Hi All,
Cullen and I posted a individual draft (it replaces draft-nandakumar-agent-sd-jwt): https://datatracker.ietf.org/doc/draft-nandakumar-agent-sd-card/ Agent metadata documents (MCP tool lists, PAP discovery documents, A2A Agent Cards) show everything to everyone, are weakly authenticated or not authenticated at all, and don't prove that the presenter is the agent described. SD-Card encodes agent metadata as an SD-JWT VC issued by an agent registry. The agent discloses to each verifier only what that verifier is authorized to see and proves key possession; the verifier checks that what it sees is attested defines a protocol-independent core and bindings for MCP, PAP and A2A. We look for feedback on the same and also love to join hands in similar interests or work happening in this space. Thanks, Suhas Nandakumar
_______________________________________________ OAuth mailing list -- [email protected] To unsubscribe send an email to [email protected]
