AIP: Agent Identity Protocol — First Authentication Layer for MCP and A2A, 100% Attack Rejection at 0.049ms Overhead

arXiv·high signalXBlueskyLinkedInCopy link

Sunil Prakash proposes Invocation-Bound Capability Tokens (IBCTs) that add identity verification, attenuated authorization, and provenance binding to MCP and A2A agent protocols — neither of which currently verifies agent identity. A survey of ~2,000 MCP servers found zero authentication mechanisms. Reference implementations in Python and Rust achieve 0.049ms verification overhead (Rust), 100% attack rejection across 600 adversarial attempts, and just 2.35ms additional end-to-end latency (0.086% of total).