining Reservation Protocol3 / 2040
Agent Directory Service1 / 2040
agent-permissions.json1 / 2040
agents.json1 / 2040
Agora Protocol1 / 2040
Identity Assertion JWT Authorization Grant1 / 2040
Open Knowledge Format1 / 204+1
Universal Commerce Protocol1 / 2040
Signature Agent Card (Web Bot Auth registry)1 / 204+1

Fastest-growing repositories

RepositoryStarsChange
agentskills/agentskills26438+123 (0.5%)
block/goose55546+85 (0.2%)
ag-ui-protocol/ag-ui16772+47 (0.3%)
copilotkit/copilotkit38185+45 (0.1%)
agentsmd/agents.md25054+39 (0.2%)
a2aproject/a2a26260+34 (0.1%)
a2ui-project/a2ui16786+32 (0.2%)
googlecloudplatform/open-knowledge-format1068+29 (2.8%)

Out of 78 repositories named in our records.

Official MCP Registry: 1878 servers (3000 versions) published or updated since 2026-10-22.

Changes to our records

How this digest was made

Items are written only from the cited sources and our own measurements; every number in an item appears in a source it cites. VERIFIED = fetched from the standard's issuer or a standards body; REPORTED = a claim by press or a third party.

Sources searched: feeds 3, datatracker 0, hn 1, arxiv 0, exa 103, parallel 7, tips 0. 114 candidates, 97 new, 37 kept by triage (claude-haiku-5-5), 30 facts given to the writer (claude-opus-5-5).

Window 2026-10-21T18:00:00Z to 2026-10-23T02:16:30Z. Generated 2026-10-23T02:45:42Z. Licence CC BY 4.0.

Newsletter

Get the daily digest and standard changes by email.