biscuit
Agent Identity Protocol -- verifiable, delegable identity for AI agents across MCP and A2A. IETF Internet-Draft. PyPI: agent-identity-protocol
Each agent run gets its own short-lived attested credential. A stolen token is not enough.