{ "title": "The Agent Identity Standards Map 2026: dataset", "publisher": "StartWithIdentity.com", "report": "https://startwithidentity.com/reports/agent-identity-standards-map-2026/", "last_updated": "2026-10-30", "license": "CC BY 4.0", "row_count": 70, "status_class_definitions": { "specified": "Published RFC, OpenID Final Specification, W3C Recommendation, SPIFFE Stable specification, or a released revision of an agent protocol (MCP, A2A)", "drafted-wg": "Adopted by a standards working group (IETF WG document, OpenID WG draft, SPIFFE Incubating) but not final", "drafted-individual": "Individual Internet-Draft, not adopted by any working group (includes expired drafts)", "agent-protocol-draft": "Open proposal (SEP) in an agent protocol, not part of a released revision", "chartered-no-spec": "A group exists but has published no draft", "guidance": "Non-normative guidance, risk list, or concept paper" }, "problems": { "P1": "agent-authentication", "P2": "on-behalf-of-delegation", "P3": "async-consent", "P4": "chained-delegation", "P5": "fine-grained-authorization", "P6": "audience-resource-binding", "P7": "proof-of-possession", "P8": "revocation-session-signals", "P9": "registration-discovery", "P10": "agent-lifecycle-registry", "P11": "audit-attribution" }, "rows": [ { "name": "The OAuth 2.0 Authorization Framework", "body": "IETF", "identifier": "RFC 6749", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2012-10", "url": "https://www.rfc-editor.org/rfc/rfc6749.html", "problems_addressed": "on-behalf-of-delegation", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 Token Revocation", "body": "IETF", "identifier": "RFC 7009", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2013-08", "url": "https://www.rfc-editor.org/rfc/rfc7009.html", "problems_addressed": "revocation-session-signals", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants", "body": "IETF", "identifier": "RFC 7523", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2015-05", "url": "https://www.rfc-editor.org/rfc/rfc7523.html", "problems_addressed": "agent-authentication;on-behalf-of-delegation", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 Dynamic Client Registration Protocol", "body": "IETF", "identifier": "RFC 7591", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2015-07", "url": "https://www.rfc-editor.org/rfc/rfc7591.html", "problems_addressed": "registration-discovery", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Proof Key for Code Exchange (PKCE)", "body": "IETF", "identifier": "RFC 7636", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2015-09", "url": "https://www.rfc-editor.org/rfc/rfc7636.html", "problems_addressed": "on-behalf-of-delegation", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 Authorization Server Metadata", "body": "IETF", "identifier": "RFC 8414", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2018-06", "url": "https://www.rfc-editor.org/rfc/rfc8414.html", "problems_addressed": "registration-discovery", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Security Event Token (SET)", "body": "IETF", "identifier": "RFC 8417", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2018-07", "url": "https://www.rfc-editor.org/rfc/rfc8417.html", "problems_addressed": "revocation-session-signals", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 Token Exchange", "body": "IETF", "identifier": "RFC 8693", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2020-01", "url": "https://www.rfc-editor.org/rfc/rfc8693.html", "problems_addressed": "on-behalf-of-delegation;chained-delegation;audit-attribution", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens", "body": "IETF", "identifier": "RFC 8705", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2020-02", "url": "https://www.rfc-editor.org/rfc/rfc8705.html", "problems_addressed": "agent-authentication;proof-of-possession", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Resource Indicators for OAuth 2.0", "body": "IETF", "identifier": "RFC 8707", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2020-02", "url": "https://www.rfc-editor.org/rfc/rfc8707.html", "problems_addressed": "audience-resource-binding", "adoption_signal": "Required by MCP 2026-07-28; expected-resource check in the official MCP TypeScript SDK", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 Authorization Server Issuer Identification", "body": "IETF", "identifier": "RFC 9207", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2022-03", "url": "https://www.rfc-editor.org/rfc/rfc9207.html", "problems_addressed": "on-behalf-of-delegation", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 Rich Authorization Requests", "body": "IETF", "identifier": "RFC 9396", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2023-05", "url": "https://www.rfc-editor.org/rfc/rfc9396.html", "problems_addressed": "fine-grained-authorization", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "HTTP Message Signatures", "body": "IETF", "identifier": "RFC 9421", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2024-02", "url": "https://www.rfc-editor.org/rfc/rfc9421.html", "problems_addressed": "agent-authentication;proof-of-possession", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 Demonstrating Proof of Possession (DPoP)", "body": "IETF", "identifier": "RFC 9449", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2023-09", "url": "https://www.rfc-editor.org/rfc/rfc9449.html", "problems_addressed": "proof-of-possession", "adoption_signal": "Documented in Okta and Auth0 developer docs", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 Step Up Authentication Challenge Protocol", "body": "IETF", "identifier": "RFC 9470", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2023-09", "url": "https://www.rfc-editor.org/rfc/rfc9470.html", "problems_addressed": "async-consent;fine-grained-authorization", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Grant Negotiation and Authorization Protocol (GNAP)", "body": "IETF", "identifier": "RFC 9635", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2024-10", "url": "https://www.rfc-editor.org/rfc/rfc9635.html", "problems_addressed": "on-behalf-of-delegation;async-consent", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Best Current Practice for OAuth 2.0 Security", "body": "IETF", "identifier": "RFC 9700", "status": "Best Current Practice (RFC)", "status_class": "specified", "latest_version_date": "2025-01", "url": "https://www.rfc-editor.org/rfc/rfc9700.html", "problems_addressed": "audience-resource-binding;proof-of-possession", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 Protected Resource Metadata", "body": "IETF", "identifier": "RFC 9728", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2025-04", "url": "https://www.rfc-editor.org/rfc/rfc9728.html", "problems_addressed": "audience-resource-binding;registration-discovery", "adoption_signal": "Required by MCP 2026-07-28; implemented in the official MCP TypeScript SDK", "verified_on": "2026-10-30" }, { "name": "Selective Disclosure for JSON Web Tokens (SD-JWT)", "body": "IETF", "identifier": "RFC 9901", "status": "Proposed Standard (RFC)", "status_class": "specified", "latest_version_date": "2025-11", "url": "https://www.rfc-editor.org/rfc/rfc9901.html", "problems_addressed": "chained-delegation", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "The OAuth 2.1 Authorization Framework", "body": "IETF OAuth WG", "identifier": "draft-ietf-oauth-v2-1-17", "status": "WG Document", "status_class": "drafted-wg", "latest_version_date": "2026-10-30", "url": "https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/", "problems_addressed": "on-behalf-of-delegation;audience-resource-binding", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth Client ID Metadata Document", "body": "IETF OAuth WG", "identifier": "draft-ietf-oauth-client-id-metadata-document-02", "status": "WG Document", "status_class": "drafted-wg", "latest_version_date": "2026-07-06", "url": "https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/", "problems_addressed": "registration-discovery", "adoption_signal": "SHOULD in MCP 2026-07-28; implemented in the official MCP TypeScript SDK", "verified_on": "2026-10-30" }, { "name": "Identity Assertion JWT Authorization Grant (ID-JAG, Cross App Access)", "body": "IETF OAuth WG", "identifier": "draft-ietf-oauth-identity-assertion-authz-grant-06", "status": "WG Document", "status_class": "drafted-wg", "latest_version_date": "2026-10-30", "url": "https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/", "problems_addressed": "on-behalf-of-delegation;chained-delegation", "adoption_signal": "Okta Agent SSO / Cross App Access GA (2026-08-24); basis of MCP Enterprise-Managed Authorization", "verified_on": "2026-10-30" }, { "name": "OAuth Identity and Authorization Chaining Across Domains", "body": "IETF OAuth WG", "identifier": "draft-ietf-oauth-identity-chaining-17", "status": "Approved; RFC Editor Queue (Proposed Standard)", "status_class": "drafted-wg", "latest_version_date": "2026-07-19", "url": "https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-chaining/", "problems_addressed": "chained-delegation", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Transaction Tokens", "body": "IETF OAuth WG", "identifier": "draft-ietf-oauth-transaction-tokens-11", "status": "WG Consensus: Waiting for Write-Up", "status_class": "drafted-wg", "latest_version_date": "2026-07-30", "url": "https://datatracker.ietf.org/doc/draft-ietf-oauth-transaction-tokens/", "problems_addressed": "chained-delegation;audit-attribution", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Deferred Token Response", "body": "IETF OAuth WG", "identifier": "draft-ietf-oauth-deferred-token-response-00", "status": "WG Document", "status_class": "drafted-wg", "latest_version_date": "2026-09-16", "url": "https://datatracker.ietf.org/doc/draft-ietf-oauth-deferred-token-response/", "problems_addressed": "async-consent", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Delegate SD-JWT", "body": "IETF OAuth WG", "identifier": "draft-ietf-oauth-delegate-sd-jwt-00", "status": "WG Document", "status_class": "drafted-wg", "latest_version_date": "2026-10-30", "url": "https://datatracker.ietf.org/doc/draft-ietf-oauth-delegate-sd-jwt/", "problems_addressed": "chained-delegation", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 Attestation-Based Client Authentication", "body": "IETF OAuth WG", "identifier": "draft-ietf-oauth-attestation-based-client-auth-12", "status": "WG Consensus: Waiting for Write-Up", "status_class": "drafted-wg", "latest_version_date": "2026-10-12", "url": "https://datatracker.ietf.org/doc/draft-ietf-oauth-attestation-based-client-auth/", "problems_addressed": "agent-authentication", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth SPIFFE Client Authentication", "body": "IETF OAuth WG", "identifier": "draft-ietf-oauth-spiffe-client-auth-02", "status": "WG Document", "status_class": "drafted-wg", "latest_version_date": "2026-06-15", "url": "https://datatracker.ietf.org/doc/draft-ietf-oauth-spiffe-client-auth/", "problems_addressed": "agent-authentication", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 RAR Metadata and Error Remediation", "body": "IETF OAuth WG", "identifier": "draft-ietf-oauth-rar-metadata-remediation-00", "status": "WG Document", "status_class": "drafted-wg", "latest_version_date": "2026-08-23", "url": "https://datatracker.ietf.org/doc/draft-ietf-oauth-rar-metadata-remediation/", "problems_addressed": "fine-grained-authorization", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "WIMSE Architecture", "body": "IETF WIMSE WG", "identifier": "draft-ietf-wimse-arch-08", "status": "WG Document", "status_class": "drafted-wg", "latest_version_date": "2026-07-06", "url": "https://datatracker.ietf.org/doc/draft-ietf-wimse-arch/", "problems_addressed": "agent-authentication", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "WIMSE Workload Credentials", "body": "IETF WIMSE WG", "identifier": "draft-ietf-wimse-workload-creds-03", "status": "WG Document", "status_class": "drafted-wg", "latest_version_date": "2026-10-30", "url": "https://datatracker.ietf.org/doc/draft-ietf-wimse-workload-creds/", "problems_addressed": "agent-authentication", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "WIMSE Workload-to-Workload Authentication with HTTP Signatures", "body": "IETF WIMSE WG", "identifier": "draft-ietf-wimse-http-signature-08", "status": "Submitted to IESG; Publication Requested (Proposed Standard)", "status_class": "drafted-wg", "latest_version_date": "2026-10-20", "url": "https://datatracker.ietf.org/doc/draft-ietf-wimse-http-signature/", "problems_addressed": "agent-authentication;proof-of-possession", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Workload Authentication Using Mutual TLS", "body": "IETF WIMSE WG", "identifier": "draft-ietf-wimse-mutual-tls-03", "status": "WG Document", "status_class": "drafted-wg", "latest_version_date": "2026-10-24", "url": "https://datatracker.ietf.org/doc/draft-ietf-wimse-mutual-tls/", "problems_addressed": "agent-authentication;proof-of-possession", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "WIMSE Workload Proof Token", "body": "IETF WIMSE WG", "identifier": "draft-ietf-wimse-wpt-02", "status": "WG Document", "status_class": "drafted-wg", "latest_version_date": "2026-08-27", "url": "https://datatracker.ietf.org/doc/draft-ietf-wimse-wpt/", "problems_addressed": "agent-authentication;proof-of-possession", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Workload Identifier", "body": "IETF WIMSE WG", "identifier": "draft-ietf-wimse-identifier-04", "status": "WG Document", "status_class": "drafted-wg", "latest_version_date": "2026-10-23", "url": "https://datatracker.ietf.org/doc/draft-ietf-wimse-identifier/", "problems_addressed": "agent-authentication;audit-attribution", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Workload Identity Practices", "body": "IETF WIMSE WG", "identifier": "draft-ietf-wimse-workload-identity-practices-08", "status": "In IETF Last Call, ends 2026-11-13 (Informational)", "status_class": "drafted-wg", "latest_version_date": "2026-10-30", "url": "https://datatracker.ietf.org/doc/draft-ietf-wimse-workload-identity-practices/", "problems_addressed": "agent-authentication", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "AI Identity Management System (AIMS)", "body": "IETF WIMSE WG", "identifier": "draft-ietf-wimse-aims-00", "status": "WG Document (Informational; replaces draft-klrc-aiagent-auth)", "status_class": "drafted-wg", "latest_version_date": "2026-09-15", "url": "https://datatracker.ietf.org/doc/draft-ietf-wimse-aims/", "problems_addressed": "agent-authentication;on-behalf-of-delegation;async-consent;chained-delegation;revocation-session-signals;audit-attribution", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "AAuth Protocol", "body": "IETF (individual)", "identifier": "draft-hardt-oauth-aauth-protocol-11", "status": "Individual Internet-Draft", "status_class": "drafted-individual", "latest_version_date": "2026-09-25", "url": "https://datatracker.ietf.org/doc/draft-hardt-oauth-aauth-protocol/", "problems_addressed": "agent-authentication;on-behalf-of-delegation;async-consent", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "WIMSE Applicability for AI Agents", "body": "IETF (individual)", "identifier": "draft-ni-wimse-ai-agent-identity-04", "status": "Individual Internet-Draft", "status_class": "drafted-individual", "latest_version_date": "2026-10-27", "url": "https://datatracker.ietf.org/doc/draft-ni-wimse-ai-agent-identity/", "problems_addressed": "agent-authentication;agent-lifecycle-registry", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Transaction Tokens For Agents", "body": "IETF (individual)", "identifier": "draft-araut-oauth-transaction-tokens-for-agents-02", "status": "Individual Internet-Draft", "status_class": "drafted-individual", "latest_version_date": "2026-05-21", "url": "https://datatracker.ietf.org/doc/draft-araut-oauth-transaction-tokens-for-agents/", "problems_addressed": "chained-delegation;audit-attribution", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 Extension: On-Behalf-Of User Authorization for AI Agents", "body": "IETF (individual)", "identifier": "draft-oauth-ai-agents-on-behalf-of-user-02", "status": "Expired individual Internet-Draft", "status_class": "drafted-individual", "latest_version_date": "2025-08-25", "url": "https://datatracker.ietf.org/doc/draft-oauth-ai-agents-on-behalf-of-user/", "problems_addressed": "on-behalf-of-delegation;async-consent", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Attenuating Authorization Tokens for Agentic Delegation Chains", "body": "IETF (individual)", "identifier": "draft-niyikiza-oauth-attenuating-agent-tokens-02", "status": "Individual Internet-Draft", "status_class": "drafted-individual", "latest_version_date": "2026-10-26", "url": "https://datatracker.ietf.org/doc/draft-niyikiza-oauth-attenuating-agent-tokens/", "problems_addressed": "chained-delegation", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OAuth 2.0 Agent Authorization Explicit Revocation", "body": "IETF (individual)", "identifier": "draft-chen-oauth-agent-revocation-01", "status": "Individual Internet-Draft", "status_class": "drafted-individual", "latest_version_date": "2026-10-30", "url": "https://datatracker.ietf.org/doc/draft-chen-oauth-agent-revocation/", "problems_addressed": "revocation-session-signals", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "An Audit Record Format for AI Agent Authorization Decisions", "body": "IETF (individual)", "identifier": "draft-gilda-audit-agent-audit-record-03", "status": "Individual Internet-Draft (replaces draft-gilda-wimse-agent-audit-record)", "status_class": "drafted-individual", "latest_version_date": "2026-10-29", "url": "https://datatracker.ietf.org/doc/draft-gilda-audit-agent-audit-record/", "problems_addressed": "audit-attribution", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "SCIM Agents and Agentic Applications Extension", "body": "IETF (individual)", "identifier": "draft-abbey-scim-agent-extension-00", "status": "Expired individual Internet-Draft", "status_class": "drafted-individual", "latest_version_date": "2025-10-16", "url": "https://datatracker.ietf.org/doc/draft-abbey-scim-agent-extension/", "problems_addressed": "agent-lifecycle-registry", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "SCIM: Agentic Identity Schema", "body": "IETF (individual)", "identifier": "draft-wahl-scim-agent-schema-01", "status": "Expired individual Internet-Draft", "status_class": "drafted-individual", "latest_version_date": "2025-08-18", "url": "https://datatracker.ietf.org/doc/draft-wahl-scim-agent-schema/", "problems_addressed": "agent-lifecycle-registry", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "MCP Authorization", "body": "Agentic AI Foundation (Linux Foundation) / MCP", "identifier": "MCP 2026-07-28, Basic: Authorization", "status": "Current protocol revision", "status_class": "specified", "latest_version_date": "2026-07-28", "url": "https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization", "problems_addressed": "on-behalf-of-delegation;fine-grained-authorization;audience-resource-binding;registration-discovery", "adoption_signal": "Official MCP TypeScript SDK implements Protected Resource Metadata, resource checks and CIMD", "verified_on": "2026-10-30" }, { "name": "MCP Elicitation (URL mode)", "body": "Agentic AI Foundation (Linux Foundation) / MCP", "identifier": "MCP 2026-07-28, Client: Elicitation", "status": "Current protocol revision (URL mode introduced 2025-11-25)", "status_class": "specified", "latest_version_date": "2026-07-28", "url": "https://modelcontextprotocol.io/specification/2026-07-28/client/elicitation", "problems_addressed": "async-consent", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "MCP Enterprise-Managed Authorization extension", "body": "Agentic AI Foundation (Linux Foundation) / MCP", "identifier": "ext-auth enterprise-managed-authorization 2026-07-28", "status": "Stable extension", "status_class": "specified", "latest_version_date": "2026-07-28", "url": "https://github.com/modelcontextprotocol/ext-auth/blob/main/specification/stable/enterprise-managed-authorization/2026-07-28/enterprise-managed-authorization.mdx", "problems_addressed": "on-behalf-of-delegation", "adoption_signal": "Okta Agent SSO (Cross App Access) GA 2026-08-24", "verified_on": "2026-10-30" }, { "name": "MCP OAuth Client Credentials extension", "body": "Agentic AI Foundation (Linux Foundation) / MCP", "identifier": "ext-auth oauth-client-credentials 2026-07-28", "status": "Stable extension", "status_class": "specified", "latest_version_date": "2026-07-28", "url": "https://github.com/modelcontextprotocol/ext-auth/blob/main/specification/stable/oauth-client-credentials/2026-07-28/oauth-client-credentials.mdx", "problems_addressed": "agent-authentication", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "MCP DPoP Profile", "body": "Agentic AI Foundation (Linux Foundation) / MCP", "identifier": "SEP-1932", "status": "Open SEP (draft extension)", "status_class": "agent-protocol-draft", "latest_version_date": "2026-10-21", "url": "https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1932", "problems_addressed": "proof-of-possession", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "MCP Workload Identity Federation", "body": "Agentic AI Foundation (Linux Foundation) / MCP", "identifier": "SEP-1933", "status": "Open SEP (draft extension)", "status_class": "agent-protocol-draft", "latest_version_date": "2026-10-12", "url": "https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1933", "problems_addressed": "agent-authentication", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Agent2Agent (A2A) Protocol", "body": "Agentic AI Foundation (Linux Foundation) / A2A", "identifier": "A2A 1.0 (release v1.0.1)", "status": "Released specification", "status_class": "specified", "latest_version_date": "2026-05-28", "url": "https://a2a-protocol.org/v1.0.0/specification/", "problems_addressed": "agent-authentication;async-consent;registration-discovery", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OpenID Shared Signals Framework 1.0", "body": "OpenID Foundation", "identifier": "openid-sharedsignals-framework-1_0", "status": "Final Specification", "status_class": "specified", "latest_version_date": "2025-08-29", "url": "https://openid.net/specs/openid-sharedsignals-framework-1_0-final.html", "problems_addressed": "revocation-session-signals", "adoption_signal": "Apple, IBM and Okta named as adopters by OIDF (2025-09-16)", "verified_on": "2026-10-30" }, { "name": "OpenID Continuous Access Evaluation Profile (CAEP) 1.0", "body": "OpenID Foundation", "identifier": "openid-caep-1_0", "status": "Final Specification", "status_class": "specified", "latest_version_date": "2025-08-29", "url": "https://openid.net/specs/openid-caep-1_0-final.html", "problems_addressed": "revocation-session-signals", "adoption_signal": "Apple, IBM and Okta named as adopters by OIDF (2025-09-16)", "verified_on": "2026-10-30" }, { "name": "OpenID Risk Incident Sharing and Coordination (RISC) 1.0", "body": "OpenID Foundation", "identifier": "openid-risc-1_0", "status": "Final Specification", "status_class": "specified", "latest_version_date": "2025-08-29", "url": "https://openid.net/specs/openid-risc-1_0-final.html", "problems_addressed": "revocation-session-signals", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "AuthZEN Authorization API 1.0", "body": "OpenID Foundation", "identifier": "authorization-api-1_0", "status": "Final Specification", "status_class": "specified", "latest_version_date": "2026-01-11", "url": "https://openid.net/specs/authorization-api-1_0.html", "problems_addressed": "fine-grained-authorization", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "COAZ-MCP: COAZ Binding for the Model Context Protocol", "body": "OpenID Foundation (AuthZEN WG)", "identifier": "authzen-coaz-mcp-binding-1_0 Draft 1", "status": "Working Group Draft", "status_class": "drafted-wg", "latest_version_date": "2026-02-13", "url": "https://openid.github.io/authzen/authzen-coaz-mcp-binding-1_0.html", "problems_addressed": "fine-grained-authorization", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "AuthZEN Access Request and Approval Profile", "body": "OpenID Foundation (AuthZEN WG)", "identifier": "authzen-access-request-approval-profile-1_0 Draft 1", "status": "Working Group Draft", "status_class": "drafted-wg", "latest_version_date": "2026-10-29", "url": "https://openid.github.io/authzen/authzen-access-request-approval-profile-1_0.html", "problems_addressed": "async-consent;fine-grained-authorization", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OpenID Connect Client-Initiated Backchannel Authentication (CIBA) Core 1.0", "body": "OpenID Foundation", "identifier": "openid-client-initiated-backchannel-authentication-core-1_0", "status": "Final Specification", "status_class": "specified", "latest_version_date": "2021-09-01", "url": "https://openid.net/specs/openid-client-initiated-backchannel-authentication-core-1_0.html", "problems_addressed": "async-consent", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OpenID Connect Authority claims extension", "body": "OpenID Foundation (eKYC & IDA WG)", "identifier": "openid-connect-authority-1_0-00", "status": "Working Group Draft (human-to-human delegated authority; no agent text)", "status_class": "drafted-wg", "latest_version_date": "2026-05-25", "url": "https://openid.bitbucket.io/ekyc/openid-authority.html", "problems_addressed": "on-behalf-of-delegation", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Identity Management for Agentic AI (whitepaper)", "body": "OpenID Foundation (AIIM Community Group)", "identifier": "Whitepaper", "status": "Non-normative guidance", "status_class": "guidance", "latest_version_date": "2025-10-07", "url": "https://openid.net/new-whitepaper-tackles-ai-agent-identity-challenges/", "problems_addressed": "agent-authentication;on-behalf-of-delegation;async-consent;chained-delegation;agent-lifecycle-registry;audit-attribution", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "SPIFFE (SPIFFE ID, X.509-SVID, JWT-SVID, Workload API, Federation)", "body": "CNCF (SPIFFE project)", "identifier": "spiffe/standards", "status": "Stable (SPIFFE stability level); CNCF Graduated project", "status_class": "specified", "latest_version_date": "2026-09-26", "url": "https://github.com/spiffe/spiffe/tree/main/standards", "problems_addressed": "agent-authentication", "adoption_signal": "SPIRE reference implementation, v1.15.5 released 2026-10-20", "verified_on": "2026-10-30" }, { "name": "WIT-SVID (WIMSE Identity Token SVID)", "body": "CNCF (SPIFFE project)", "identifier": "spiffe/standards/WIT-SVID.md", "status": "Incubating (SPIFFE stability level)", "status_class": "drafted-wg", "latest_version_date": "2026-07-01", "url": "https://github.com/spiffe/spiffe/blob/main/standards/WIT-SVID.md", "problems_addressed": "agent-authentication;proof-of-possession", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Verifiable Credentials Data Model v2.0", "body": "W3C", "identifier": "vc-data-model-2.0", "status": "W3C Recommendation (no agent profile)", "status_class": "specified", "latest_version_date": "2025-05-15", "url": "https://www.w3.org/TR/vc-data-model-2.0/", "problems_addressed": "agent-lifecycle-registry", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Agent Identity Registry Protocol Community Group", "body": "W3C (Community Group)", "identifier": "agent-identity CG", "status": "Community Group launched; no drafts published", "status_class": "chartered-no-spec", "latest_version_date": "2026-04-24", "url": "https://www.w3.org/community/agent-identity/", "problems_addressed": "agent-lifecycle-registry", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Agentic Authentication Technical Working Group", "body": "FIDO Alliance", "identifier": "Agentic Authentication TWG", "status": "Working group announced; no published specification", "status_class": "chartered-no-spec", "latest_version_date": "2026-04-28", "url": "https://fidoalliance.org/fido-alliance-to-develop-standards-for-trusted-ai-agent-interactions/", "problems_addressed": "on-behalf-of-delegation;async-consent", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "Accelerating the Adoption of Software and AI Agent Identity and Authorization (concept paper)", "body": "NIST NCCoE", "identifier": "NCCoE concept paper (Initial Public Draft)", "status": "Initial Public Draft; comments closed 2026-04-02", "status_class": "guidance", "latest_version_date": "2026-02-05", "url": "https://csrc.nist.gov/pubs/other/2026/02/05/accelerating-the-adoption-of-software-and-ai-agent/ipd", "problems_addressed": "agent-authentication;on-behalf-of-delegation;revocation-session-signals;audit-attribution", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OWASP Top 10 for Agentic Applications for 2026", "body": "OWASP GenAI Security Project", "identifier": "ASI01-ASI10", "status": "Published risk list (non-normative)", "status_class": "guidance", "latest_version_date": "2025-12-09", "url": "https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/", "problems_addressed": "", "adoption_signal": "", "verified_on": "2026-10-30" }, { "name": "OWASP Non-Human Identities Top 10", "body": "OWASP", "identifier": "NHI1-NHI10:2025", "status": "Published risk list (non-normative)", "status_class": "guidance", "latest_version_date": "2025", "url": "https://owasp.org/www-project-non-human-identities-top-10/2025/", "problems_addressed": "agent-authentication;agent-lifecycle-registry", "adoption_signal": "", "verified_on": "2026-10-30" } ] }