![\"\"](\"https:\/\/www.europesays.com\/us\/wp-content\/uploads\/2025\/07\/cisco-outshift-agntcy-logo-657x438.jpg\" "\\"cisco-outshift-agntcy-logo\\"\/"){kind=logo}
<\/p>\n<\/p>\n
AI agents bring with them the promise of being able to autonomously solve complex tasks put before them, from finding and analyzing the necessary data, choosing tools, and making decisions without human intervention to learning from their mistakes and adapting to changes. They also can collaborate with each other to coordinate their actions.<\/p>\n
However, to do that, they need to be able to reliably and securely communicate with each other, which isn\u2019t easy given that they can be created from disparate large language models and foundation models from different companies. As with other moments in IT history that led to a wide distribution and decentralization of computing \u2013 think the internet and cloud computing \u2013 protocols are needed to ensure that systems and software can communicate with each other.<\/p>\n
That gave rise to such protocols as TCI\/IP, HTTP, Voice over IP (VoIP), and Message Queuing Telemetry Transport (MQTT), all of which helped drive communication and interoperation.<\/p>\n
Protocols for AI agents are now cropping up, such as the Model Context Protocol (MCP) from Anthropic, allowing LLMs to access external data sources and tools, and Agent2Agent (A2A), announced by Google and more than 50 other tech vendors and consultants in April to make it possible for agents to work together.<\/p>\n
\u201cEnabling agents to interoperate with each other<\/a>, even if they were built by different vendors or in a different framework, will increase autonomy and multiply productivity gains, while lowering long-term costs,\u201d Google said at the time.<\/p>\n The Need For Protocols<\/p>\n A2A came a month after Cisco Systems\u2019 Outshift<\/a> incubation arm \u2013 along with LangChain, which developed an open framework for developing AI applications, and Galileo, which has a AI-powered text-to-UI design tool \u2013 introduced AGNTCY<\/a>, an open source protocol similar to A2A to enable organizations to find the best agents for job, bring them into workflows across any framework or vendor, run these multi-agent systems both security and at scale, and monitor and evaluate their performance, essentially creating what Vijoy Pandey, senior vice president of Outshift by Cisco, calls the \u201cinternet of agents.\u201d<\/p>\n Google last month donated the A2A protocol<\/a> to The Linux Foundation, and this week Cisco<\/a> and its now 70-plus tech partners are doing the same with AGNTCY, which will be a new project within the nonprofit organization. A protocol like AGNTCY shouldn\u2019t be controlled by Cisco or any single vendor, Pandey tells The Next Platform. It needs to be managed by a neutral entity.<\/p>\n He also wanted the governance of AGNTCY \u201cto be reflective of some heavyweight organizations,\u201d which now includes Dell<\/a>, Google Cloud<\/a>, Oracle<\/a>, and Red Hat<\/a>, giving it credence in such areas as hyperscale, open source, and infrastructure.<\/p>\n Cisco is positioning itself as the foundational infrastructure layer<\/a> for AI, starting with its Silicon One networking chip<\/a> and moving up the stack. AGNTCY is reflective of that, and with such wide industry support will be an important tool given the decentralized nature of agentic AI and the need for these agents \u2013 which often are built for particular tasks, from industry expertise like coding, customer service, financial analysis<\/a>, and sales and marketing, and jobs, such as perception, reasoning and planning, and learning \u2013 to pull together their particular skills.<\/p>\n \u201cWe\u2019re moving from deterministic computing to probabilistic computing,\u201d Pandey says. \u201cThe state-of-the-art in software used to be cloud-native computing \u2013cloud computing \u2013 and we\u2019re building an abstraction layer above that. This is agentic computing, or agentic-native computing. \u2026 Embodied agents, scientific agents, social agents, they all need to collaborate to solve large problems and they need to collaborate across a lot of diversity, a lot of heterogeneity. All these agents will be like subject matter experts and, like a team, they all need to come together for a larger goal.\u201d<\/p>\n One Platform To Unite Them All<\/p>\n The aim is to create a platform where they can all come together, communicate, and collaborate.<\/p>\n \u201cThey will be coming from different vendors,\u201d he says. \u201cThey will have used different development frameworks to get created, they will be running on different clouds \u2013 Amazon, Google, on-prem \u2013 they will have belonged to different organizations. They will take on different profiles and personas as they run in their environment because they in some ways mimic humans.\u201d<\/p>\n AGNTCY which includes a identity and discovery platform and collaboration and communications frameworks, uses the principles of peer-to-peer (P2P) communications that emerged from the trend toward decentralized computing, he says. A2A and MCP servers are discoverable through AGTNCY\u2019s agent directories, with transparency coming via its observable SDKs. AGTNCY also includes a message transport over the Secure Low Latency Interactive Messaging (SLIM) protocol.<\/p>\n The agent discovery capability relies on the Open Agent Schema Framework (OASF) that allows agents to discover other agents and understand their capabilities, while the messaging function includes cryptographically verifiable identity and access control to ensure security even when working across organizational boundaries.<\/p>\n Security Is A Priority<\/p>\n Security will be a key part of AGNTCY, as it is with all parts of AI. Agents will be grabbing corporate and sensitive data to do their work, which potentially exposes that information to outside threats. Security questions are swirling around MCP servers, with Trend Micro researchers earlier this month saying they found 492 MCP servers with no client authentication<\/a> or traffic encryption. In all, these MCP servers offer access to 1,402 MCP tools, they wrote, with more than 90 percent of them providing direct read access to the data source. The data is available to anyone using natural language tools, which means they don\u2019t have to know how to code to steal it.<\/p>\n Pandey acknowledged the need for hardened protections, adding that in agent-to-agent communication, when doing something as necessary as deciding what a task is, an escalation of privileges is necessary. In agentic AI, authorization and access control not time-based, which is done with humans, or service-based, as with machines and software.<\/p>\n \u201cIt\u2019s task-based,\u201d Pandey says. \u201cThe hooks are there for it to allow task-based escalation of privileges and then bring people back to base level. If you\u2019re writing agents in the right way, if you\u2019re writing MCP servers in the right way, you can use this task-based authorization and actually build a pretty secure agent on a pretty secure MCP server.\u201d<\/p>\n It\u2019s going to be needed, because MCP servers are supported in most parts of AGNTCY, including in the Agent Directory, the schema framework, the identity platform, and the SLIM messaging layer.<\/p>\n That said, there is a challenge Cisco and the vendors behind AGNTCY are working on.<\/p>\n \u201cLet\u2019s say you don\u2019t incorporate that task-level capability in your MCP server or in your agent,\u201d he says. \u201cHow do you then handle it on a separate plane? That\u2019s something that we\u2019re working that you\u2019ll see us coming out with in the future.\u201d<\/p>\n Into The Future<\/p>\n Even before donating AGTNCY to The Linux Foundation, Outshift and partners were adding to it. Earlier this month, the group introduced coffeeAGNTCY<\/a>, a reference application allowing organizations to experiment building multi-agent software with MCP, A2A, and AGNTCY components. At the same time, they released the AGNTCY Application SDK to help with integrating such components as SLIM initially, with others like Observe-SDK and Identity coming later.<\/p>\n Going forward, Pandey said work is continuing on building applications on AGNTCY, with Cisco already creating a few proprietary and open source tools, including one for AI engineers that is being leverage by a host of site, reliability, and engineering (SRE) teams that are part of the Cloud-Native Operating Excellence<\/a> (CNOE) community. There also is work on networking and security pipelines being done with telcos and large enterprises.<\/p>\n \u201cWhat you can expect to see in a year is a lot more companies leveraging agency to build real-world enterprise applications,\u201d Pandey says. \u201cThat\u2019s the big missing piece. \u2026 We need to make these things real-time and interactive.\u201d<\/p>\n He also expects the number of industry contributors to AGNTCY to grow to more than a hundred.<\/p>\n![\"\"](\"https:\/\/www.europesays.com\/us\/wp-content\/uploads\/2025\/07\/Cisco-AGNTCY-architecture.png\")
<\/a><\/p>\n![\"\"](\"https:\/\/www.europesays.com\/us\/wp-content\/uploads\/2025\/07\/Cisco-agent-internet-planes.png\")
<\/a><\/p>\n
![\"\"](\"https:\/\/www.nextplatform.com\/wp-content\/uploads\/2023\/05\/HPE_button_19959_V2.png\")
<\/a>