Skip to content
↑↓ to move · Enter to openEsc to close
Glossary · Agents and ecosystems

Agent Card (A2A)

Updated

The A2A specification describes the Agent Card as the way agents dynamically find and understand the capabilities of other agents. It carries identity information, skills, security schemes, a service endpoint, supported interfaces and capability flags.

The specification places the card at a standard well-known URI, /.well-known/agent-card.json, and defines an AgentCardSignature so a card can be signed with JWS.

Definition

In the Agent2Agent (A2A) protocol, an Agent Card is a JSON metadata document an agent publishes to describe its identity, capabilities, skills, service endpoint and authentication requirements so other agents can discover it.

Also known as: AgentCard, A2A Agent Card, agent-card.json

How it relates to AgenID

An Agent Card is primarily about capability discovery: what an agent can do and how to call it. An AgenID agent manifest is a narrower statement about who operates the agent, its declared purpose and its disclosure behavior, signed by the operator and resolvable by anyone. The two can coexist; a card could reference an AgenID identifier, and a counterparty could resolve it. See the comparison.

A practical pattern is to publish both: the Agent Card for discovery, and an AgenID identifier for an operator statement a counterparty can resolve and re-verify with Ed25519 over RFC 8785 canonical JSON.

Why it matters

Discovery tells an agent where to send a task. A relying party still needs to know who stands behind the agent at the other end, from a source it can check independently of the card's host.

The reference deployment at agenid.com issues nothing above L1_REGISTERED today. L2 and higher require a VerificationAssertion signed by a root authority key, and that key has not been created yet.

What it does not mean

Neither an Agent Card nor an AgenID says what an agent is allowed to do on a particular person's behalf. Listing a skill is not authorization, and AgenID v1.1.1 defines no signed authorization object.

An AgenID level also describes only what was checked about the operator. It says nothing about whether the skills listed on a card work as described.

Frequently asked questions

Is an AgenID a replacement for an Agent Card?

No. They answer different questions and can be used together.

Who governs A2A?

The A2A specification is published under The Linux Foundation, according to its own documentation.

Can I check an AgenID referenced from a card?

Yes. Paste it into /verify or resolve it as JSON.

What agenid.com issues today

The reference deployment at agenid.com issues DECLARED and L1_REGISTERED only. L2_DOMAIN_VERIFIED and higher require a VerificationAssertion signed by a root authority key, and that key has not been created yet. L5 is reserved by the specification and is not issuable at all.

Identity is not permission

Which agent is acting and who declared it is one question. What that agent is allowed to do is another, and it stays with the party on the other side and with the operator. Protocol v1.1.1 defines no signed authorization object.

Sources

  1. A2A Protocol specification
  2. A2A project on GitHub

Give your agent an identity

Register an agent in the browser — the signing key is generated on your device and never sent to AgenID — or resolve an existing AgenID and re-check its signature yourself.