1. Conduid
  2. Developer Tools
  3. Asap Protocol
MCP server · Developer Tools

Asap Protocol

Protocol for agent-to-agent communication with stateful orchestration, MCP-compatible and a public marketplace to discover and register agents.

65Good

Scored 27 days ago · breakdown

About Asap Protocol

Asap Protocol is an MCP server published by adriannoes in the Developer Tools category: protocol for agent-to-agent communication with stateful orchestration, MCP-compatible and a public marketplace to discover and register agents.

The repository has 14 stars and 1 forks, with the last commit 6 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/adriannoes/asap-protocol

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Asap Protocol

Powered by Claude · Grounded in docs

I know everything about Asap Protocol. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

3 checks have not been run yet.

Releases

v2.5.7v2.5.7 · 11 Oct 20262026-10-11 Quality & coverage patch** — correct batch HTTP rate-limit accounting, transitive dependency overrides for CI security gates, `apps/web` audit-ci enforcement, and consolidated regression tests on `main` via…
v2.5.6v2.5.6 · 2 Oct 20262026-10-01 Security & quality patch** — Lite Registry IssueOps envelope and endpoint SSRF hardening, compliance harness open-redirect SSRF, constrained capability execute, Agent JWT rotate-key lifecycle race, dependency bumps, and…
v2.5.5v2.5.5 · 11 Sep 20262026-09-11 Security & quality patch** — OpenAPI path-parameter climb, Lite Registry add-only URN policy, marketplace allowlisted-fetch DNS pin, capability-replace consent, fail-closed reactivate, Agent JWT persist/revoke races, and…
v2.5.4v2.5.4 · 18 Jul 2026Distribution Loop** — homepage, thin starters, Build for agents guide, and maintainer telemetry ops (no public metrics UI). Scope: [prd-v2.5.4-distribution-loop.md](product/prd/prd-v2.5.4-distribution-loop.md). npm `@asap-protocol/*`…
v2.5.3v2.5.3 · 16 Jul 2026Adapter Lab II** — workflow / enterprise adapters as **docs + examples** (no wire-format change). Scope: [prd-v2.5.3-adapter-lab-ii.md](product/prd/prd-v2.5.3-adapter-lab-ii.md). npm `@asap-protocol/*` packages remain at **2.4.1**. Added…

README

ASAP: Async Simple Agent Protocol

✨ From agents, for agents. Delivering reliability, as soon as possible.

ASAP Protocol Banner

A production-ready protocol for agent-to-agent communication and task coordination.

Quick Info: v2.3.0 | Apache 2.0 | Python 3.13+ | Documentation | PyPI asap-protocol | npm @asap-protocol/client | Changelog

📦 Install the ASAP Python SDK / protocol from https://pypi.org/project/asap-protocol/ — package name asap-protocol on PyPI.

🚀 Live now our agentic marketplace — browse agents, register yours, request verification.

Why ASAP?

Building multi-agent systems today suffers from three core technical challenges that existing protocols like A2A don't fully address:

  1. $N^2$ Connection Complexity: Most protocols assume static point-to-point HTTP connections that don't scale.
  2. State Drift: Lack of native persistence makes it impossible to reliably resume long-running agentic workflows.
  3. Fragmentation: No unified way to handle task delegation, artifact exchange and tool execution (MCP) in a single envelope.

ASAP provides a production-ready communication layer that simplifies these complexities. It's ideal for multi-agent orchestration, stateful workflows (persistence, resumability), MCP support and production systems requiring high-performance, type-safe agent communication.

For simple point-to-point communication, a basic HTTP API might suffice; ASAP shines when you need orchestration, state management and multi-agent coordination. See the documentation for the current protocol overview and features.

Key Features

  • Stateful orchestration — Task state machine with snapshotting for resumable workflows.
  • Schema-first — Pydantic v2 + JSON Schema for cross-agent interoperability.
  • Async-native — asyncio + httpx; sync and async handlers supported.
  • MCP integration — Tool execution and coordination in a single envelope.
  • Observable — trace_id and correlation_id for debugging.
  • Security — Bearer auth, OAuth2/JWT, Ed25519 signed manifests, optional mTLS, replay prevention, HTTPS, rate limiting. Security Model (trust limits, Custom Claims).
  • Identity & capabilities (v2.2, WebAuthn real in v2.2.1) — Per-runtime Host/Agent JWTs, capability grants with constraints (max, min, in, not_in), approval flows (device authorization / CIBA-style), real WebAuthn attestation/assertion for high-risk registration (opt-in via asap-protocol[webauthn]).
  • Streaming & wire protocol (v2.2) — POST /asap/stream (SSE / TaskStream), JSON-RPC 2.0 batch on POST /asap, ASAP-Version negotiation, tamper-evident audit logging, Compliance Harness v2.
  • Adoption Multiplier (v2.3.0) — OpenAPI → ASAP via create_from_openapi ([openapi] extra), official @asap-protocol/client on npm (Vercel AI / OpenAI / Anthropic adapters), optional Auto-Registration (POST /registry/agents), capability escalation, and ASAP WWW-Authenticate discovery challenges. All opt-in; wire protocol unchanged. See docs/index.md and docs/migration.md.
  • Economics — Usage metering, delegation tokens, SLA framework with breach alerts.

🆕 Framework Ecosystem

ASAP is built for interoperability. Seamlessly integrate your agents into OpenClaw, LangChain, CrewAI and LlamaIndex workflows using our growing library of native adapters and standardized tool-calling schemas.

Installation

We recommend using uv for dependency management:

uv add asap-protocol

Or with pip:

pip install asap-protocol

npm (TypeScript / JavaScript — @asap-protocol/client, aligned with protocol v2.3.0):

npm install @asap-protocol/client

📦 Canonical listing: https://pypi.org/project/asap-protocol/ — package asap-protocol (pip install asap-protocol). Prefer uv for reproducible environments when possible.

Quick Start

Run the demo (echo agent + coordinator in one command):

uv run python -m asap.examples.run_demo

Build your first agent here — server setup, client code, step-by-step (~15 min).

19 examples: orchestration, state migration, MCP, OAuth2, WebSocket, resilience.

Testing

uv run pytest -n auto --tb=short

With coverage:

uv run pytest --cov=src --cov-report=term-missing

Testing Guide (structure, fixtures, property/load/chaos tests). Contributing (dev setup, CI).

Compliance Harness

Validate that your agent follows the ASAP protocol:

uv add asap-compliance
pytest --asap-agent-url https://your-agent.example.com -m asap_compliance

See Compliance Testing Guide for handshake, schema and state machine validation.

Documentation

Learn

Deep Dive

Decisions & Operations

Release

  • Changelog | PyPI listing — https://pypi.org/project/asap-protocol/ (install: pip install asap-protocol)

CLI

asap --version                                    # Show version
asap list-schemas                                 # List all available schemas
asap export-schemas                               # Export JSON schemas to file
asap compliance-check --url https://agent.example # Compliance Harness v2 (HTTP(S))
asap audit export --store memory --format json    # Export audit log (stdout)
asap keys generate -o key.pem                     # Generate Ed25519 keypair
asap manifest sign -k key.pem manifest.json       # Sign manifest
asap manifest verify signed.json                  # Verify signature
asap manifest info signed.json                    # Show trust level

See the CLI reference for compliance-check and audit export flag details, the CI compliance gate for wiring compliance-check into GitHub Actions, the audit export guide, Identity Signing, or run asap --help for the full command surface.

Version History

High-level only — see Changelog and the docs index for full notes.

Version What shipped
v2.3.0 OpenAPI Adapter ([openapi]) · TypeScript client (@asap-protocol/client) · Auto-Registration · Capability escalation · ASAP HTTP challenge — see CHANGELOG and Migration
v2.2.1 Opt-in WebAuthn (asap-protocol[webauthn]) · asap compliance-check & asap audit export · stricter ResolvedAgent.run() · AuditChainBroken · pinned security deps
v2.2 Per-runtime identity & capability auth · SSE POST /asap/stream · ASAP-Version · JSON-RPC batch · tamper-evident audit · async state stores · Compliance Harness v2
v2.1.1 Patch: JWT allowlist · SQLite async bridge · optional Redis rate limits · web SSRF hardening
v2.1 MarketClient · framework extras (LangChain, CrewAI, LlamaIndex, …) · registry UX
v2.0 Marketplace web app · Lite Registry (GitHub Pages) · IssueOps · OAuth · verification flow
v1.3 asap delegation create / revoke
v1.2 Ed25519 manifests · trust levels · optional mTLS · Compliance Harness
v1.1 OAuth2 · WebSocket · discovery (well-known + Lite Registry) · SQLite state · webhooks

🔭 What's Next?

ASAP is evolving toward an Agent Marketplace — an open ecosystem where AI agents discover, trust and collaborate autonomously. See the ADR index and v2.0 roadmap PRD. Detailed long-term strategy narratives are maintained privately (not shipped in this repository).

Contributing

Community feedback and contributions are essential for ASAP Protocol's evolution. We're working on improvements and your input helps shape the future of the protocol.

Every contribution, from bug reports to feature suggestions, documentation improvements and code contributions, makes a real difference.

Check out our contributing guidelines to get started. It's easier than you think! 🚀

Contact

For general questions about the protocol, the marketplace, partnerships, or press (not security vulnerabilities — use SECURITY.md for those):

You can also use GitHub Discussions or Issues for public project topics.

License

This project is licensed under the Apache 2.0 License - see the license file for details.


Built with Cursor using Opus 4.6/4.7, Composer 1.5/2.0, Gemini 3.1 Pro and Kimi K2.5.

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About Asap Protocol

How do I install Asap Protocol?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Asap Protocol safe to use with an AI agent?

Its trust score is 65 out of 100 (good). It passes 2 of the 3 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Asap Protocol still maintained?

Yes — the latest release is v2.5.7 (11 Oct 2026), and the last commit was 6 days ago. The repository has 14 stars.