Skill-as-API argues MCP and A2A leak a skill's intellectual property just by advertising it

arXiv·medium signalXBlueskyLinkedInCopy link

arXiv 2609.01677 (2026-09-01) points out that MCP and A2A run implementations server-side but still publish every skill's description and typed schemas to all peers, offer no way to hide a skill's existence, and cannot guarantee a wrapped system prompt stays off the wire. Application-layer privacy filters help but act too late. As agents start discovering and invoking each other's skills, the coordination channel itself becomes the disclosure surface, which is a real constraint on any commercial skill marketplace.