ai.oz0/a2a-remote
For: tenant administrators and plugin users.
ai.oz0/a2a-remote adds the a2a harness so an outside agent that speaks A2A can appear in your tenant's catalog. Your plugin defines the agent with runtime: remote:a2a and supplies its card under harness: card.
See outside A2A agents for the definition and job behaviour.
It has no tools, no agents and no secrets, and reaches no host of its own: a session reaches only the hosts of the plugin that defines the agent, and gets only the one secret its auth names. Nodes know plugins by name, so install this plugin only from its verified source: whatever plugin a tenant installs under the name a2a-remote gets the outside agents' secrets, as any plugin gets the tenant secrets it names.
Install
oz0 plugin install hub:ai.oz0/a2a-remote
What its client does
| Step | What it holds to |
|---|---|
| Reads the card | The tenant's egress list and the defining plugin's, on every node; https; no redirect; a signature checked wherever its key can be found (ES256, ES384, RS256, PS256 or EdDSA over the card's RFC 8785 form), its key from the card's own origin or the keys the agent's definition pins (jwks); how the card was checked goes into the audit log |
| Sends the job's input | To the card's JSON-RPC interface on the card's own origin only, in A2A 1.0 (or 0.3 for a card that offers only that), with returnImmediately |
| Follows the task | GetTask every 2 seconds, slowing to 10 while nothing changes; never a stream, never a push address |
| Answers its questions | Only after the job's approval of a2a.continue, or a person's answer for an agent that may ask people; a refusal or a deadline cancels the task |
| Takes the answer | Artifacts, each checked against ai.oz0/sha256 when it has one; no file parts |
| Stops | CancelTask when the job is cancelled, killed or out of budget |
Every exchange is reported to the node's runtime with its size and SHA-256, which records it in the audit log before the segment ends.
AgentCore and Foundry
Two more verified plugins are presets on this harness: ai.oz0/a2a-agentcore (an agent on Amazon Bedrock AgentCore Runtime, agent oz0-agentcore) and ai.oz0/a2a-foundry (a Microsoft Foundry Agent Service agent, agent oz0-foundry). Each takes the agent's address from the tenant's settings and its client secret from a secret: see Remote agents. Both are tested against stand-ins only.
Tested how
make test-plugins runs the client against a stand-in outside agent in plain A2A 1.0 and 0.3 and in AgentCore's and Foundry's shapes; make e2e-a2a-remote runs jobs through a dev server and a node against it; make interop runs it against the A2A SDKs' own sample servers (the interop matrix).