{
  "schema_version": "1",
  "generated_at": "2026-10-20T00:00:00Z",
  "tag": "security",
  "count": 19,
  "entries": [
    {
      "id": "lightning-agent-tools-github",
      "title": "lightninglabs/lightning-agent-tools",
      "publisher": "GitHub (Lightning Labs)",
      "authors": [],
      "date_published": null,
      "url": "https://github.com/lightninglabs/lightning-agent-tools",
      "type": "repo",
      "category": "bitcoin-lightning",
      "summary": "AI agent toolkit (skills plus an MCP server) for Lightning payments: node operation, L402 API payments, paid endpoint hosting and scoped macaroon credentials. Its default security model uses a remote signer that keeps private keys off the agent machine.",
      "tags": [
        "lightning",
        "l402",
        "agent-wallets",
        "mcp",
        "security"
      ],
      "verified_at": "2026-10-20",
      "featured": true,
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20260519020054/https://github.com/lightninglabs/lightning-agent-tools"
    },
    {
      "id": "lightning-agent-tools-l402-and-lnget",
      "title": "L402 and lnget (lightning-agent-tools docs)",
      "publisher": "GitHub (Lightning Labs)",
      "authors": [],
      "date_published": null,
      "url": "https://github.com/lightninglabs/lightning-agent-tools/blob/main/docs/l402-and-lnget.md",
      "type": "docs",
      "category": "bitcoin-lightning",
      "summary": "Lightning Labs guide on how agents use lnget to reach L402-gated endpoints, covering backend options (lnd, Lightning Node Connect, embedded Neutrino) and bounded per-request spending.",
      "tags": [
        "l402",
        "lightning",
        "agent-wallets",
        "security"
      ],
      "verified_at": "2026-10-20",
      "featured": true,
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20260320133408/https://github.com/lightninglabs/lightning-agent-tools/blob/main/docs/l402-and-lnget.md"
    },
    {
      "id": "arxiv-beyond-the-mandate-ap2-security",
      "title": "Beyond the Mandate: A Systematic Security Analysis of the Agent Payments Protocol (AP2)",
      "publisher": "arXiv",
      "authors": [
        "Avital Aviv",
        "Parth A. Gandh",
        "Ron Bitton",
        "Asaf Shabtai"
      ],
      "date_published": "2026-08-24",
      "url": "https://arxiv.org/abs/2608.23858",
      "type": "research-paper",
      "category": "payments",
      "summary": "Security analysis of Google's AP2. It finds that signed Checkout and Payment Mandates protect transaction data after signing, while agent interactions before authorization (A2A messages, MCP inputs) stay outside that protection.",
      "tags": [
        "ap2",
        "security",
        "research"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20260923112346/https://arxiv.org/abs/2608.23858"
    },
    {
      "id": "boe-breeden-agents-of-change",
      "title": "Agents of change",
      "publisher": "Bank of England (via BIS central bankers' speeches)",
      "authors": [
        "Sarah Breeden"
      ],
      "date_published": "2026-06-30",
      "url": "https://www.bis.org/speeches/20260730-agents-change.pdf",
      "type": "regulatory",
      "category": "payments",
      "summary": "Speech by Bank of England Deputy Governor Sarah Breeden at the ECB Sintra Forum on how agentic AI is changing cyber risk, markets and payments. It argues central banks must adapt quickly, strengthen resilience and cooperate globally.",
      "tags": [
        "regulation",
        "security"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20261014040922/https://www.bis.org/speeches/20260730-agents-change.pdf"
    },
    {
      "id": "imf-how-agentic-ai-will-reshape-payments",
      "title": "How Agentic AI Will Reshape Payments",
      "publisher": "International Monetary Fund",
      "authors": [],
      "date_published": "2026-04-24",
      "url": "https://www.imf.org/en/publications/imf-notes/issues/2026/04/22/how-agentic-ai-will-reshape-payments-575560",
      "type": "report",
      "category": "payments",
      "summary": "IMF Note examining how agentic AI may affect authorization, liquidity, settlement, compliance and resilience in payment systems, using an intent, authorization and settlement framework. It highlights the tension between probabilistic AI behavior and the deterministic requirements of payment infrastructure.",
      "tags": [
        "regulation",
        "research",
        "security"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20260629110549/https://www.imf.org/en/publications/imf-notes/issues/2026/04/22/how-agentic-ai-will-reshape-payments-575560"
    },
    {
      "id": "arxiv-sok-security-llm-agents-agentic-commerce",
      "title": "SoK: Security of Autonomous LLM Agents in Agentic Commerce",
      "publisher": "arXiv",
      "authors": [
        "Qian'ang Mao",
        "Jiaxin Wang",
        "Ya Liu",
        "Li Zhu",
        "Cong Ma",
        "Jiaqi Yan"
      ],
      "date_published": "2026-04-15",
      "url": "https://arxiv.org/abs/2604.15367",
      "type": "research-paper",
      "category": "payments",
      "summary": "Systematization of knowledge on the security of autonomous LLM agents that negotiate, purchase and transact across on-chain and off-chain environments. It covers protocols such as ERC-8004 and AP2.",
      "tags": [
        "security",
        "ap2",
        "research",
        "identity"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20261006050702/https://arxiv.org/abs/2604.15367"
    },
    {
      "id": "arxiv-apex-agent-payment-execution",
      "title": "APEX: Agent Payment Execution with Policy for Autonomous Agent API Access",
      "publisher": "arXiv",
      "authors": [
        "Mohd Safwan Uddin",
        "Mohammed Mouzam",
        "Mohammed Imran",
        "Syed Badar Uddin Faizan"
      ],
      "date_published": "2026-04-02",
      "url": "https://arxiv.org/abs/2604.02023",
      "type": "research-paper",
      "category": "payments",
      "summary": "Research system that adapts HTTP 402-style payment gating to UPI-like real-time fiat workflows, with policy-governed spend control for autonomous agents calling APIs.",
      "tags": [
        "m2m-payments",
        "research",
        "security"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20260403123042/https://arxiv.org/abs/2604.02023"
    },
    {
      "id": "arxiv-a402-binding-payments-service-execution",
      "title": "A402: Binding Cryptocurrency Payments to Service Execution for Agentic Commerce",
      "publisher": "arXiv",
      "authors": [
        "Yue Li",
        "Lei Wang",
        "Kaixuan Wang",
        "Zhiqiang Yang",
        "Ke Wang",
        "Zhi Guan",
        "Jianbo Gao"
      ],
      "date_published": "2026-03-01",
      "url": "https://arxiv.org/abs/2603.01179",
      "type": "research-paper",
      "category": "payments",
      "summary": "Proposes A402, a trust-minimized payment architecture with Atomic Service Channels that bind cryptocurrency payments to service execution and result delivery. It addresses an atomicity gap the authors identify in x402.",
      "tags": [
        "x402",
        "security",
        "research"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20260815005030/https://arxiv.org/abs/2603.01179"
    },
    {
      "id": "arxiv-zero-trust-runtime-verification-ap2",
      "title": "Zero-Trust Runtime Verification for Agentic Payment Protocols: Mitigating Replay and Context-Binding Failures in AP2",
      "publisher": "arXiv",
      "authors": [
        "Qianlong Lan",
        "Anuj Kaul",
        "Shaun Jones",
        "Stephanie Westrum"
      ],
      "date_published": "2026-02-06",
      "url": "https://arxiv.org/abs/2602.06345",
      "type": "research-paper",
      "category": "payments",
      "summary": "eBay-authored paper on runtime behaviors (retries, concurrency, orchestration) that can cause replay and context-binding failures in mandate-based protocols such as AP2 and UCP. It proposes zero-trust runtime verification to mitigate them.",
      "tags": [
        "ap2",
        "security",
        "research"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20260827173930/https://arxiv.org/abs/2602.06345"
    },
    {
      "id": "visa-trusted-agent-protocol-press-release",
      "title": "Visa Introduces Trusted Agent Protocol: An Ecosystem-Led Framework for AI Commerce",
      "publisher": "Visa",
      "authors": [],
      "date_published": "2025-10-14",
      "url": "https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.21716.html",
      "type": "announcement",
      "category": "payments",
      "summary": "Visa press release introducing the Trusted Agent Protocol, developed with Cloudflare, to support secure communication between AI agents and merchants and help merchants tell legitimate agents apart from malicious bots.",
      "tags": [
        "card-networks",
        "identity",
        "security"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20260621131201/https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.21716.html"
    },
    {
      "id": "google-ap2-github",
      "title": "google-agentic-commerce/AP2",
      "publisher": "GitHub (Google Agentic Commerce)",
      "authors": [],
      "date_published": null,
      "url": "https://github.com/google-agentic-commerce/AP2",
      "type": "repo",
      "category": "payments",
      "summary": "Official repository of the Agent Payments Protocol (AP2), described as \"Building a Secure and Interoperable Future for AI-Driven Payments.\"",
      "tags": [
        "ap2",
        "identity",
        "security"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20260913134535/https://github.com/google-agentic-commerce/AP2"
    },
    {
      "id": "visa-developer-trusted-agent-protocol",
      "title": "Getting started with Trusted Agent Protocol",
      "publisher": "Visa Developer",
      "authors": [],
      "date_published": null,
      "url": "https://developer.visa.com/capabilities/trusted-agent-protocol/overview",
      "type": "docs",
      "category": "payments",
      "summary": "Visa developer documentation for merchants and infrastructure providers. It presents the Trusted Agent Protocol as a verifiable cryptographic standard for recognizing Visa-approved AI agents.",
      "tags": [
        "card-networks",
        "identity",
        "security"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20261012112504/https://developer.visa.com/capabilities/trusted-agent-protocol/overview"
    },
    {
      "id": "rfc-9421-http-message-signatures",
      "title": "RFC 9421: HTTP Message Signatures",
      "publisher": "IETF",
      "authors": [
        "A. Backman",
        "J. Richer",
        "M. Sporny"
      ],
      "date_published": null,
      "url": "https://datatracker.ietf.org/doc/html/rfc9421",
      "type": "spec",
      "category": "agent-protocols",
      "summary": "IETF Proposed Standard defining how to create, encode and verify digital signatures over components of HTTP messages. It can serve as a building block for authenticating automated clients. Published February 2024 (no day given, so date_published is null).",
      "tags": [
        "identity",
        "security",
        "http"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20261006063814/https://datatracker.ietf.org/doc/html/rfc9421"
    },
    {
      "id": "rfc-9728-oauth-protected-resource-metadata",
      "title": "RFC 9728: OAuth 2.0 Protected Resource Metadata",
      "publisher": "IETF",
      "authors": [
        "M.B. Jones",
        "P. Hunt",
        "A. Parecki"
      ],
      "date_published": null,
      "url": "https://www.rfc-editor.org/rfc/rfc9728",
      "type": "spec",
      "category": "agent-protocols",
      "summary": "Standards-track RFC (April 2025) defining metadata that a protected resource publishes so clients can learn how to obtain tokens for it. Remote MCP authorization relies on it.",
      "tags": [
        "identity",
        "security",
        "standards",
        "mcp"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20260427180635/https://www.rfc-editor.org/rfc/rfc9728"
    },
    {
      "id": "glama-mcp-servers",
      "title": "Glama MCP server directory",
      "publisher": "Glama",
      "authors": [],
      "date_published": null,
      "url": "https://glama.ai/mcp/servers",
      "type": "directory",
      "category": "agent-protocols",
      "summary": "Large MCP server and remote connector directory, described as a superset of the official MCP Registry. Each server is scanned and scored, and the directory has a public REST API with OpenAPI and an RFC 9727 api-catalog.",
      "tags": [
        "mcp",
        "directory",
        "security"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20261010122735/https://glama.ai/mcp/servers"
    },
    {
      "id": "ietf-webbotauth-httpsig-protocol",
      "title": "HTTP Message Signatures for automated traffic (draft-ietf-webbotauth-httpsig-protocol-00)",
      "publisher": "IETF Datatracker",
      "authors": [
        "Thibault Meunier",
        "Sandor Major"
      ],
      "date_published": "2026-09-01",
      "url": "https://datatracker.ietf.org/doc/draft-ietf-webbotauth-httpsig-protocol/",
      "type": "spec",
      "category": "safety-security",
      "summary": "IETF working-group draft (Web Bot Auth) under which bots and agents identify themselves by signing requests with RFC 9421 HTTP Message Signatures, with keys discoverable from a published key directory. It replaces the earlier individual architecture draft.",
      "tags": [
        "identity",
        "security",
        "http",
        "web-agents"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20261004055551/https://datatracker.ietf.org/doc/draft-ietf-webbotauth-httpsig-protocol/"
    },
    {
      "id": "owasp-top-10-agentic-applications-2026",
      "title": "OWASP Top 10 for Agentic Applications for 2026",
      "publisher": "OWASP Gen AI Security Project",
      "authors": [],
      "date_published": "2025-12-10",
      "url": "https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/",
      "type": "report",
      "category": "safety-security",
      "summary": "Peer-reviewed framework, developed with more than 100 experts, identifying the most critical security risks facing autonomous and agentic AI systems.",
      "tags": [
        "owasp",
        "security",
        "agents"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20261016132319/https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/"
    },
    {
      "id": "nist-ai-rmf-1-0",
      "title": "Artificial Intelligence Risk Management Framework (AI RMF 1.0)",
      "publisher": "NIST",
      "authors": [
        "Elham Tabassi"
      ],
      "date_published": "2023-01-26",
      "url": "https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-ai-rmf-10",
      "type": "spec",
      "category": "safety-security",
      "summary": "Voluntary, non-sector-specific NIST framework, developed as directed by the National Artificial Intelligence Initiative Act of 2020, to help organizations that design, develop, deploy or use AI systems manage AI risks and promote trustworthy, responsible AI.",
      "tags": [
        "ai-risk",
        "standards",
        "security"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20261005065247/https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-ai-rmf-10"
    },
    {
      "id": "owasp-top-10-llm-2025",
      "title": "OWASP Top 10 for LLM Applications (2025)",
      "publisher": "OWASP Gen AI Security Project",
      "authors": [],
      "date_published": null,
      "url": "https://genai.owasp.org/llm-top-10/",
      "type": "report",
      "category": "safety-security",
      "summary": "OWASP Gen AI Security Project list of top risks for LLM applications, 2025 edition (for example LLM01:2025 Prompt Injection), with the 2023-24 edition also linked.",
      "tags": [
        "owasp",
        "security",
        "prompt-injection"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20261016132319/https://genai.owasp.org/llm-top-10/"
    }
  ]
}