The A2A protocol and what it means for enterprise AI

The A2A protocol and what it means for enterprise AI

Simor Consulting | 16 May, 2026 | 03 Mins read

Google published the Agent-to-Agent (A2A) protocol specification in late 2025 and, as of this quarter, has secured endorsement from over fifty technology companies including Salesforce, SAP, ServiceNow, and several major cloud providers. The protocol defines a standard way for AI agents to discover, communicate with, and delegate tasks to other agents across organizational and vendor boundaries.

The A2A protocol is not a product. It is a specification — a set of conventions for how agents describe their capabilities, how they negotiate tasks, and how they exchange results. The significance is not in any single implementation. It is in the possibility that agent systems built by different teams, on different platforms, for different purposes, can interoperate without custom integration code.

What A2A Actually Defines

The protocol covers four areas:

Agent discovery. An agent can publish a machine-readable “agent card” that describes its capabilities, input/output formats, authentication requirements, and cost model. Other agents can query a registry to find agents that match a given task description. This is analogous to service discovery in microservice architectures, but for AI capabilities.

Task negotiation. Before delegating a task, the requesting agent and the providing agent negotiate the task parameters: what inputs are required, what outputs will be delivered, what the expected latency and cost are, and what the error handling expectations are. This negotiation prevents the common failure mode where an agent sends a task to another agent and receives an unexpected or unusable response.

Message exchange. The protocol defines a structured message format for task inputs, outputs, and status updates. Messages include metadata about provenance (which agent produced the output), confidence (how reliable the output is), and cost (what resources were consumed).

Authentication and authorization. The protocol includes a framework for agent identity and access control. An agent must authenticate itself before receiving tasks, and the providing agent can enforce authorization policies about which agents can invoke which capabilities.

The Enterprise Implications

For enterprise data teams, A2A matters because it addresses a problem that is about to become acute: agent sprawl.

Most enterprise AI strategies involve multiple agents. There is a data retrieval agent, a summarization agent, a classification agent, a code generation agent, and a customer-facing chatbot agent. Each agent is built by a different team, often on a different framework, and they do not communicate with each other. When a business process requires capabilities from multiple agents, the integration is custom code that breaks when either agent changes.

A2A provides a standard integration layer so that agent orchestration does not require bespoke wiring. A data quality agent built by the platform team can be invoked by a customer support agent built by the product team, as long as both speak the A2A protocol.

The second implication is cross-organizational agent composition. In supply chain, finance, and healthcare, business processes span organizational boundaries. A procurement agent at one company needs to interact with an inventory agent at a supplier and a compliance agent at a regulator. A2A provides the protocol basis for these interactions without requiring point-to-point integrations between every pair of organizations.

What A2A Does Not Solve

The protocol does not solve the harder problems of agent reliability, safety, and accountability. Two agents that speak the same protocol can still produce incorrect results, hallucinate information, or make decisions that violate policy. The protocol handles transport and negotiation. It does not handle trust.

A2A also does not solve the evaluation problem. When Agent A delegates a task to Agent B, how does Agent A verify that the result is correct? The protocol provides metadata about confidence and provenance, but verification of AI outputs remains an unsolved problem at the system level.

Finally, A2A does not address governance. In regulated industries, the question of which agent is authorized to make which decisions is a policy question, not a protocol question. The protocol provides an authentication framework, but the authorization policies must be defined and enforced by the organization.

Practical Steps for Data Teams

If your organization is building or operating AI agents, evaluate A2A compatibility as a design requirement for new agents. The protocol is still early, and the tooling is immature, but building with A2A compatibility in mind costs little and preserves optionality.

Map your existing agent inventory. Identify which agents are candidates for inter-organizational communication and which are purely internal. The inter-organizational agents are the highest-priority candidates for A2A adoption.

Monitor the reference implementations. Google has published a Python and JavaScript SDK. Community implementations are emerging for other languages and frameworks. Evaluate these for maturity and production readiness before committing.

Bounded Recommendation

Treat A2A as an emerging standard worth tracking, not a technology to adopt wholesale today. The protocol is sound, the industry support is broad, but the production tooling is early. Design your agent architectures to be protocol-agnostic at the application level so that adding A2A compatibility later is a transport change, not an architectural change.

Shipping a production AI system?

Find the control gaps before they turn into incidents. Take the AI Production Scorecard for a fast baseline across the seven layers, or book an architecture review and we will turn it into a hardening plan.

Similar Articles

Building AI-Ready Data Pipelines: Key Architecture Considerations
Building AI-Ready Data Pipelines: Key Architecture Considerations
04 Mar, 2025 | 02 Mins read

Data pipelines built for business intelligence often fail when supporting AI workloads. The root cause is usually architectural: BI pipelines assume bounded, relatively static datasets, while AI syste

The Modern Data Stack for AI Readiness: Architecture and Implementation
The Modern Data Stack for AI Readiness: Architecture and Implementation
28 Jan, 2025 | 03 Mins read

Existing data infrastructure often cannot support ML workflows. The modern data stack offers a foundation, but it requires adaptation to become AI-ready. This article covers building a data architectu

Building an Eval Harness That Ships With Every Release
Building an Eval Harness That Ships With Every Release
18 Jun, 2026 | 10 Mins read

A fintech company shipped a prompt update to their underwriting assistant on a Friday afternoon. The update improved response quality on three of four test cases. On Monday, the risk team reported tha

Model Gateway Patterns: When to Route, When to Fail Over
Model Gateway Patterns: When to Route, When to Fail Over
20 Jun, 2026 | 11 Mins read

The first time your model provider has an outage at 2 AM and your entire application goes dark, you learn something important about architectural dependencies. The second time it happens, you start bu

Tool Governance for MCP: Scoping Permissions Before They Drift
Tool Governance for MCP: Scoping Permissions Before They Drift
21 Jun, 2026 | 10 Mins read

When an AI agent can call external tools, the security boundary shifts from the model to the tool layer. The model generates a request to call a tool. The tool executes against real systems — reading

AI Observability Beyond Logging: Trace Replay, Incident Forensics, and Cost Attribution
AI Observability Beyond Logging: Trace Replay, Incident Forensics, and Cost Attribution
22 Jun, 2026 | 11 Mins read

Traditional application observability focuses on three signals: request latency, error rates, and resource utilization. If the request returns a 200 in under two hundred milliseconds, the system is he

MCP in Production: Registry, Auth, and Permission Models
MCP in Production: Registry, Auth, and Permission Models
23 Jun, 2026 | 11 Mins read

The Model Context Protocol gives AI agents a standardized way to discover and invoke external tools. In development, MCP works well with a local server running on localhost and a handful of tools. The

Multi-Agent Failure Modes: What Breaks When Agents Call Agents
Multi-Agent Failure Modes: What Breaks When Agents Call Agents
24 Jun, 2026 | 10 Mins read

Single-agent systems have predictable failure modes. The agent calls a tool, the tool fails, the agent receives an error and decides what to do next. The failure is contained to the single agent's con

Agent Guardrails: Containing What an Agent Can Do in Production
Agent Guardrails: Containing What an Agent Can Do in Production
25 Jun, 2026 | 09 Mins read

Input guardrails check whether a user prompt is safe. Output guardrails check whether a model response is appropriate. Agent guardrails check whether the actions an agent takes are within bounds. Thes

From Single-User to Multi-User: The Ten Controls You Need Before You Scale
From Single-User to Multi-User: The Ten Controls You Need Before You Scale
26 Jun, 2026 | 11 Mins read

An AI application built for a single user has no tenancy concerns. The user is the user. There is no data isolation problem because there is only one data set. There is no cost attribution problem bec

AI Rollback Patterns: When to Roll Back a Prompt, a Model, or the Whole Release
AI Rollback Patterns: When to Roll Back a Prompt, a Model, or the Whole Release
27 Jun, 2026 | 11 Mins read

Software rollbacks are well-understood. You deploy a new version, detect an issue, and roll back to the previous version. The rollback is atomic: the entire application reverts to the previous state.

A2A and MCP: How Agent-to-Agent Protocol Fits the Control Layer Model
A2A and MCP: How Agent-to-Agent Protocol Fits the Control Layer Model
28 Jun, 2026 | 09 Mins read

Google announced the Agent-to-Agent protocol, A2A, as a standard for how AI agents communicate with each other. This sits alongside the Model Context Protocol, MCP, which standardizes how agents acces

OpenAI vs Anthropic vs Google: Model Provider Failover Strategies
OpenAI vs Anthropic vs Google: Model Provider Failover Strategies
29 Jun, 2026 | 10 Mins read

Every major model provider has had outages. OpenAI has gone down during peak hours. Anthropic has experienced degraded performance. Google Gemini has had API issues. If your application depends on a s

AI Middleware: The Missing Abstraction Between Your App and the Model
AI Middleware: The Missing Abstraction Between Your App and the Model
30 Jun, 2026 | 09 Mins read

When web applications needed to talk to databases, the industry created ORMs and connection pools. When microservices needed to talk to each other, the industry created API gateways and service meshes

Prompt Versioning in Git: Prompts as Code, Not Configuration
Prompt Versioning in Git: Prompts as Code, Not Configuration
01 Jul, 2026 | 10 Mins read

Prompts are the most frequently changed component of an AI application. They are updated to fix edge cases, improve output quality, accommodate new use cases, and adapt to model behavior changes. Desp

How a retailer reduced inference latency 90% with feature store caching
How a retailer reduced inference latency 90% with feature store caching
21 Apr, 2026 | 04 Mins read

A mid-market e-commerce retailer with roughly $200M in annual revenue had invested eighteen months building a product recommendation engine. The models were accurate. Offline evaluation showed meaning

EU AI Act enforcement begins: what data teams must do now
EU AI Act enforcement begins: what data teams must do now
25 Apr, 2026 | 04 Mins read

The first enforcement window of the EU AI Act opened in February 2026, and the grace periods that protected early movers are expiring on a rolling schedule through 2027. This is no longer a policy dis

The 7-step vector database selection checklist
The 7-step vector database selection checklist
26 Apr, 2026 | 06 Mins read

Most vector database selection failures come down to one mistake: picking the technology before mapping the workload. Teams benchmark embedding search speed on a curated dataset, pick the fastest opti

The open-source LLM landscape just shifted — again
The open-source LLM landscape just shifted — again
02 May, 2026 | 03 Mins read

Three releases in the last six weeks have redrawn the open-source LLM map. Meta shipped Llama 4 with a mixture-of-experts architecture that narrows the gap with proprietary frontier models. Mistral re

Build vs buy: a decision tree for AI infrastructure
Build vs buy: a decision tree for AI infrastructure
03 May, 2026 | 06 Mins read

Every AI infrastructure team eventually faces the same argument. One faction wants to build a custom solution because the commercial options do not handle their specific requirements. The other factio

Why every cloud provider launched an AI operating system this year
Why every cloud provider launched an AI operating system this year
09 May, 2026 | 03 Mins read

AWS announced Bedrock Studio. Google shipped Vertex AI Platform as a unified surface. Azure consolidated its AI offerings under a single "AI Foundry" brand. Databricks, Snowflake, and even Cloudflare

The vector database that couldn't scale — and what we did instead
The vector database that couldn't scale — and what we did instead
12 May, 2026 | 05 Mins read

A media company with a library of twelve million articles, transcripts, and research documents had built a semantic search system on a managed vector database. The system was designed to let journalis

LLM evaluation platforms compared: LangSmith, Braintrust, Patronus
LLM evaluation platforms compared: LangSmith, Braintrust, Patronus
14 May, 2026 | 06 Mins read

Building an LLM application is the easy part. Knowing whether it works — whether it still works after you change a prompt, swap a model, or add a tool — is the hard part. LLM evaluation platforms exis

Building an AI operating system for a 10,000-person company
Building an AI operating system for a 10,000-person company
19 May, 2026 | 05 Mins read

A diversified industrial company with 10,000 employees across manufacturing, logistics, and field services had accumulated forty-seven separate AI projects over three years. Each business unit had bui

Conference report: key takeaways from Data Council 2026
Conference report: key takeaways from Data Council 2026
23 May, 2026 | 04 Mins read

Data Council 2026 wrapped in Austin last week, and the signal-to-noise ratio was higher than in recent years. The conference has historically been the venue where data infrastructure practitioners — n

A cost optimization framework for LLM inference
A cost optimization framework for LLM inference
24 May, 2026 | 06 Mins read

LLM inference costs follow a pattern that catches teams off guard. The first prototype costs almost nothing -- a few hundred dollars a month during development. The pilot scales to a few thousand. Pro

AI spending is up 300% — where is it actually going?
AI spending is up 300% — where is it actually going?
27 May, 2026 | 03 Mins read

Enterprise AI spending increased roughly 300% year-over-year according to multiple industry surveys released this quarter. The headline number gets attention, but the breakdown is where the actionable

The great model commoditization: what happens when everyone has GPT-5
The great model commoditization: what happens when everyone has GPT-5
30 May, 2026 | 03 Mins read

OpenAI shipped GPT-5. Anthropic shipped Claude 4. Google shipped Gemini Ultra 2. Within six weeks of each other, the three leading model providers released frontier models that are, by most benchmarks

The observability stack: Datadog vs Grafana vs Monte Carlo
The observability stack: Datadog vs Grafana vs Monte Carlo
28 May, 2026 | 07 Mins read

Observability is not one problem — it is three. Infrastructure observability watches your servers, containers, and network. Application observability watches your code, APIs, and user-facing behavior.

RAG frameworks head-to-head: LlamaIndex vs Haystack vs Semantic Kernel
RAG frameworks head-to-head: LlamaIndex vs Haystack vs Semantic Kernel
04 Jun, 2026 | 05 Mins read

Retrieval-augmented generation is simple in theory: retrieve relevant documents, stuff them into a prompt, get a grounded answer. In practice, the retrieval step is where most RAG applications fail. T

Regulators are coming for your training data — are you ready?
Regulators are coming for your training data — are you ready?
06 Jun, 2026 | 03 Mins read

The regulatory focus on AI is narrowing from the models themselves to the data that trains them. The EU AI Act requires documentation of training data provenance and composition. The US Copyright Offi

Why 'AI engineer' is the fastest-growing job title (and what it means)
Why 'AI engineer' is the fastest-growing job title (and what it means)
17 Jun, 2026 | 04 Mins read

LinkedIn's latest workforce report shows "AI engineer" as the fastest-growing job title for the third consecutive quarter. Job postings containing the title increased 280% year-over-year. The growth r

The death of the dashboard: what replaces BI?
The death of the dashboard: what replaces BI?
20 Jun, 2026 | 03 Mins read

The traditional BI dashboard — a grid of charts that a business user opens every morning to check KPIs — is losing its grip on how organizations consume data. The decline is not dramatic. No one decla

Designing guardrails: a practical architecture guide
Designing guardrails: a practical architecture guide
21 Jun, 2026 | 06 Mins read

The guardrail problem in AI is a tension between two failure modes. Too few guardrails and the system produces harmful, inaccurate, or brand-damaging outputs. Too many guardrails and the system refuse

When your AI vendor goes bankrupt — surviving platform lock-in
When your AI vendor goes bankrupt — surviving platform lock-in
23 Jun, 2026 | 05 Mins read

A healthcare analytics company received notice on a Tuesday afternoon that their primary AI infrastructure vendor was filing for Chapter 7 bankruptcy. The platform hosted their patient risk stratifica

Sovereign AI: why countries are building their own models
Sovereign AI: why countries are building their own models
27 Jun, 2026 | 03 Mins read

France released a fully open-source large language model trained on curated French-language data. India announced a multilingual model covering 22 scheduled languages. The UAE expanded its Falcon mode

Real-time fraud detection: from proof-of-concept to production in 90 days
Real-time fraud detection: from proof-of-concept to production in 90 days
30 Jun, 2026 | 05 Mins read

A payment processor handling twelve million transactions per day had a fraud detection system that was accurate but slow. The system reviewed transactions in batch, four times per day. A fraudulent tr

Graph databases for AI: Neo4j vs Amazon Neptune vs ArangoDB
Graph databases for AI: Neo4j vs Amazon Neptune vs ArangoDB
02 Jul, 2026 | 05 Mins read

Graph databases went from niche to essential as AI applications discovered that relationships matter. RAG applications that only search by vector similarity miss the connections between entities. Reco

The hidden environmental cost of your RAG pipeline
The hidden environmental cost of your RAG pipeline
04 Jul, 2026 | 03 Mins read

Retrieval-augmented generation is the default architecture for enterprise AI applications that need to ground model outputs in organizational data. The standard RAG pipeline ingests documents, chunks

Synthetic data tools: Gretel, Mostly AI, Tonic
Synthetic data tools: Gretel, Mostly AI, Tonic
09 Jul, 2026 | 05 Mins read

Real data is expensive, restricted, and often unusable. Privacy regulations block access to customer records. Data sharing agreements prevent using production data in development environments. Class i

LLM gateway comparison: LiteLLM, Portkey, Martian
LLM gateway comparison: LiteLLM, Portkey, Martian
29 Jun, 2026 | 07 Mins read

A production AI application calls multiple LLM providers. The primary model is GPT-4o for complex reasoning, but simple classification tasks use Claude Haiku for cost savings, and the fallback for rat

The Rise of GPU Databases for AI Workloads
The Rise of GPU Databases for AI Workloads
22 Jan, 2024 | 03 Mins read

Traditional relational database management systems were designed for an era of megabyte-scale datasets and batch reporting. AI workloads demand processing terabyte-scale datasets with complex analytic

Vector Databases: The Missing Piece in Your AI Infrastructure
Vector Databases: The Missing Piece in Your AI Infrastructure
12 Jan, 2024 | 02 Mins read

Vector databases index and query high-dimensional vector embeddings. Unlike traditional databases that excel at exact matches, vector databases enable similarity search: finding items conceptually clo

2025 Year-in-Review & 2026 Trends in Data & AI Architecture
2025 Year-in-Review & 2026 Trends in Data & AI Architecture
19 Dec, 2025 | 03 Mins read

2025 was the year AI moved from experimentation to industrialization. While 2024 saw the explosion of generative AI capabilities, 2025 was about making those capabilities production-ready, cost-effect

AI Agent Orchestration Patterns: From Chaining to Multi-Agent Systems
AI Agent Orchestration Patterns: From Chaining to Multi-Agent Systems
27 Jan, 2026 | 13 Mins read

A software debugging agent receives a bug report. It needs to search code, understand the error, propose a fix, write tests, and summarize for the developer. None of these steps are independent. Each

AI Infrastructure for Legacy Systems: Modernizing 20-Year-Old ERPs with AI
AI Infrastructure for Legacy Systems: Modernizing 20-Year-Old ERPs with AI
18 Feb, 2026 | 13 Mins read

A manufacturing company runs their operations on an ERP system installed in 2004. The vendor still supports it. The team knows how to maintain it. The integrations are stable. It works. The problem i

Designing the Enterprise Knowledge Layer: Beyond RAG
Designing the Enterprise Knowledge Layer: Beyond RAG
16 Jan, 2026 | 14 Mins read

Most teams implement retrieval-augmented generation and call it a knowledge layer. Give the model access to a vector database, stuff in some documents, and ship. This approach works for demos. It fall

Feature Stores for AI: The Missing MLOps Component Reaching Maturity
Feature Stores for AI: The Missing MLOps Component Reaching Maturity
12 Mar, 2026 | 11 Mins read

A recommendation system team built their tenth model. Each model required feature engineering. Each feature engineering project started by copying code from the previous project, then modifying it for

Tool Calling and Function Calling: Connecting AI to Enterprise Systems
Tool Calling and Function Calling: Connecting AI to Enterprise Systems
28 Mar, 2026 | 14 Mins read

A language model that only generates text is not enough for most enterprise problems. The real value emerges when an AI system can look up your customer record, check inventory levels across warehouse

The AI Data Pipeline: Special Considerations for Unstructured and Structured Data
The AI Data Pipeline: Special Considerations for Unstructured and Structured Data
11 May, 2026 | 13 Mins read

Data pipelines for AI are not the same as data pipelines for traditional software systems. The outputs are different. The failure modes are different. The tolerance for data quality issues is differen

AI Observability: Monitoring Hallucinations, Latency, and Cost at Scale
AI Observability: Monitoring Hallucinations, Latency, and Cost at Scale
30 Apr, 2026 | 09 Mins read

Traditional software monitoring tracks CPU utilization, memory consumption, request rates, and error counts. These metrics tell you whether your service is running and whether it is handling load. The

Semantic Caching for AI: Reducing Latency and Cost with Meaning-Based Retrieval
Semantic Caching for AI: Reducing Latency and Cost with Meaning-Based Retrieval
19 May, 2026 | 07 Mins read

Every repeated question your AI system answers is money spent and latency incurred that you did not need to. If a thousand users ask the same question in a week, running it through the language model

Evaluating LLM Providers for Enterprise: A Framework Beyond Benchmark
Evaluating LLM Providers for Enterprise: A Framework Beyond Benchmark
08 Apr, 2026 | 10 Mins read

Benchmark scores tell you how a model performs on problems that someone else chose. Your enterprise systems present different problems: your proprietary terminology, your specific data distributions,