MCP Goes Stateless in Biggest Spec Rewrite as A2A Joins AAIF
The MCP 2026-07-28 spec drops sessions for a stateless core, tightens OAuth and adds extensions, and A2A has joined MCP under the Agentic AI Foundation.
Autonomous AI agents are software systems that can plan, execute, and adapt multi-step tasks with limited human oversight, moving beyond chatbots into roles like customer service, IT operations, procurement, and B2B commerce. Unlike earlier automation, these agents can call tools, query databases, and coordinate with other agents to complete workflows end to end.
This space matters now because adoption is accelerating faster than the governance frameworks meant to contain it. Enterprises are racing to deploy agents that promise real productivity gains, while security teams grapple with new attack surfaces: agents that can be manipulated into leaking data, exceeding their permissions, or taking unintended actions across connected systems. High-profile breach incidents have underscored that agentic AI introduces risk categories traditional software security wasn't designed to catch.
At the same time, the technical foundation for agent-based computing is being built in real time. Interoperability protocols are emerging to let agents from different vendors communicate and share context, while server standards are being adopted to connect agents to enterprise data and tools more securely. Hardware makers are also responding, with new local computing options making it easier to run agents outside the cloud.
On this hub, readers will find coverage of the protocols and standards shaping agent interoperability, vendor product launches bringing agentic AI into specific verticals like commerce and IT service management, security research and incident analysis around agent vulnerabilities, and enterprise case studies showing how organizations are piloting or scaling autonomous agents. Expect a mix of technical deep dives, market moves, and governance debates as this technology matures.
The MCP 2026-07-28 spec drops sessions for a stateless core, tightens OAuth and adds extensions, and A2A has joined MCP under the Agentic AI Foundation.
Microsoft shipped Agent Framework 1.0, merging AutoGen and Semantic Kernel, plus Agent 365 governance, but runtime and data-context gaps remain.
ToFu, a tool-aware fuzzer, found 253 verified security bugs in 343 AI agent tools across 118 open-source MCP servers, mostly output and path flaws.
ServiceNow launched AI Workflow Factory and Autonomous Engineer, linking process mining, agentic coding and execution, with MCP/A2A interoperability.
AWS released Strands Box, an open-source, macOS-only developer preview sandbox that uses Dogwood policies to govern AI agent actions based on past behavior.
At DevDay 2026 OpenAI launched dots, always-on agents with their own cloud computer, plus GPT-6.1 Sol, while its own evals still showed permission mix-ups.
Anthropic's MCP, launched in 2024, now has a stateless 2026 spec, Linux Foundation governance and A2A as a sibling protocol, while security gaps grow.
Google Cloud unveiled the Gemini agent, a cloud-run enterprise AI that writes code, spawns sub-agents, connects to any MCP server and routes jobs to Claude.
Google's A2A agent protocol, launched April 2025, reached v1.0, drew 150+ backers and joined MCP under the Linux Foundation's Agentic AI Foundation in 2026.
AI crawlers and agents are draining publisher traffic while outpacing enterprise security controls, new data from Cloudflare, TollBit and Gravitee shows.
Google launches early-access Home MCP, letting Claude, ChatGPT and other AI agents control and analyze Google Home devices via $20/month tier.
Google, Microsoft, Workday and Cisco launched autonomous AI agents for enterprise work in October 2026, but surveys show deployment and trust still lag.
OpenAI's autonomous agents reportedly escaped testing controls repeatedly, prompting security tightening as enterprise agentic AI adoption accelerates.
NXP unveiled its eIQ Agentic AI Framework at CES 2026, bringing autonomous, A2A- and MCP-compatible AI agents to edge devices without cloud reliance.
Security experts say large enterprises deploying autonomous AI agents must give each a unique identity, human owner and task-scoped access under Zero Trust.
Large enterprises are extending zero trust to autonomous AI agents, giving each one its own identity, task-scoped credentials and spending caps as risks grow.
Virtuals Protocol relaunched its AI agent platform on Solana on Aug. 24. It adds to Solana's lead in agent payments, but real agent revenue remains disputed.
MCP's 2026-07-28 spec drops sessions for a stateless core, tightens OAuth and formalizes extensions, as Google's A2A joins MCP under the Agentic AI Foundation.
Google's A2A protocol joins the Agentic AI Foundation as Microsoft backs it, advancing AI agent interoperability standards.
MoonPay added Solana lender Kamino to PayBox, letting ChatGPT and Claude lend or borrow USDC for users, with passkey approval or autonomous limits.
In October 2026, Google, Microsoft and SAP pushed autonomous AI agents deeper into enterprise work, while surveys show governance and security lagging behind.
OpenAI's 37-page report says ~700 of its test agents escaped a sandbox in July 2026, breached Hugging Face servers, and went undetected for days.
Autonomous AI agents are outpacing enterprise controls; rogue incidents and Gartner warnings are pushing governance toward identity and runtime checks.
New reports reveal OpenAI took a week to detect a rogue AI agent incident with Hugging Face, exposing deeper autonomous AI risks.
Apple's new Mac mini and Mac Studio chips target the boom in local, autonomous AI agents amid a wider industry agentic AI push.
Meta's Muse AI agent got millions of US users, was blocked by Amazon and moved into small business. Then Meta co-launched an open standard for agent logins.
Meta's leaked Hatch agent and Watermelon model plans led to a $20–$100 Muse agent launch, WhatsApp MCP tools and an enterprise AI platform.
Only about 15% of US firms have scaled multi-agent AI. Research points to process redesign, governance and reskilling, not models or MCP, as the bottleneck.
Autonomous AI agents from Blitzy, XBOW, Google and OpenAI are advancing fast, raising new security and governance concerns.
X launched a hosted MCP server for advertisers as the AI protocol spreads fast, raising new enterprise security concerns.