KDCube
← AI Industry News

A2A Joins MCP Under One Foundation as Grounding Gets Governance Dials

Google's A2A protocol formally joined the Linux Foundation's Agentic AI Foundation alongside Anthropic's MCP, standardizing the agent stack at both the agent-to-agent and agent-to-tool layers. Meanwhile AWS AgentCore added per-call domain and published-date filters to Web Search and expanded to EU and ...

Highlights

  • Google's A2A agent-to-agent protocol formally joined the Linux Foundation-directed Agentic AI Foundation (AAIF) on Aug 20, landing it beside Anthropic's MCP under one neutral steward — the foundation has grown from 49 to 250+ members in under a year. (Forkast)
  • Web Search on Amazon Bedrock AgentCore added per-call domain allow/deny lists (up to 100 domains each) and published-date filtering, and expanded beyond N. Virginia to Europe (Ireland) and Asia Pacific (Tokyo) — grounded retrieval with zero data egress now has provenance and recency dials. (AWS)
  • The platform pattern behind both moves is now GA: Google's Gemini Enterprise agent platform ships seven-day async runtimes, a schema-driven Memory Bank, and Agent Identity as a native IAM type with credential binding and audit logging. (Enterprise DNA)
  • Read together, the agent stack is standardizing at two layers at once — A2A horizontal (agent-to-agent) and MCP vertical (agent-to-tools) — with the governance surface moving into the runtime, not bolted on after. (Axios)

Key Signals

  1. A2A joins MCP under the AAIF umbrella — Aug 20, 2026

    Google's Agent2Agent protocol moved into the Linux Foundation's Agentic AI Foundation, the same directed fund that hosts Anthropic's MCP. The two keep separate steering committees but share governance and roadmap coordination — A2A owns cross-org task negotiation and credential exchange, MCP owns tool and resource access. Platinum signatories now include AWS, Anthropic, Block, Bloomberg, Cloudflare, Google, Microsoft, and OpenAI, a rare cross-competitive alignment on infrastructure standards. (Forkast, Axios)

  2. Managed web grounding grows provenance and recency controls — Aug 19, 2026

    AWS gave AgentCore's built-in Web Search tool per-request include/exclude domain lists and from/to date bounds, so a regulated workflow can pin an agent to trusted sources within a time window — all served through AgentCore Gateway over MCP with no data leaving the account. The two new regions (eu-west-1, ap-northeast-1) matter for data-residency-bound teams that couldn't use the us-east-1-only launch. (AWS)

  3. Production agent primitives are now default, not add-ons — GA as of Jul 29, 2026

    Gemini Enterprise's GA bundles long-horizon runtime (up to seven days), automatic memory extraction, a first-class agent IAM identity, and an Agent Gateway with Model Armor prompt-injection defense. It's the clearest signal that the market has settled on durable runtime + memory + identity + policy as the baseline unit — the same shape AgentCore and the AAIF stack are converging toward. (Enterprise DNA)

Why It Matters / What To Watch

  1. Standardization is consolidating — plan for a two-protocol stack, not a winner.
    • Treat A2A and MCP as complementary layers rather than competitors; design agent identity and credential exchange to survive at the A2A boundary and tool access at the MCP boundary. (Forkast)
    • Watch whether shared AAIF governance actually aligns the two roadmaps or just co-locates them — steering committees stay separate. (Axios)
  2. Grounding is becoming a governed surface, not a free-text firehose.
    • If you run RAG or live-web agents in regulated contexts, evaluate AgentCore's domain and date filters against your current DIY grounding stack — the control is now server-side and auditable. (AWS)
    • Confirm region availability before committing: EU/APAC only just arrived, and some grounding features remain region-gated. (AWS)
  3. The runtime, not the model, is the moat this cycle.
    • Benchmark managed offerings on runtime duration, memory schemas, and identity/audit — not just model quality — since those are now the shipped differentiators. (Enterprise DNA)
    • Watch for prompt-injection defenses (Model Armor-style gateways) becoming table stakes as agents run unattended for days. (Enterprise DNA)

Quick Links