Skip to content
Reviewed by Bipeen Sinha Oct 28, 2026

Home › Guides › A2A Protocol Explained

Tech Explained · 2026

What Is the A2A Protocol in 2026? How AI Agents Talk to Each Other, A2A vs MCP, and 6 Steps to Get Started

The A2A protocol is an open standard that lets AI agents built by different companies discover each other, exchange signed capability cards, and hand off tasks without custom integration code. Backed by over 150 organizations including Google, Microsoft, and AWS, it reached a production-ready v1.0 specification in April 2026 under the Linux Foundation.

28 October 2026·12 min read·By the 360 Digital Transformation Editorial Team
Key takeaways
  • One year old, already production. A2A went from a Google donation to the Linux Foundation in June 2025 to a stable v1.0 spec backed by 150+ organizations in about ten months.
  • A2A and MCP solve different problems. MCP wires one agent to its tools and data. A2A wires one agent to another independent agent.
  • Signed Agent Cards replace integration tickets. Every A2A agent publishes a card describing what it can do and how to authenticate, so other agents discover capabilities instead of waiting on a Slack thread with another team.
  • It already runs on clouds you probably use. Azure AI Foundry and Amazon Bedrock AgentCore both carry native A2A support in 2026.
  • The spec is not finished evolving. Expect breaking changes before it settles, and a competing IBM-backed standard means the interoperability story is not fully won.
  • No major India-relevant exam tests it yet. You will not find A2A on CCAR-F or AI-102 objectives today, but the architecture it formalizes is exactly what those exams already ask about.
  • This is a job-relevant skill, not a buzzword. Multi-agent orchestration experience is becoming a standard interview question for AI engineering roles in India.

A four-person platform team at a mid-size Bengaluru fintech shipped three AI agents last quarter: one books vendor meetings, one reconciles invoices against purchase orders, and one triages support tickets. Each one works fine on its own. None of them talk to each other, so a human still copies the invoice agent's output into the ticket agent's input by hand, and that human is usually the most senior engineer on the team, because nobody trusts the copy-paste to anyone junior. That gap, not model quality, is what the A2A protocol was built to close.

What Is the A2A Protocol?

The A2A protocol answers a question that keeps coming up once you've shipped more than one AI agent: how does an agent your team built talk to an agent someone else's team built, without a developer wiring a one-off adapter between them.

Agent2Agent Protocol: From Google Donation to Linux Foundation Spec

The Agent2Agent protocol, A2A for short, is an open specification for how one AI agent finds, authenticates with, and hands work to another AI agent, regardless of which company built either one. Google published the first version in April 2025 and donated it to the Linux Foundation two months later, in June 2025, handing governance to a vendor-neutral foundation rather than keeping it as a single-vendor standard. Early backers read like a who's who of enterprise software: AWS, Cisco, Microsoft, Salesforce, SAP, and ServiceNow all signed on early.

What Changed at the One-Year Mark

By its one-year mark in April 2026, the Linux Foundation reported more than 150 supporting organizations and said the protocol had reached a stable, production-ready v1.0 specification. The headline feature in that release is Signed Agent Cards: a cryptographically verifiable document that an agent publishes describing its skills, its endpoints, and how to authenticate with it. A second extension, AP2, adds a way for agents to initiate payments to each other, which matters the moment "hand off a task" turns into "hand off a task and a budget."

How A2A Actually Works: Cards, Tasks, and Artifacts

Strip away the spec language and A2A is a request-response pattern with one extra step at the front: discovery. Before your invoice-reconciliation agent can ask a vendor's agent to confirm a purchase order, it first needs to know that agent exists, what it can do, and how to prove who it is.

The A2A request cycle, end to end

Five steps turn "I have a task" into "here is your result," with no custom integration code written for this specific pair of agents.

A2A protocol request flow between a client agent and a remote agent The remote agent publishes a signed agent card. The client agent discovers the card, then sends a task directly to the remote agent. The remote agent executes the task and produces an artifact, which flows back to the client agent as the result. Client Agent invoice-reconciliation bot Signed Agent Card skills + endpoint + auth scheme Remote Agent vendor's purchase-order bot Task + Artifact status stream + final result 0. publishes card 1. discovers 2. sends task (JSON-RPC) 3. executes, streams status 4. returns artifact

Flow described per the A2A v1.0 specification and Linux Foundation one-year release, checked 28 October 2026.

Notice what is missing: there is no step where someone on the Bengaluru team's platform squad writes a custom adapter for the vendor's specific API shape. The card tells the client agent what endpoints exist and what schema to send. If you have ever built with 360DT's AI Engineer course, this will look familiar: it is the same tool-calling pattern you already use for MCP, just pointed at another agent instead of a database or a file system.

A2A vs MCP: What's the Difference?

This is the question that confuses people fastest, so get the direction right once and it stays right. MCP (Model Context Protocol) is vertical: it connects one agent down to its tools, files, and data sources. A2A is horizontal: it connects one agent across to another independent agent that might be running on a completely different stack, built by a completely different team.

A2A vs MCP at a Glance

Aspect MCP A2A
What it connects One agent to its own tools, files, and data One agent to another independent agent
Direction Vertical: agent down to resource Horizontal: agent across to agent
Governed by Anthropic-led open spec Linux Foundation, since Google's June 2025 donation
Core artifact Tool and resource schema the agent calls Signed Agent Card describing skills and auth
Typical use Agent reads a CRM record or runs a function Two vendors' agents hand off a task mid-workflow
Where you've likely already met it Claude Code's MCP servers, Claude Desktop connectors Azure AI Foundry and Bedrock AgentCore cross-agent calls
Do you need both? Usually yes, together Usually yes, together

Why You Need Both, Not One or the Other

The honest answer most vendor blog posts avoid: you are not choosing one over the other. A production agent almost always needs MCP to reach its own tools and A2A to reach other agents. Treat them as two different layers of the same stack, not as competing frameworks like LangGraph vs CrewAI.

Where A2A Runs Today: AI Agent Interoperability in Production

AI agent interoperability stopped being a research topic the moment cloud vendors shipped it into their consoles. A spec with no implementations is a PDF. A2A is past that stage. The Linux Foundation's April 2026 one-year report pointed to deep integration across Google, Microsoft, and AWS platforms, with reported production use in supply chain, financial services, insurance, and IT operations.

A2A Support by Cloud Platform

Platform A2A integration What it means in practice
Azure AI Foundry Native A2A support for cross-agent orchestration Agents built in Copilot Studio or Foundry can hand off tasks to agents outside Microsoft's stack
Amazon Bedrock AgentCore A2A-compatible agent runtime Bedrock-hosted agents can discover and call agents running on other clouds
Google Cloud (Vertex AI / Agent Engine) Reference implementation, the protocol's origin platform Expect the deepest, earliest tooling and documentation here
Open-source SDKs (Python, JavaScript) Community libraries, reported 22,000+ combined GitHub stars You can prototype A2A locally before committing to any cloud vendor

That GitHub star figure comes from a vendor-aligned press release, not an independent audit, so treat it as a popularity signal rather than a precise count. What is independently checkable is the list of backers and the production verticals, and both point the same direction: this is not a research toy anymore.

Why This Matters for Your AI Engineering Career in India

Here is the part most explainers skip: how does knowing any of this change what you get paid or hired for?

Multi-Agent Systems Are the Skill Gap Interviewers Are Testing For

Multi-agent systems are exactly where Indian GCCs and product companies are adding headcount right now, and interview panels have started asking "how would two agents from different teams hand off a task" as a design question, whether or not the word A2A ever comes up.

0–2 yrs, single-agent builder

6 LPA→10 LPA
+67%

2–4 yrs, RAG + tool-calling

10 LPA→16 LPA
+60%

4–6 yrs, multi-agent orchestration

16 LPA→24 LPA
+50%

6+ yrs, agent platform architect

24 LPA→38 LPA
+58%

Figures are typically advertised ranges on Indian job boards, not a guarantee, and vary heavily by city and company type. Checked 28 October 2026.

360DT's AI Engineer course puts 100+ hours of live building time into exactly this ladder: RAG pipelines and tool-calling in the early weeks, then multi-agent handoffs and orchestration in the later ones, certified on both Microsoft Copilot Studio and Claude Code. If you are earlier in the stack and still deciding between enterprise deployment and pure engineering, a Forward Deployed Engineer course leans harder into the "ship this inside a client's messy production environment" side of the same skill set, while a live Claude Certified Architect Foundations prep course walks through the agent architecture patterns that interview panels actually probe, independent of which protocol name they use.

The Honest Limitations of the A2A Protocol in 2026

I would not bet a quarter's roadmap on A2A being the final word on agent interoperability, and you should not either. The protocol is genuinely useful today, but it is also genuinely young, and a few things about it should give you pause before you wire it into something that cannot fail quietly.

1

The spec is still young

v1.0 shipped in April 2026. A specification that stable rarely stays untouched for long; expect field additions and edge-case fixes before this feels as boring as REST.

Caveat
2

Security is new, not proven

Signed Agent Cards help with identity, but most teams adopting A2A in 2026 have not run it through a real penetration test yet. Treat agent-to-agent trust the way you'd treat a new third-party API, not a solved problem.

Risk
3

The standards fight isn't over

IBM's Agent Communication Protocol (ACP) also carries Linux Foundation backing. Pick a lane deliberately, or build a thin abstraction layer so you are not locked to one spec's assumptions.

Lock-in risk
4

No major India-relevant exam tests it yet

CCAR-F, CCAR-P, and AI-102 do not list A2A by name in their objectives as of this writing. Learn the architecture pattern for interviews, not spec trivia for a test that doesn't exist yet.

Exam reality
Where this bites teams

The most common mistake is treating A2A adoption as a weekend integration task because the demo on the vendor's site looks like five lines of code. In practice, every new agent you let your system talk to is a new trust boundary, a new thing that can be wrong, slow, or malicious. Budget for auth review and rate limiting, not just the happy-path call.

What Usually Goes Wrong When Teams Adopt A2A

Here's the pattern I'd watch for if I were reviewing a rollout plan. A team gets the demo working between two agents they both control, feels the magic, and then assumes any third-party agent's card will behave the same way. It won't. Agent Cards describe capabilities, not reliability, and a vendor's agent can publish a perfectly valid card for an endpoint that times out under load or changes its response schema on their next release with no warning to you.

The second failure mode is quieter and more expensive: nobody owns the auth refresh. A2A tasks can run long, especially ones with human-in-the-loop approval steps, and a token that expires mid-task silently drops the handoff. Teams that have run this in production for a few months treat token lifecycle the way they'd treat database connection pooling, as infrastructure that needs its own monitoring, not an afterthought bolted onto the happy path.

How to Get Started With A2A: 6 Steps

  1. Read one real Agent Card before you read the spec. Find a published card from a reference implementation and map its fields to what you already know from MCP tool schemas; the vocabulary will click faster than reading the RFC-style document cold.
  2. Pick one existing agent you own and expose it with a card. Don't build a new agent for this. Wrap something you already run so you can see the discovery flow against real behavior, not a tutorial's happy path.
  3. Build a second, independent agent and have it discover the first. Keep them on different runtimes if you can; same-machine demos hide the authentication problems you'll hit in production.
  4. Add the AP2 payment extension only if you actually need agent-initiated payment. Most teams don't yet. Skipping it keeps your first deployment's blast radius small.
  5. Instrument the handoff before you trust it. Log every task sent and artifact received for at least a few weeks; this is where the "what usually goes wrong" failures above show up first.
  6. Map the pattern to your certification track, not the spec. Whether you're prepping CCAR-P or studying agent administration for AB-900, the architecture questions already assume agents that must discover and hand off work to each other. A2A just gives that pattern a name and a spec.

If you are building agents that need identity and governance across an organization rather than a single pipeline, the control-plane side of this problem (who is allowed to call whom, and how you audit it) is covered live in 360DT's Microsoft 365 Copilot & Agent Administrator course, which deals with the Entra Agent ID and agent governance questions that A2A's Signed Agent Cards only partially answer on their own.

Live course

Multi-agent systems are the next skill gap. Learn to build what A2A connects.

Live online·Sat–Sun, 8–11 PM IST·100+ hrs·₹24,999

360DT's AI Engineer Course takes you from your first RAG pipeline to tool-calling and multi-agent orchestration, certified on both Microsoft Copilot Studio and Claude Code. You build the agents that protocols like A2A are meant to connect.

Explore the course
AI Engineer Course: Generative AI, RAG & AI Agents

One more thing worth saying plainly: if you're building more than one agent that needs to hand work to another agent, learn A2A's request and card shape even if you never touch Google's reference SDK directly. The vocabulary, not the SDK, is what shows up in design interviews and in whichever vendor's dashboard your company ends up picking. What I would skip is memorizing the spec line by line for an exam that doesn't test it. The trade-off there is time: thirty minutes understanding Agent Cards and task lifecycles buys you more interview credibility than the same time spent chasing an unofficial practice test for a question nobody will ask you this year.

Also read: Retrieval Augmented Generation Explained in 2026 if the tool-calling side of this is new to you, What Is an AI Agent Harness in 2026? for how orchestration frameworks fit around protocols like this one, and the certification team's earlier MCP explainer for the tool-connection half of the picture.

Frequently asked questions

What is the A2A protocol in simple terms?

The A2A protocol is a set of rules that let one AI agent find another AI agent, confirm who it is, and send it a task, even when the two agents were built by different companies on different platforms. Think of it as a common handshake and task format that any compliant agent understands, so teams stop writing one-off integrations for every pair of agents that needs to work together.

Is A2A protocol the same as MCP?

No. MCP (Model Context Protocol) connects a single agent to its own tools, files, and data sources. A2A connects one independent agent to another independent agent. Most production systems in 2026 use both together: MCP for an agent's own tool calls, A2A for handing a task to a different agent.

Who created the A2A protocol?

Google published the first version of A2A in April 2025 and donated it to the Linux Foundation in June 2025, putting it under vendor-neutral governance. Early supporters included AWS, Cisco, Microsoft, Salesforce, SAP, and ServiceNow.

Is the A2A protocol production ready in 2026?

The Linux Foundation's April 2026 one-year report described A2A as reaching a stable, production-ready v1.0 specification, with more than 150 supporting organizations and reported production use across supply chain, financial services, insurance, and IT operations. It is usable today, but still young enough that you should expect spec refinements ahead.

Does A2A protocol replace frameworks like LangGraph or CrewAI?

No. LangGraph, CrewAI, and similar orchestration frameworks decide how agents reason, plan, and coordinate inside your own system. A2A is the wire-level protocol for when an agent built inside one of those frameworks needs to talk to an agent outside your system entirely. The two layers work together rather than compete.

How do I start learning the A2A protocol?

Start by reading a published Agent Card from a reference implementation and comparing its fields to an MCP tool schema you already understand. Then wrap one agent you already own with a card, build a second small agent to discover and call it, and log every handoff while you learn where the failure points actually are.

Is the A2A protocol relevant for AI engineer jobs in India?

Yes, indirectly. Few Indian job postings name "A2A" explicitly yet, but multi-agent orchestration and agent-to-agent handoff design are increasingly common interview topics for AI engineering and forward deployed engineering roles, and A2A is becoming the shared vocabulary for that conversation.

What is a Signed Agent Card in A2A?

A Signed Agent Card is a cryptographically verifiable document that an A2A-compliant agent publishes, describing its skills, its endpoint, and how another agent should authenticate with it. It is the discovery mechanism that lets agents find and trust each other without a human manually configuring the integration.

About this guide. 360 Digital Transformation is an Anthropic Partner and a Microsoft Authorized Training Partner. Other certification bodies, vendors and employers named here, including Google, the Linux Foundation, AWS, and IBM, are not affiliated with us. Figures cited were checked on 28 October 2026.

Learn it live with 360 Digital Transformation

Turn this guide into a skill employers can see

Live weekend cohortEMI available

AI Engineer Course: Generative AI, RAG & AI Agents (Microsoft + Claude Certified)

Rs. 27,999Rs. 37,239 Save 24%

Tools and platforms you work with

  • Python
  • Claude API
  • FAISS
  • ChromaDB
  • LangChain
  • LangGraph
  • CrewAI
  • AutoGen (AG2)
Add bonus modules
See the syllabus and batch dates

Other live courses on this career path