ACP: a layered, federated protocol for secure cross-platform agent-to-agent collaboration

February 11, 20267 min

Overview

Production Readiness

0.6

Novelty Score

0.7

Cost Impact Score

0.6

Citation Count

0

Authors

Naveen Kumar Krishnan

Links

Abstract / PDF

Why It Matters For Business

ACP lets organizations stitch together agents from different vendors into secure, auditable workflows. That reduces manual coordination and enables cross-company automation while preserving regulatory controls.

Summary TLDR

ACP is a multi-layer protocol for direct agent-to-agent (A2A) collaboration across platforms. It combines decentralized discovery, standardized capability descriptions ('Agent Cards'), a negotiation layer for dynamic SLAs, and zero-trust security (DIDs + verifiable credentials). In experiments ACP yields significantly lower latency than raw HTTPS RPC and keeps sub-100 ms latency at 500+ agents, trading some overhead for cross-vendor security and discovery.

Problem Statement

Agents live in isolated stacks and lack a secure, standard way to discover, negotiate with, and reliably execute work with agents on other platforms. That blocks cross-vendor, decentralized workflows.

Main Contribution

ACP specification: a four-layer protocol (Transport, Semantic, Negotiation, Governance/Security) for A2A interaction.

Federated discovery and negotiation: hybrid local/global discovery, Agent Cards for capability advertising, and a four-step negotiation lifecycle (Inquiry→Proposal→Agreement→Execution).

Zero-trust A2A security: decentralized identifiers (DIDs), verifiable credentials (VCs), cryptographic Proof-of-Intent, and signed messages for non-repudiation.

Reference implementation and SDK: ACP-SDK with wrappers for LangChain, AutoGen, and CrewAI; pilot case studies and performance evaluation.

Key Findings

ACP reduces inter-agent communication latency compared to plain JSON-RPC over HTTPS (author claim).

Numbers40% reduction (claimed in abstract); Table 3 shows ACP avg latency 58 ms vs JSON-RPC 145 ms

ACP keeps sub-100 ms round-trip latency as agent swarm size grows beyond 500.

Numberssub-100 ms at 500+ agents; DHT discovery scales O(log N)

ACP trades some overhead and latency compared to local, same-stack context protocols like MCP.

NumbersMCP: 22 ms avg; ACP: 58 ms avg; header overhead ACP 8% vs MCP 5%

ACP achieves high delivery success under load with a near-production success rate.

NumbersACP success rate 96% under high load (vs JSON-RPC 88%, MCP 99%)

Results

avg_latency_ms

Value58 ms

BaselineJSON-RPC over HTTPS 145 ms

header_overhead_percent

Value8%

BaselineMCP 5%, JSON-RPC 12%

success_rate_percent

Value96%

BaselineMCP 99%, JSON-RPC 88%

scalability_discovery_time

ValueO(log N)

Who Should Care

What To Try In 7 Days

Run the ACP-SDK example and register a test Agent Card to a dev registry.

Create a minimal two-agent workflow (requester + provider) and measure end-to-end latency and success rate.

Compare ACP vs local MCP for a small task to quantify tradeoffs in latency and security.

Agent Features

Memory

  • peer-recorded reputation ledger (global reputation)

Planning

  • negotiation lifecycle (Inquiry→Proposal→Agreement→Execution)
  • recursive delegation for subtask delegation

Tool Use

  • Agent Cards for capability advertising
  • DIDs and Verifiable Credentials for auth
  • cryptographic Proof-of-Intent

Frameworks

  • ACP-SDK
  • LangChain wrappers
  • AutoGen wrappers
  • CrewAI wrappers

Is Agentic

true

Architectures

  • layered protocol (Transport/Semantic/Negotiation/Governance)

Collaboration

  • federated discovery (local + DHT/blockchain)
  • self-organizing swarms and dynamic SLAs

Optimization Features

Infra Optimization

  • DHT for scalable discovery (logarithmic search time)

System Optimization

  • transport agnostic design (gRPC, WebSocket, HTTPS)
  • semantic layer decouples intent from transport

Reproducibility

Code Available

Open Source Status

  • partial

Risks & Boundaries

Limitations

  • Evaluation is limited to author-run pilots; no independent or long-term deployments reported.
  • Semantic layer may struggle with ambiguous human intents as agents get more complex.
  • DHT + blockchain registry introduces extra overhead and governance questions.
  • Legal and liability issues for agent-negotiated agreements are unresolved.

When Not To Use

  • Within a single trusted application stack where MCP already gives lower latency.
  • Latency-critical microsecond workloads; ACP targets networked federated agents, not in-process calls.
  • Environments that forbid decentralized registries or consortium blockchains.

Failure Modes

  • Compromised DID/private key leading to impersonation if key management is weak.
  • Reputation ledger manipulation or Sybil attacks if consortium controls are weak.
  • Negotiation stalls if agents disagree on semantic mappings or SLA parameters.
  • Higher end-to-end latency or failed discovery during blockchain/DHT outages.

Core Entities

Models

  • ACP (protocol/specification)

Metrics

  • avg_latency_ms
  • header_overhead_percent
  • success_rate_percent
  • reputation_score