OpenAI 2026 hackathon

Agent Pair Protocol

An open protocol for end-to-end encrypted between two personal AI agents. Agent↔Agent across trust boundaries: SPAKE2 pairing via a short human-exchanged code, dumb relay, keys never leave the host.

Solo project by V Abd Rav · 2 likes · 2 comments

Archive position — measured, not model output

2 likes on Devpost

221 of the 7,856 archived projects have more likes, and 285 share exactly 2 — so this project's #228 place in the like-ranked listing is a tie-break inside that group, not a ranking.

Projects (log scale)

1
10
100
1k
10k
05,592
11,758
2285
3–4132
5–975
10+14

Likes on Devpost. ▲ marks this project's group.

Show the figures
LikesProjectsShare of archive
05,59271.2%
11,75822.4%
22853.6%
3–41321.7%
5–9751.0%
10+140.2%
Devpost like counts for all 7,856 archived projects, captured when this archive was built.

Executive Summary

What the company appears to be

Agent Pair Protocol (APP) is a self-reported open protocol for secure, end-to-end encrypted communication between two personal AI agents — each acting on behalf of one human. It enables agents to negotiate deliverables like API contracts or firmware interfaces through an untrusted relay, using short human-exchanged codes for bonding and cryptographic keys never leaving the host.

What changed

The author describes a frustration with developer collaboration where tools failed to communicate directly, forcing humans into the loop as routers. This led to the creation of a protocol designed to allow agents to negotiate autonomously while maintaining security and trust boundaries.

Single most important open question

Is there any evidence that this protocol has been implemented or used in practice beyond the author’s own development environment?

Back to contents

What The Product Actually Is

The description states that Agent Pair Protocol is:

  • An open protocol for end-to-end encrypted communication between two personal AI agents.
  • It allows agents to negotiate concrete deliverables (e.g., API contracts, firmware interfaces) through an untrusted relay.
  • Agents pair via a short human-exchanged code using SPAKE2.
  • Keys never leave the host; the relay is dumb and sees only routing metadata and ciphertext.
  • The system includes:
    • A TypeScript protocol library
    • An MCP server (agentpair)
    • A Hono + SQLite dumb relay
    • Conformance vectors for third-party implementation

Inference The product is described as a protocol stack, not a commercial service or SaaS offering. It is built to be implemented by others, with reference implementations provided.

Back to contents

Positioning & Claim Evolution

The author claims:

  • The protocol solves the problem of AI agents being unable to collaborate without human intervention.
  • It aims to eliminate the need for humans to act as routers in agent-to-agent communication.
  • The system is designed around security-first principles, including:
    • Keys never leave the host
    • Relay is dumb
    • Human gates trust
    • Authenticity ≠ trustworthiness

Inference The positioning is framed as a foundational protocol for AI collaboration, not a product with direct end-user value. It positions itself in the space of agent-to-agent communication infrastructure, targeting developers or implementers rather than end-users.

Back to contents

Target Customer & ICP

The description states:

  • The target is AI agents acting on behalf of humans.
  • The protocol is intended for use by developers and implementers who want to enable secure agent-to-agent communication.
  • It is designed for two-person teams or individuals, not enterprise-scale collaboration.

Inference The ICP (Ideal Customer Profile) appears to be technical users or developers building AI agents, particularly those working in environments where secure, autonomous negotiation between agents is needed — such as API development, firmware engineering, or other domains requiring precise coordination.

Back to contents

Business Model & Pricing Evidence

Not evidenced.

Explanation

There is no mention of pricing, monetization strategy, or business model in the project description. The protocol is described as open and self-hosted, with no indication that it is sold or offered as a service.

Back to contents

Technical & Delivery Signals

The description states:

  • Built using:
    • TypeScript
    • Codex, Cursor, MCP
    • npm
    • Hono + SQLite
  • Uses fixed crypto suite: Ed25519, X25519, XChaCha20-Poly1305, SPAKE2 for pairing.
  • Includes:
    • Sign-the-blob envelopes
    • Bonded pairing with short human-exchanged codes
    • Negotiation profile with goals, budgets, deadlines
    • Spillover for large payloads
    • MCP binding for tools like pair_init, pair_join, etc.
  • Reference implementation includes:
    • Protocol library
    • MCP server
    • Relay
    • Conformance vectors

Inference The technical stack is developer-oriented, with a focus on security and interoperability. The protocol is built to be lightweight, modular, and implementable by others.

Back to contents

Traction & Maturity Signals

Not evidenced.

Explanation

There is no evidence of revenue, customers, or adoption beyond the author’s own development work. The project is described as a hackathon submission with a reference implementation but no mention of real-world usage or traction.

Back to contents

Competitive Context

Not evidenced.

Explanation

No mention of competitors or existing solutions in this space. The description does not indicate whether similar protocols or tools already exist, nor how APP differentiates from them.

Back to contents

Key Risks & Red Flags

  • No evidence of adoption or real-world use: The protocol is described as a reference implementation and a hackathon project — no sign of traction.
  • Self-reported only: All claims are unverified; there is no third-party validation.
  • Highly technical, low direct user value: The product is aimed at developers, not end-users, which may limit its commercial appeal or scalability.
  • Security model is complex and may be hard to implement correctly: The protocol requires careful handling of cryptographic keys and trust boundaries — a high-risk area for implementation errors.

Back to contents

Diligence Questions To Ask The Founders

  1. Has the protocol been implemented or tested in real-world scenarios beyond the reference stack?
  2. What are the specific use cases you’ve identified for this protocol, and how many have you validated?
  3. Are there any known security vulnerabilities or edge cases that remain unresolved?
  4. How do you plan to onboard developers or teams who want to implement this protocol?
  5. Is there a roadmap for expanding beyond the current MVP (e.g., multi-agent support, public relays)?
  6. What is your long-term vision for monetization or commercialization?

Back to contents

Investment/Partnership Verdict

Not evidenced.

Explanation

There is no evidence of revenue, customers, or traction to assess the commercial viability or investment potential of Agent Pair Protocol. The project is described as a self-contained protocol stack built by one person in a hackathon context — not a scalable business or product with demonstrated market demand.

The author states that the protocol is open and designed for third-party implementation, but there is no indication that it has been adopted or used beyond its own reference implementation. As such, any investment or partnership decision would be based on speculative potential rather than evidence of traction or commercial viability.

Back to contents

Source

Submitted to the OpenAI 2026 hackathon on Devpost. Project home on DevPost.

The analysis above was generated by a language model from the project's own one-line description. It is not independent research and contains no verified traction, revenue or customer data.