# OpenA2A Agent Authorization Protocol AAP

[3 · Permit](/category/permit/)

| OpenA2A Agent Authorization Protocol |
| --- |
| Category | [Permit](/category/permit/) |
| Governed by | IETF individual submission by A. Fane, OpenA2A. Standards Track intent. Not a working-group document. |
| Status | Internet-Draft, individual submission, Intended status: Standards Track; draft-fane-opena2a-aap-02 dated 2026-09-30, expires 2027-04-03 |
| Phase | draft |
| Implementation | none found |
| Adoption | unmeasured |
| Version | draft-fane-opena2a-aap-02 (2026-09-30) |
| Specification | [https://www.ietf.org/archive/id/draft-fane-opena2a-aap-02.txt](https://www.ietf.org/archive/id/draft-fane-opena2a-aap-02.txt) |
| Found at | Token model for identity, grants, delegation, attestation, federation, and revocation. The named broker layer is not specified in this draft, and no well-known file is defined. |
| Acronym collisions | Agent Authorization Profile (draft-aap-oauth-profile-01), the expired individual draft recorded as aap, Agent Attribution Protocol, an unrelated use of the AAP acronym |
| Last checked | 2026-10-20 |
| Freshness | current · checked 2026-10-20 |
| Solves | Delegate a user's authority to an agent, Prove an agent's identity, Audit what an agent did |

OpenA2A Agent Authorization Protocol (AAP) is an agentic-web standard (document format) at step 3, Permit, governed by IETF individual submission by A. Fane, OpenA2A. Standards Track intent. Not a working-group document; its own status is "Internet-Draft, individual submission, Intended status: Standards Track; draft-fane-opena2a-aap-02 dated 2026-09-30, expires 2027-04-03" (draft). It answers: How does an agent present identity, a scoped grant, a delegation, and an attestation when it calls another agent or a tool? Adoption is unmeasured, last verified 2026-10-20.

[Permit](/category/permit/) The OpenA2A Agent Authorization Protocol (AAP) is an individual IETF Internet-Draft, draft-fane-opena2a-aap-02, dated 30 September 2026 and expiring 3 April 2027 [[1]](#ref-1). The header says Standards Track and Individual Submission. The author is A. Fane, OpenA2A. It is not a working-group document [[1]](#ref-1).

## Overview
The draft is an authorization complement to A2A and MCP. It specifies a token model for agent identity assertion, scoped capability grants, cross-agent delegation, behavioral attestation, federation, and revocation [[1]](#ref-1). A companion broker layer is named and is not specified in this document [[1]](#ref-1).

This is a different document from the expired draft-aap-oauth-profile-01, which this map records as aap. The -02 text was current on 2026-10-20. The Workload Authorization Grant, the identity-continuation assertion, and the Agent-Delegation header are separate records from this one. The datatracker entry for the draft is [[2]](#ref-2).

## Discovery and probe

Token model for identity, grants, delegation, attestation, federation, and revocation. The named broker layer is not specified in this draft, and no well-known file is defined.

```
n/a n/a (token model; the broker layer is named and not specified)
parse:     n/a. The draft specifies a token model. It does not define a fixed path to fetch.
on absent: No public artifact is defined, so absence at an origin is expected.
```

Not probed live: no-fixed-path. OpenA2A AAP is a token model. The named broker layer is not specified, and nothing is published at a fixed path.

## History
- 2026-10-20 — added from staged research 2026-10-20; header read from draft-fane-opena2a-aap-02. Kept separate from the expired aap record (draft-aap-oauth-profile-01).

## Instances

No instances recorded yet.

## See also

- Not to be confused with: Agent Authorization Profile (draft-aap-oauth-profile-01), the expired individual draft recorded as aap, Agent Attribution Protocol, an unrelated use of the AAP acronym

## References

- draft-fane-opena2a-aap-02, OpenA2A Agent Authorization Protocol, is a Standards Track individual submission by A. Fane (OpenA2A), dated 30 September 2026 and expiring 3 April 2027. The header says Individual Submission. It is not a working-group document. The token model covers identity, scoped grants, delegation, attestation, federation, and revocation. A companion broker layer is named and is not specified in this file. — [https://www.ietf.org/archive/id/draft-fane-opena2a-aap-02.txt](https://www.ietf.org/archive/id/draft-fane-opena2a-aap-02.txt) (2026-09-30) VERIFIED
- Datatracker document page for draft-fane-opena2a-aap. — [https://datatracker.ietf.org/doc/draft-fane-opena2a-aap/](https://datatracker.ietf.org/doc/draft-fane-opena2a-aap/) (2026-09-30) VERIFIED

[JSON](/data/protocols/opena2a-aap.json) · [Markdown](/protocols/opena2a-aap/index.md)