Services Case Studies Insights About Start a project →

A2A and MCP under one roof: what the Agentic AI Foundation means for your agent stack.

Architecture Published August 25, 2026 8 min read

Why this matters right now

On August 20, 2026, the Linux Foundation's Agentic AI Foundation announced that Google's A2A protocol had joined its stable of hosted projects, sitting alongside Anthropic's Model Context Protocol, which became a founding project when the foundation launched. In under a year, the AAIF has grown from 49 founding members to more than 250, including every major cloud provider and model lab. That growth number matters less than what it now hosts. For the first time, the two protocols that define how AI agents talk to tools and how AI agents talk to each other live under the same neutral governance umbrella, instead of being controlled by the two companies that happened to invent them.

If you have shipped anything with agents in it over the last two years, you have already felt the cost of the alternative. Every team building multi-agent systems has had to make a bet on which company's protocol would still be relevant in eighteen months, and every team integrating a partner's agent has had to write a bespoke adapter because there was no shared contract for agent-to-agent communication the way there was, eventually, for agent-to-tool communication. A2A joining MCP inside a vendor-neutral foundation is the industry's clearest signal yet that both layers are now considered infrastructure, not competitive moats, and that the era of picking a protocol because of who built it rather than what it does is ending.

Two protocols, two jobs

The two protocols are not competitors, and treating them as interchangeable is the single most common architectural mistake we see teams make when they first start building agentic systems. They solve different problems, and a production system typically needs both.

The two layers, in practice

  • MCP handles the vertical connection. It standardizes how a single agent reaches down into tools, databases, search indexes, and enterprise systems, giving a model a consistent way to discover and call capabilities it does not own.
  • A2A handles the horizontal connection. It standardizes how two independent agents, often built by different teams or different companies, negotiate a task, exchange identity credentials, and maintain state across an organizational boundary that neither side controls.
  • MCP assumes a trusted operator. The agent calling an MCP server is usually inside the same security boundary as whoever configured the server, which is why MCP's security model has historically leaned on the calling application to enforce authorization.
  • A2A assumes an adversarial or at least unfamiliar counterparty. Two agents negotiating a task across company lines need capability discovery, mutual authentication, and a task lifecycle that survives one side going offline mid-conversation, none of which MCP was designed to provide.

A useful mental model is that MCP is the protocol inside your agent's head, connecting it to the tools it reaches for, while A2A is the protocol between two heads, connecting your agent to somebody else's. Most production systems we have built over the last year need both: an orchestrating agent that uses MCP to pull data and call internal tools, then hands a subtask to an external or third-party agent over A2A when the work crosses a trust boundary the calling agent does not control.

What neutral governance actually changes

Moving a protocol into a Linux Foundation project is not a cosmetic rebrand. It changes who can veto a breaking change, who funds the maintainers, and how disputes between competing implementers get resolved. Anthropic donating MCP as a founding project and Google folding A2A in a year later both give up unilateral control over the specification's roadmap in exchange for broader adoption and a governance structure that large enterprises are more comfortable building compliance programs around.

  • Roadmap decisions move to a technical steering committee. A single vendor can no longer ship a breaking change to either protocol on its own release calendar, which reduces the whiplash teams have felt from the fast-moving MCP spec revisions over the past year.
  • Certification and conformance testing become foundation responsibilities. Expect formal conformance suites for both protocols over the next year, the same pattern Kubernetes conformance testing followed after it moved under the CNCF, which gives procurement teams something concrete to check before they approve a vendor's agent.
  • IP and trademark risk drops for adopters. Building critical infrastructure on a protocol one company can unilaterally relicense or discontinue is a real due diligence finding we have flagged in past engagements. Foundation governance closes that gap for both A2A and MCP.
  • Interoperability testing gets a home. With both protocols under one foundation, cross-protocol interoperability, an agent that speaks A2A to its peers and MCP to its tools, becomes something the foundation itself has an incentive to test and document, rather than something each vendor pair figures out independently.

What this means for a multi-agent architecture

For teams actively designing multi-agent systems, this consolidation should change a few concrete decisions rather than just providing reassurance about the industry's direction.

  • Stop building custom agent-to-agent adapters for partner integrations. If you have written a bespoke handshake protocol to let your agent talk to a partner's or vendor's agent, budget time to migrate that surface to A2A now that its governance and long-term support are no longer tied to one company's roadmap.
  • Separate your tool layer from your agent-to-agent layer explicitly. Systems that blurred MCP and A2A concerns together, often because A2A was immature when the system was first built, are the ones that will need the most rework. Draw the boundary now: internal tool calls go over MCP, cross-boundary task delegation goes over A2A.
  • Reconsider identity and auth architecture at the same time. A2A's task delegation model has real implications for how you propagate identity across an agent-to-agent call, particularly when the counterparty agent is not one your organization operates. This is the same non-human identity problem we have written about before, and A2A adoption is exactly the trigger that surfaces it in a system that previously only had to think about human users.
  • Treat protocol version pinning as an operational discipline, not an afterthought. Foundation governance slows the rate of breaking changes, but it does not eliminate them. Pin both A2A and MCP versions explicitly in your deployment manifests and test against the next version in a staging environment before it becomes mandatory.

Risks worth tracking

Consolidation reduces one kind of risk while introducing a different one worth watching over the next year. A shared protocol stack used by 250-plus organizations is a much larger attack surface than any single vendor's proprietary format, and a vulnerability discovered in either A2A or MCP's core specification now has blast radius across the entire ecosystem rather than one company's product line. The MCP ecosystem already learned this lesson the hard way earlier in 2026, when a wave of critical CVEs surfaced across reference server implementations faster than most teams were prepared to patch. A2A joining the same governance umbrella means the same discipline, tracking security advisories, subscribing to the foundation's disclosure channel, and testing patches against a staging environment before they hit production agents, now needs to extend to your agent-to-agent surface as well, not just your tool-calling surface.

There is also a slower-moving risk worth naming honestly: neutral governance reduces but does not remove the influence of the companies that still employ most of the maintainers and fund most of the development hours. Watch who actually shows up to the technical steering committee meetings over the next few quarters, not just who is listed as a foundation member, before treating either protocol as fully vendor-independent.

Practical takeaways

The practical shift here is simple even if the governance story is not: A2A and MCP are no longer bets on which company wins, they are infrastructure with the kind of neutral stewardship that makes them safe to build a multi-year architecture on. If your system still routes agent-to-agent calls through a homegrown protocol because A2A felt too immature or too tied to Google when you built it, this is the moment to revisit that decision. If you have not yet drawn a clean boundary between your tool-calling layer and your agent-to-agent layer, doing that now will save a much more painful refactor once both protocols keep evolving under foundation governance.

Working out where that boundary belongs in an existing system, and sequencing a migration onto A2A without breaking agents already in production, is exactly the kind of multi-agent architecture work our AI consultancy practice does for clients. Start by mapping every place your agents currently cross a trust boundary, since that map is what decides how much of this consolidation actually applies to your stack.

Keep reading

Designing an agent-to-agent architecture?

Start a conversation →
KT Solutions Assistant

Before we start, please share a few details so we can follow up with you.

Please enter your name and a valid email address.

End this conversation? Your chat will be emailed to us.