Agentic web daily · 2026-10-24

# Agentic AI Foundation adds Agent Skills, Open Responses, OpenEnv and OpenSandbox

The Linux Foundation's Agentic AI Foundation says it now hosts 10 projects, including Agent Skills contributed by Anthropic, and Google's Gary Illyes revised a draft that adds URL-level controls to the Robots Exclusion Protocol.

[← 2026-10-23](/digest/2026-10-23/) · [2026-10-25 →](/digest/2026-10-25/) · [JSON for agents](/digest/2026-10-24/index.json) · [Atom](/digest/feed.xml) · [JSON Feed](/digest/feed.json)

## Stories

### 1. Agentic AI Foundation adds four projects, including Agent Skills

governance [Agent Skills](/protocols/anthropic-agent-skills-format/), [Model Context Protocol](/protocols/mcp/), [Agent2Agent Protocol](/protocols/a2a/), [AGENTS.md](/protocols/agents-md/)

The Agentic AI Foundation (AAIF) announced four new projects on Oct. 22, 2026: Agent Skills, contributed by Anthropic; Open Responses, contributed by OpenAI; OpenEnv, contributed by Hugging Face; and OpenSandbox, contributed by Alibaba. According to the Linux Foundation, this brings AAIF to 10 hosted projects, up from its three launch projects in December 2025. The new projects join A2A, Agent Router, agentgateway, AGENTS.md, goose and MCP. Our panel check finds Agent Skills published by 46 of 210 panel domains.

Why it matters: Agent Skills, MCP, A2A and AGENTS.md now sit under one foundation. Implementers relying on them should follow AAIF channels for future spec and governance changes.

- [Agentic AI Foundation Announces Four New Projects: Agent Skills, Open Responses, OpenEnv, and OpenSandbox](https://www.linuxfoundation.org/press/agentic-ai-foundation-announces-four-new-projects-agent-skills-open-responses-openenv-and-opensandbox) · linuxfoundation.org · 2026-10-22 VERIFIED
- Our measurement: Agent Skills (anthropic-agent-skills-format) is published by 46 of 210 panel domains.

### 2. Robots Exclusion Protocol extension for URL-level control revised as draft-illyes-repext-04

spec [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/)

Gary Illyes of Google published draft-illyes-repext-04, an Informational Internet-Draft that extends RFC9309 with URL-level controls. The controls can be set through an HTTP response header and through HTML meta tags. The revision moves the header out of the experimental "X-" header space and defines how multiple headers combine.

Why it matters: Sites and crawler operators that use per-URL directives should track the header name change and the new rules for combining multiple headers.

- [draft-illyes-repext-04](https://datatracker.ietf.org/doc/html/draft-illyes-repext-04) · datatracker.ietf.org · 2026-10-22 VERIFIED

### 3. Draft proposes an IANA registry for MCP tool surface names

spec [Model Context Protocol](/protocols/mcp/)

draft-morrison-mcp-tool-surface-names-registry-03, an individual Informational draft, asks IANA to create a registry for Model Context Protocol tool surface names. A tool surface name is the wire-level identifier a client uses to invoke a typed capability on an MCP server. The registry would use the Specification Required policy of RFC 8126 with a Designated Expert pool. Its initial contents are four names, one Active and three Provisional.

Why it matters: This is an individual draft with no IETF standing. MCP server authors who want to avoid tool-name collisions can comment on it, but nothing changes in the MCP spec itself.

- [An IANA Registry for Model Context Protocol Tool Surface Names](https://datatracker.ietf.org/doc/draft-morrison-mcp-tool-surface-names-registry/) · datatracker.ietf.org · 2026-10-22 VERIFIED

### 4. New draft defines verifiable mandates for agents acting across domains

spec [Workload Identity in Multi System Environments (WIMSE) Architecture](/protocols/wimse/)

draft-hulea-wimse-agent-mandate-00, an individual draft with Intended status Standards Track, defines how a relying party in one administrative domain validates the mandate under which an agent acts for a principal in another domain. It separates evidence of the delegator's authority from the statement that the mandate was granted. It also specifies a deterministic validation procedure driven by an explicit validation profile.

Why it matters: Relying parties that accept delegated agent actions across organizations can compare this model with other WIMSE and OAuth delegation drafts. It is not a WG document.

- [Verifiable Mandates for Agents Acting Across Administrative Domains](https://datatracker.ietf.org/doc/draft-hulea-wimse-agent-mandate/) · datatracker.ietf.org · 2026-10-24 VERIFIED

### 5. Ad Context Protocol v3.2.6 released

spec [Ad Context Protocol](/protocols/adcp/)

The Ad Context Protocol project tagged v3.2.6 on GitHub, released 2026-10-23.

Why it matters: AdCP implementers should review the v3.2.6 release notes before upgrading.

- [Ad Context Protocol: v3.2.6 released 2026-10-23](https://github.com/adcontextprotocol/adcp/releases/tag/v3.2.6) · github.com · 2026-10-23 VERIFIED

### 6. W3C publishes Linked Web Storage Protocol 1.0 Working Draft

spec [LWS 1.0 Authentication Suite: Self-signed Identity using Controlled Identifiers](/protocols/lws10-authn-ssi-cid/)

The Linked Web Storage Working Group published Linked Web Storage Protocol 1.0 as a W3C Working Draft dated 23 October 2026, on the Recommendation track. The spec aims to give applications secure, permissioned access to externally stored data in an interoperable way. W3C notes that a Working Draft does not imply endorsement.

Why it matters: This is the core protocol that the LWS authentication suites build on. Teams evaluating LWS-based storage for agents should read it together with those suites.

- [Linked Web Storage Protocol 1.0](https://www.w3.org/TR/lws10-core/) · w3.org · 2026-10-23 VERIFIED

### 7. Draft revisions: MCP DNS discovery, JAFAR, OAuth agent delegation, delegation receipts

spec [Discovery of Model Context Protocol Servers via DNS TXT Records](/protocols/mcp-dns-discovery/), [JAFAR: A JSON-Based Format for Publishing IP Ranges of Automated HTTP Clients](/protocols/jafar/), [Attenuated Delegation Profile for Automated Agents](/protocols/oauth-agent-delegation/), [Agent Delegation Receipts](/protocols/agent-delegation-receipts/), [Identity Assertion JWT Authorization Grant](/protocols/identity-assertion-authz-grant/)

Datatracker shows several new revisions: draft-morrison-mcp-dns-discovery-09, draft-illyes-webbotauth-jafar-01 (dated 2026-10-22), draft-hamr-oauth-agent-delegation-03 (dated 2026-10-22) and draft-nelson-agent-delegation-receipts-15 (dated 2026-10-22). Separately, draft-ietf-oauth-identity-assertion-authz-grant-04 expires on 2026-11-22.

Why it matters: Implementers tracking these drafts should diff against the prior revisions. Anyone citing the identity assertion grant should watch whether a new revision appears before 2026-11-22.

- [Discovery of Model Context Protocol Servers via DNS TXT Records: A newer revision, draft-morrison-mcp-dns-discovery-09, now exists; the -08 page is marked as an older version of an Internet-Draft whose latest revision is Active.](https://datatracker.ietf.org/doc/html/draft-morrison-mcp-dns-discovery-08) · datatracker.ietf.org · 2026-10-23 VERIFIED
- [Agent Delegation Receipts: Datatracker shows draft-nelson-agent-delegation-receipts-15, dated 2026-10-22, expires 2027-04-25](https://datatracker.ietf.org/doc/draft-nelson-agent-delegation-receipts/) · datatracker.ietf.org · 2026-10-22 VERIFIED
- [JAFAR: A JSON-Based Format for Publishing IP Ranges of Automated HTTP Clients: Datatracker shows draft-illyes-webbotauth-jafar-01, dated 2026-10-22, expires 2027-04-25](https://datatracker.ietf.org/doc/draft-illyes-webbotauth-jafar/) · datatracker.ietf.org · 2026-10-22 VERIFIED
- [Attenuated Delegation Profile for Automated Agents: Datatracker shows draft-hamr-oauth-agent-delegation-03, dated 2026-10-22, expires 2027-04-25](https://datatracker.ietf.org/doc/draft-hamr-oauth-agent-delegation/) · datatracker.ietf.org · 2026-10-22 VERIFIED
- [Identity Assertion JWT Authorization Grant: draft-ietf-oauth-identity-assertion-authz-grant-04 expires on 2026-11-22](https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/) · datatracker.ietf.org · 2026-05-21 VERIFIED

### 8. More individual drafts on signed receipts for agent actions

security

Several individual Informational drafts on recording agent actions were revised. draft-chueayen-attestation-receipts-04 adds an action record, signed with Ed25519 by the enforcement point rather than the agent. draft-zambo-aer1-26 defines execution receipts for tool calls. draft-etcheverry-action-ref-04 derives a deterministic action identifier using RFC 8785 JCS. draft-oga-musubi-settlement-02 recomputes whether recorded acts stayed within a signed grant.

Why it matters: These overlapping proposals have no IETF standing. Teams building audit trails should treat them as input rather than settled formats.

- [Enforcement Attestation Receipts for AI Inference and Agent Action Decisions](https://datatracker.ietf.org/doc/draft-chueayen-attestation-receipts/) · datatracker.ietf.org · 2026-10-24 VERIFIED
- [AER-1: A Portable Execution Receipt for AI Agent Tool Calls](https://datatracker.ietf.org/doc/draft-zambo-aer1/) · datatracker.ietf.org · 2026-10-23 VERIFIED
- [Action Reference: A Deterministic Identifier for Agent Actions](https://datatracker.ietf.org/doc/draft-etcheverry-action-ref/) · datatracker.ietf.org · 2026-10-23 VERIFIED
- [MUSUBI Settlement: Recomputing Whether an Agent Acted Within a Signed Grant](https://datatracker.ietf.org/doc/draft-oga-musubi-settlement/) · datatracker.ietf.org · 2026-10-23 VERIFIED

### 9. Panel check: llms.txt at 143 domains, mpp.dev drops to grade B

adoption [llms.txt](/protocols/llms-txt/), [Official MCP Registry](/protocols/mcp-registry/), [Agent Skills](/protocols/anthropic-agent-skills-format/), [api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs](/protocols/api-catalog-rfc9727/), [Markdown for Agents](/protocols/cloudflare-markdown-for-agents/)

Our checks covered 210 of 211 panel domains today. llms.txt is published by 143 of 210 (+1 since 2026-10-23). mpp.dev no longer publishes Agent Skills, api-catalog or Markdown for Agents, and it moved from grade A+ (65) to B (41). Separately, 2058 servers (3000 versions) were published or updated on the official MCP Registry since 2026-10-23.

Why it matters: Site-level signals can disappear between daily checks, so verify current files before relying on a domain's published capabilities.

- Our measurement: 210 of 211 panel domains were checked today; grades: A+ 46, A 15, B 42, C 60, D 12, F 35.
- Our measurement: llms.txt (llms-txt) is published by 143 of 210 panel domains (+1 since 2026-10-23).
- Our measurement: mpp.dev no longer publishes Agent Skills (anthropic-agent-skills-format); it did on 2026-10-23.
- Our measurement: mpp.dev no longer publishes api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs (api-catalog-rfc9727); it did on 2026-10-23.
- Our measurement: mpp.dev no longer publishes Markdown for Agents (cloudflare-markdown-for-agents); it did on 2026-10-23.
- Our measurement: mpp.dev moved from grade A+ (65) to B (41).
- Our measurement: 2058 servers (3000 versions) were published or updated on the official MCP Registry since 2026-10-23.

## The numbers

We re-check a fixed panel of 211 domains every day through the same [/check/](/check/) report anyone can run. 210 answered today (1 could not be checked and is left out of every comparison). Changes compare the 198 domains checked cleanly on both 2026-10-23 and 2026-10-24.

| A+ | A | B | C | D | F |
| --- | --- | --- | --- | --- | --- |
| 46 | 15 | 42 | 60 | 12 | 35 |

### Published or withdrawn since 2026-10-23

- [agentcommunity.org](/check/agentcommunity.org/) now publishes [Markdown for Agents](/protocols/cloudflare-markdown-for-agents/)
- [agentcommunity.org](/check/agentcommunity.org/) now publishes [OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization)](/protocols/oauth-metadata-for-agents/)
- [mintlify.com](/check/mintlify.com/) now publishes [auth.md](/protocols/auth-md/)
- [neuronto.com](/check/neuronto.com/) now publishes [llms.txt](/protocols/llms-txt/)
- [taskade.com](/check/taskade.com/) now publishes [Agent Skills](/protocols/anthropic-agent-skills-format/)
- [aaif.io](/check/aaif.io/) no longer publishes [agents.txt](/protocols/agents-txt/)
- [aaif.io](/check/aaif.io/) no longer publishes [Markdown for Agents](/protocols/cloudflare-markdown-for-agents/)
- [kyvosinsights.com](/check/kyvosinsights.com/) no longer publishes [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/)
- [mpp.dev](/check/mpp.dev/) no longer publishes [Agent Skills](/protocols/anthropic-agent-skills-format/)
- [mpp.dev](/check/mpp.dev/) no longer publishes [api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs](/protocols/api-catalog-rfc9727/)
- [mpp.dev](/check/mpp.dev/) no longer publishes [Markdown for Agents](/protocols/cloudflare-markdown-for-agents/)
- [paypal.com](/check/paypal.com/) no longer publishes [Agora Protocol](/protocols/agora-protocol/)

### Grade changes

| Domain | Was | Now |
| --- | --- | --- |
| [aaif.io](/check/aaif.io/) | A (54) | B (38) |
| [kyvosinsights.com](/check/kyvosinsights.com/) | C (20) | F (0) |
| [mpp.dev](/check/mpp.dev/) | A+ (65) | B (41) |
| [neuronto.com](/check/neuronto.com/) | A (49) | A+ (62) |
| [paypal.com](/check/paypal.com/) | B (30) | C (20) |
| [taskade.com](/check/taskade.com/) | B (36) | A (49) |

### Adoption across the panel

| Standard | Domains | Change |
| --- | --- | --- |
| [llms.txt](/protocols/llms-txt/) | 143 / 210 | +1 |
| [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/) | 94 / 210 | -1 |
| [Markdown for Agents](/protocols/cloudflare-markdown-for-agents/) | 63 / 210 | -1 |
| [Content Signals Policy](/protocols/cloudflare-content-signals-policy/) | 57 / 210 | 0 |
| [Agent Skills](/protocols/anthropic-agent-skills-format/) | 46 / 210 | 0 |
| [api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs](/protocols/api-catalog-rfc9727/) | 45 / 210 | -1 |
| [AI Catalog well-known file](/protocols/ai-catalog-well-known-file/) | 43 / 210 | 0 |
| [OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization)](/protocols/oauth-metadata-for-agents/) | 28 / 210 | +1 |
| [Agent2Agent Protocol](/protocols/a2a/) | 24 / 210 | 0 |
| [AGENTS.md](/protocols/agents-md/) | 20 / 210 | 0 |
| [Model Context Protocol](/protocols/mcp/) | 19 / 210 | 0 |
| [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/) | 19 / 210 | 0 |
| [OAuth Client ID Metadata Document](/protocols/oauth-cimd/) | 16 / 210 | 0 |
| [auth.md](/protocols/auth-md/) | 15 / 210 | +1 |
| [Agentic Resource Discovery](/protocols/ard/) | 13 / 210 | 0 |
| [agents.txt](/protocols/agents-txt/) | 7 / 210 | -1 |
| [Web Bot Auth HTTP Message Signatures](/protocols/webbotauth/) | 7 / 210 | 0 |
| [Really Simple Licensing](/protocols/rsl/) | 4 / 210 | 0 |
| [Text and Data Mining Reservation Protocol](/protocols/tdmrep/) | 3 / 210 | 0 |
| [agents.json](/protocols/agents-json/) | 2 / 210 | 0 |
| [Identity Assertion JWT Authorization Grant](/protocols/identity-assertion-authz-grant/) | 2 / 210 | 0 |
| [Universal Commerce Protocol](/protocols/ucp/) | 2 / 210 | 0 |
| [Agent Directory Service](/protocols/ads/) | 1 / 210 | 0 |
| [agent-permissions.json](/protocols/agent-permissions-json/) | 1 / 210 | 0 |
| [Open Knowledge Format](/protocols/okf/) | 1 / 210 | 0 |
| [Signature Agent Card (Web Bot Auth registry)](/protocols/web-bot-auth-signature-agent-card/) | 1 / 210 | 0 |

### Fastest-growing repositories

| Repository | Stars | Change |
| --- | --- | --- |
| [agentskills/agentskills](https://github.com/agentskills/agentskills) | 26542 | +104 (0.4%) |
| [block/goose](https://github.com/block/goose) | 55612 | +66 (0.1%) |
| [agentsmd/agents.md](https://github.com/agentsmd/agents.md) | 25077 | +23 (0.1%) |
| [googlecloudplatform/open-knowledge-format](https://github.com/googlecloudplatform/open-knowledge-format) | 1090 | +22 (2.1%) |
| [a2ui-project/a2ui](https://github.com/a2ui-project/a2ui) | 16806 | +20 (0.1%) |
| [ag-ui-protocol/ag-ui](https://github.com/ag-ui-protocol/ag-ui) | 16790 | +18 (0.1%) |
| [a2aproject/a2a](https://github.com/a2aproject/a2a) | 26277 | +17 (0.1%) |
| [copilotkit/copilotkit](https://github.com/copilotkit/copilotkit) | 38200 | +15 (0.0%) |

Out of 58 repositories named in our records.

Official MCP Registry: 2058 servers (3000 versions) published or updated since 2026-10-23.

## Changes to our records

- [OpenTelemetry GenAI Semantic Conventions (agents and MCP)](/protocols/otel-genai-semconv/): Source for watch github:otel-genai-semconv:open-telemetry/semantic-conventions-genai failed 3 consecutive polls · [source](https://github.com/open-telemetry/semantic-conventions-genai/blob/main/docs/gen-ai/gen-ai-agent-spans.md) THIN
- [OpenTelemetry GenAI Semantic Conventions (agents and MCP)](/protocols/otel-genai-semconv/): Source for watch github:otel-genai-semconv:open-telemetry/semantic-conventions-genai reachable again · [source](https://github.com/open-telemetry/semantic-conventions-genai) THIN
- [Identity Assertion JWT Authorization Grant](/protocols/identity-assertion-authz-grant/): draft-ietf-oauth-identity-assertion-authz-grant-04 expires on 2026-11-22 · [source](https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/) VERIFIED
- [Discovery of Model Context Protocol Servers via DNS TXT Records](/protocols/mcp-dns-discovery/): A newer revision, draft-morrison-mcp-dns-discovery-09, now exists; the -08 page is marked as an older version of an Internet-Draft whose latest revision is Active. · [source](https://datatracker.ietf.org/doc/html/draft-morrison-mcp-dns-discovery-08) VERIFIED
- [Agent Delegation Receipts](/protocols/agent-delegation-receipts/): Datatracker shows draft-nelson-agent-delegation-receipts-15, dated 2026-10-22, expires 2027-04-25 · [source](https://datatracker.ietf.org/doc/draft-nelson-agent-delegation-receipts/) VERIFIED
- [JAFAR: A JSON-Based Format for Publishing IP Ranges of Automated HTTP Clients](/protocols/jafar/): Datatracker shows draft-illyes-webbotauth-jafar-01, dated 2026-10-22, expires 2027-04-25 · [source](https://datatracker.ietf.org/doc/draft-illyes-webbotauth-jafar/) VERIFIED
- [Attenuated Delegation Profile for Automated Agents](/protocols/oauth-agent-delegation/): Datatracker shows draft-hamr-oauth-agent-delegation-03, dated 2026-10-22, expires 2027-04-25 · [source](https://datatracker.ietf.org/doc/draft-hamr-oauth-agent-delegation/) VERIFIED
- [Ad Context Protocol](/protocols/adcp/): v3.2.6 released 2026-10-23 · [source](https://github.com/adcontextprotocol/adcp/releases/tag/v3.2.6) VERIFIED

How this digest was made
Items are written only from the cited sources and our own measurements; every number in an item appears in a source it cites. VERIFIED = fetched from the standard's issuer or a standards body; REPORTED = a claim by press or a third party.

Sources searched: feeds 0, datatracker 37, hn 1, arxiv 3, exa 101, parallel 5, tips 0. 147 candidates, 123 new, 39 kept by triage (claude-opus-5-5), 30 facts given to the writer (claude-opus-5-5).

Window 2026-10-22T18:00:00Z to 2026-10-24T07:30:35Z. Generated 2026-10-24T07:57:08Z. Licence CC BY 4.0.

## Newsletter

Get the daily digest and standard changes by email.