WSO2 Joins the Agentic AI Foundation (AAIF)

Every enterprise building with AI agents right now is making a bet on standards that are still being written. Which protocol will agents use to talk to tools? How will an agent prove who it is before it touches a production system?

WSO2 has joined the Agentic AI Foundation (AAIF), the Linux Foundation project stewarding that work, because we think enterprises deserve to build on standards, not on any single vendor's roadmap.

What the Agentic AI Foundation is, and why It matters

AAIF is the neutral home for the open source projects agentic AI is actually running on: the Model Context Protocol (MCP), Block's Goose agent framework, OpenAI's AGENTS.md convention, and now Google's Agent2Agent (A2A) protocol, among others. AAIF launched under the Linux Foundation with founding members including AWS, Anthropic, Google, Microsoft, and OpenAI, and has grown to include Salesforce, SAP, IBM, and Cisco at the Gold tier and WSO2 among its Silver members.

Foundations like AAIF bring together vendors like these to solve the questions we’re all being asked about agents - who they are, what they can access, and who is responsible - at the protocol layer instead of leaving every vendor to solve it separately. WSO2 brings our extensive open source background to these challenges, contributing our leadership and knowledge in both agent management and agent identity to AAIF.

WSO2 and AAIF

While formal membership is new, WSO2 has already been collaborating with the AAIF community on summit stages and in standards papers.

Agent identity, on stage
The WSO2 team has taken the stage at AAIF events, including multiple MCP Dev Summits, to share how agent identity and agent security are shaping as the industry evolves. Ayesha Dissanayaka, Associate Director/Architect on WSO2's identity and access management team, presented "Ambient Identity: Just-in-Time Authorization Patterns for the Model Context Protocol" at MCP Dev Summit Bengaluru. Ayesha also presented "Bringing Identity to the MCP Host" at MCP Dev Summit Mumbai, where Hasini Samarathunga & Sahan Dilshan, both software engineers at WSO2, also presented "Your AI Chatbot Just Exposed Your CEO's Salary To an Intern: Securing Enterprise AI Agents".

These talks dig into the same problem WSO2 Agent ID was built to solve: agents don't fit neatly into identity systems designed for humans or for service accounts, and just-in-time, scoped authorization is quickly becoming the pattern the ecosystem is converging on.

An AAIF Ambassador from the WSO2 team
Ayesha was also selected into the inaugural cohort of the AAIF Ambassador Program, a group of practitioners tasked with helping developers understand and contribute to AAIF-hosted projects through talks, workshops, and technical content. She recently wrote an AAIF blog on the new MCP revision, The Anatomy of MCP Authorization: How the Hardened Flow Actually Runs.

Read the AAIF blog from WSO2 author Ayesha Dissanayaka:
The Anatomy of MCP Authorization: How the Hardened Flow Actually Runs

A community chapter with WSO2 roots
That work has a local home, too: AAIF Sri Lanka, a volunteer-run community chapter connecting engineers building the open agent stack from Colombo, with contributors from WSO2's integration and identity teams among its organizers.

Defining AI standards beyond AAIF's walls
The challenges AI poses don't stop at AAIF's door. WSO2 has also been active across the open source community, including as a contributor to the OpenID Foundation's whitepaper, "Identity Management for Agentic AI," published alongside engineers from AWS, Okta, WorkOS, and Stanford's Loyal Agents Initiative. Additional contributions include the donation of OpenChoreo to the Cloud Native Computing Foundation (CNCF) and donation of ThunderID (designed with agentic identity in mind) to the OpenWallet Foundation. WSO2 hopes to continue sharing meaningful contributions as part of the AAIF.

"AI is foundational technology, and we believe foundational technology has to be open. That's why WSO2 has spent years building an open source platform and contributing to new standards like MCP," said Rania Khalaf, Chief AI Officer at WSO2. "Joining the AAIF, we will continue supporting and contributing to the agentic community defining the foundational AI infrastructure, essential to the agentic enterprise stack."

How AAIF membership extends WSO2’s impact

WSO2’s membership is an extension of how WSO2 already builds as an open source vendor.

Agent Manager, WSO2’s agent control plane, runs any framework, LangChain, CrewAI, or otherwise, because it's built on MCP and other open protocols rather than a proprietary agent format. Agent ID issues verifiable, OAuth- and OIDC-based identities to agents so you can track exactly who each agent is and what actions they took.

Both of those bets pay off most if the standards underneath them stay open and interoperable, which is precisely what AAIF's working groups exist to protect.

What's next

WSO2 will be at AGNTCon + MCPCon Europe in Amsterdam this September, AAIF's flagship European gathering for the people building the open agentic AI stack, and their North America event in October.

If your team is wrestling with the same questions we're bringing to AAIF, how to give agents real identities, or how to avoid rebuilding the same integration for every framework, that's the conversation WSO2’s Agent Platform is built to have. Learn more about WSO2's agentic enterprise platform.