{"id":"https://openalex.org/W7141330659","doi":"https://doi.org/10.48550/arxiv.2603.24775","title":"AIP: Agent Identity Protocol for Verifiable Delegation Across MCP and A2A","display_name":"AIP: Agent Identity Protocol for Verifiable Delegation Across MCP and A2A","publication_year":2026,"publication_date":"2026-03-25","ids":{"openalex":"https://openalex.org/W7141330659","doi":"https://doi.org/10.48550/arxiv.2603.24775"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2603.24775","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2603.24775","pdf_url":"https://arxiv.org/pdf/2603.24775","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2603.24775","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128712526","display_name":"Sunil Prakash","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I122328836","display_name":"Indian School of Business","ror":"https://ror.org/027t6ka17","country_code":"IN","type":"education","lineage":["https://openalex.org/I122328836"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Prakash, Sunil","raw_affiliation_strings":["Indian School of Business , India ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian School of Business , India ,","institution_ids":["https://openalex.org/I122328836"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5128712526"],"corresponding_institution_ids":["https://openalex.org/I122328836"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":28,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9550999999046326,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9550999999046326,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.034699998795986176,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.0017999999690800905,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/model-context-protocol","display_name":"Model Context Protocol","score":0.9430000185966492},{"id":"https://openalex.org/keywords/agent-communication","display_name":"agent communication","score":0.8220000267028809},{"id":"https://openalex.org/keywords/ai-agents","display_name":"AI agents","score":0.5109999775886536},{"id":"https://openalex.org/keywords/capability-tokens","display_name":"capability tokens","score":0.7179999947547913},{"id":"https://openalex.org/keywords/json-web-tokens","display_name":"JSON Web Tokens","score":0.7099999785423279},{"id":"https://openalex.org/keywords/provenance","display_name":"provenance","score":0.7300000190734863},{"id":"https://openalex.org/keywords/multi-agent-systems","display_name":"multi-agent systems","score":0.6460000276565552},{"id":"https://openalex.org/keywords/authentication","display_name":"authentication","score":0.38100001215934753}],"concepts":[{"id":"https://openalex.org/C143273055","wikidata":"https://www.wikidata.org/wiki/Q2382794","display_name":"Delegate","level":2,"score":0.7994999885559082},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7652000188827515},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.6722000241279602},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.5741000175476074},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5659000277519226},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5453000068664551},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5217000246047974},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4519999921321869},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.4514000117778778},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.423799991607666},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.41130000352859497},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.3950999975204468},{"id":"https://openalex.org/C2778000800","wikidata":"https://www.wikidata.org/wiki/Q830043","display_name":"Handshake","level":3,"score":0.37310001254081726},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.3343000113964081},{"id":"https://openalex.org/C44209976","wikidata":"https://www.wikidata.org/wiki/Q1327773","display_name":"Non-repudiation","level":3,"score":0.3075999915599823},{"id":"https://openalex.org/C48677424","wikidata":"https://www.wikidata.org/wiki/Q6888088","display_name":"Mode (computer interface)","level":2,"score":0.28619998693466187},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.28279998898506165},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2791999876499176},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2680000066757202},{"id":"https://openalex.org/C206729178","wikidata":"https://www.wikidata.org/wiki/Q2271896","display_name":"Scheduling (production processes)","level":2,"score":0.26750001311302185},{"id":"https://openalex.org/C110406131","wikidata":"https://www.wikidata.org/wiki/Q41349","display_name":"Smart card","level":2,"score":0.2606000006198883},{"id":"https://openalex.org/C46934059","wikidata":"https://www.wikidata.org/wiki/Q61515","display_name":"Outsourcing","level":2,"score":0.2597000002861023}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2603.24775","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2603.24775","pdf_url":"https://arxiv.org/pdf/2603.24775","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2603.24775","doi":"https://doi.org/10.48550/arxiv.2603.24775","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.24775","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2603.24775","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2603.24775","pdf_url":"https://arxiv.org/pdf/2603.24775","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7141330659.pdf","grobid_xml":"https://content.openalex.org/works/W7141330659.grobid-xml"},"referenced_works_count":4,"referenced_works":["https://openalex.org/W7128811785","https://openalex.org/W7134941501","https://openalex.org/W7135204481","https://openalex.org/W7139916433"],"related_works":["https://openalex.org/W7160046061","https://openalex.org/W7130451913","https://openalex.org/W7167059369","https://openalex.org/W7143535413","https://openalex.org/W7158907938","https://openalex.org/W7214573407","https://openalex.org/W7150786496","https://openalex.org/W7154382776","https://openalex.org/W7172315602","https://openalex.org/W7203794011"],"abstract_inverted_index":{"AI":[0],"agents":[1,15],"increasingly":[2],"call":[3],"tools":[4],"via":[5,16],"the":[6],"Model":[7],"Context":[8],"Protocol":[9],"(MCP)":[10],"and":[11,62,79,102,120,132,180],"delegate":[12],"to":[13],"other":[14],"Agent-to-Agent":[17],"(A2A),":[18],"yet":[19],"neither":[20,194],"protocol":[21,46],"verifies":[22],"agent":[23],"identity.":[24],"A":[25],"scan":[26],"of":[27,156,159],"approximately":[28],"2,000":[29],"MCP":[30],"servers":[31],"found":[32],"all":[33],"lacked":[34],"authentication.":[35],"In":[36,144],"our":[37],"survey,":[38],"we":[39],"did":[40],"not":[41],"identify":[42],"a":[43,72,83,145],"prior":[44],"implemented":[45],"that":[47,74,193],"jointly":[48],"combines":[49],"public-key":[50],"verifiable":[51],"delegation,":[52],"holder-side":[53],"attenuation,":[54],"expressive":[55],"chained":[56,103,190],"policy,":[57],"transport":[58],"bindings":[59],"across":[60,165],"MCP/A2A/HTTP,":[61],"provenance-oriented":[63],"completion":[64],"records.":[65],"We":[66,114],"introduce":[67],"Invocation-Bound":[68],"Capability":[69],"Tokens":[70],"(IBCTs),":[71],"primitive":[73],"fuses":[75],"identity,":[76],"attenuated":[77],"authorization,":[78],"provenance":[80],"binding":[81],"into":[82],"single":[84],"append-only":[85],"token":[86,107],"chain.":[87],"IBCTs":[88],"operate":[89],"in":[90,118,140],"two":[91,174],"wire":[92],"formats:":[93],"compact":[94],"mode":[95,104,127],"(a":[96,105],"signed":[97],"JWT":[98,198],"for":[99,111],"single-hop":[100],"cases)":[101],"Biscuit":[106],"with":[108,122,135,149,173],"Datalog":[109],"policies":[110],"multi-hop":[112],"delegation).":[113],"provide":[115],"reference":[116],"implementations":[117],"Python":[119],"Rust":[121],"full":[123],"cross-language":[124],"interoperability.":[125],"Compact":[126],"verification":[128],"takes":[129],"0.049ms":[130],"(Rust)":[131],"0.189ms":[133],"(Python),":[134],"0.22ms":[136],"overhead":[137,157],"over":[138],"no-auth":[139],"real":[141,146],"MCP-over-HTTP":[142],"deployment.":[143],"multi-agent":[147],"deployment":[148],"Gemini":[150],"2.5":[151],"Flash,":[152],"AIP":[153],"adds":[154],"2.35ms":[155],"(0.086%":[158],"total":[160],"end-to-end":[161],"latency).":[162],"Adversarial":[163],"evaluation":[164],"600":[166],"attack":[167,175],"attempts":[168],"shows":[169],"100%":[170],"rejection":[171],"rate,":[172],"categories":[176],"(delegation":[177],"depth":[178],"violation":[179],"audit":[181],"evasion":[182],"through":[183],"empty":[184],"context)":[185],"uniquely":[186],"caught":[187],"by":[188],"AIP's":[189],"delegation":[191],"model":[192],"unsigned":[195],"nor":[196],"plain":[197],"deployments":[199],"detect.":[200]},"counts_by_year":[{"year":2026,"cited_by_count":27},{"year":2025,"cited_by_count":1}],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2026-03-28T00:00:00"}