How does OpenA2A Agent Authorization Protocol compare to other permit protocols?

OpenA2A Agent Authorization Protocol (AAP) is one of 32 standards at step 3, Permit (What may the agent do here?). It pairs with Agent Authorization Profile, Agent2Agent Protocol, Model Context Protocol, Attenuated Delegation Profile for Automated Agents. Every standard at this step is listed at https://agenticweb.wiki/category/permit/.

OpenA2A Agent Authorization Protocol AAP

3 · Permit

OpenA2A Agent Authorization Protocol
Category	Permit
Governed by	IETF individual submission by A. Fane, OpenA2A. Standards Track intent. Not a working-group document.
Status	Internet-Draft, individual submission, Intended status: Standards Track; draft-fane-opena2a-aap-02 dated 2026-09-30, expires 2027-04-03
Phase	draft
Implementation	none found
Adoption	unmeasured
Version	draft-fane-opena2a-aap-02 (2026-09-30)
Specification	https://www.ietf.org/archive/id/draft-fane-opena2a-aap-02.txt
Found at	Token model for identity, grants, delegation, attestation, federation, and revocation. The named broker layer is not specified in this draft, and no well-known file is defined.
Acronym collisions	Agent Authorization Profile (draft-aap-oauth-profile-01), the expired individual draft recorded as aap, Agent Attribution Protocol, an unrelated use of the AAP acronym
Last checked	2026-10-20
Freshness	current · checked 2026-10-20
Solves	Delegate a user's authority to an agent, Prove an agent's identity, Audit what an agent did

OpenA2A Agent Authorization Protocol (AAP) is an agentic-web standard (document format) at step 3, Permit, governed by IETF individual submission by A. Fane, OpenA2A. Standards Track intent. Not a working-group document; its own status is "Internet-Draft, individual submission, Intended status: Standards Track; draft-fane-opena2a-aap-02 dated 2026-09-30, expires 2027-04-03" (draft). It answers: How does an agent present identity, a scoped grant, a delegation, and an attestation when it calls another agent or a tool? Adoption is unmeasured, last verified 2026-10-20.

Permit The OpenA2A Agent Authorization Protocol (AAP) is an individual IETF Internet-Draft, draft-fane-opena2a-aap-02, dated 30 September 2026 and expiring 3 April 2027 ^[1]. The header says Standards Track and Individual Submission. The author is A. Fane, OpenA2A. It is not a working-group document ^[1].

Overview

The draft is an authorization complement to A2A and MCP. It specifies a token model for agent identity assertion, scoped capability grants, cross-agent delegation, behavioral attestation, federation, and revocation ^[1]. A companion broker layer is named and is not specified in this document ^[1].

This is a different document from the expired draft-aap-oauth-profile-01, which this map records as aap. The -02 text was current on 2026-10-20. The Workload Authorization Grant, the identity-continuation assertion, and the Agent-Delegation header are separate records from this one. The datatracker entry for the draft is ^[2].

Discovery and probe

Token model for identity, grants, delegation, attestation, federation, and revocation. The named broker layer is not specified in this draft, and no well-known file is defined.

n/a n/a (token model; the broker layer is named and not specified)
parse:     n/a. The draft specifies a token model. It does not define a fixed path to fetch.
on absent: No public artifact is defined, so absence at an origin is expected.

Not probed live: no-fixed-path. OpenA2A AAP is a token model. The named broker layer is not specified, and nothing is published at a fixed path.

History

2026-10-20 — added from staged research 2026-10-20; header read from draft-fane-opena2a-aap-02. Kept separate from the expired aap record (draft-aap-oauth-profile-01).

Instances

No instances recorded yet.

References

draft-fane-opena2a-aap-02, OpenA2A Agent Authorization Protocol, is a Standards Track individual submission by A. Fane (OpenA2A), dated 30 September 2026 and expiring 3 April 2027. The header says Individual Submission. It is not a working-group document. The token model covers identity, scoped grants, delegation, attestation, federation, and revocation. A companion broker layer is named and is not specified in this file. — https://www.ietf.org/archive/id/draft-fane-opena2a-aap-02.txt (2026-09-30) VERIFIED
Datatracker document page for draft-fane-opena2a-aap. — https://datatracker.ietf.org/doc/draft-fane-opena2a-aap/ (2026-09-30) VERIFIED

JSON · Markdown