Protocols & Standards
Architecture-focused reference for the standards enterprise AI actually uses.
MCP
Model Context Protocol for capability discovery and tool servers.
Coming SoonA2A
Agent-to-agent communication across trust boundaries.
Coming SoonOAuth
Delegated authorization for humans, apps, and agents.
Coming SoonOIDC
Identity layer on OAuth for authenticating principals.
Coming SoonJWT
Signed assertions used as tokens — and commonly misused as session state.
Coming SoonOAuth Token Exchange
RFC 8693 exchange for on-behalf-of and workload flows.
Coming SoonDPoP
Sender-constrained access tokens for stolen-token resistance.
Coming SoonFAPI
Financial-grade API profile for high-assurance OAuth.
Coming SoonOpenAPI
HTTP capability contracts agents can bind tools to.
Coming SoonAsyncAPI
Event and message contracts for asynchronous agents.
Coming SoonCloudEvents
A common envelope for enterprise events that wake agents.
Coming SoonJSON Schema
Structured outputs and tool argument validation.
Coming SoonOpenTelemetry
Traces, metrics, and logs for model and tool hops.
Coming SoonSPIFFE/SPIRE
Workload identity for services and agent runtimes.
Coming SoonWebhooks
Callback delivery — and the trust problems it creates.
Coming SoonCovenant Layer
Open protocol for outcome-based coordination across organizational trust boundaries.
RealTimeAuth
Dynamic authentication on HTTP/3 and QUIC for sub-100ms agent and app access.