Skip to content

Roadmap

The AP3 roadmap is organized by delivery horizon:

  • Ready today — shipped and in the SDK, spec, and docs.
  • Q3 FY26 — landing by September 2026.
  • Q4 FY26 — landing by December 2026.

Ready today

  • AP3 protocol specification v1.0: versioned specification published as an extension to Agent2Agent (A2A). Covers message formats, capability-disclosure semantics, mandate and attestation structures, and the SMPC and TEE trust-model definitions.
  • Reference SDK: open-source SDK in Python.
  • Private compute API: private Set Intersection (PSI) API to be exposed, as the most demanded privacy preserving computation function.
  • Documentation: Published documentation and step-by-step tutorial on how to build your own agents from scratch and perform private compute. Deployed at https://ap3-protocol.org.
  • Code examples: demo agents with architecture, reference implementation and mock data.
  • Payments interoperability for Private Commerce: a worked example of AP3 running over payment rails, supporting agentic commerce standards including AP2, x402, and the MPP family. Private negotiation runs on AP3, then hands off to the payment protocol, composing AP3 confidentiality with existing mandate semantics.

Q3 FY26 (by September 2026)

  • Agent framework adaptors (LangGraph, AutoGen, CrewAI, and others).
  • TypeScript SDK.

Q4 FY26 (by December 2026)

  • Use case corpus: integration cookbooks and reference deployments for cross-organizational scenarios including financial risk profiling, cross-border compliance, federated credential verification, and supply-chain reconciliation.
  • Formal verification: a track for evaluation of AP3's core protocol flows against its stated security properties, in collaboration with academic contributors.
  • Private compute library: More APIs will be added in the next phases to provide custom logic building blocks for cross-organizational agent compute workflows: set operations (intersection, union, cardinality), threshold and qualification checks, private pricing and negotiation, compliance and sanctions screening, geospatial matching, credential verification, and multi-party aggregation.