Back to catalog / Agent interoperability
Limit context and tool scope visible to a remote agent
Define fields and delegation scope before calling a remote agent and validate its response locally.
Goal
Send an external agent only the content needed for its subtask instead of forwarding the full user history.
Steps
- Read the remote agent card and choose a suitable bounded subtask. [a2a]
- Use
A2aRemoteAgentConfigrequest interceptors to filter outbound content and validate response size and fields. [a2a] - Validate response type and size and retain provenance and request correlation IDs. [a2a]
- Treat remote content as untrusted before returning it to the local agent; require evidence or review where needed. [a2a]
How to verify
The outbound request contains no unauthorized context, responses are size-limited, and each maps to its remote call.
Troubleshooting
If the remote agent cannot complete the task, narrow the subtask or return locally; do not expand data access to improve success.
Permissions
Prerequisites
- Python 3.11+, google-adk compatible with the pinned revision, and an isolated test environment
- Configured model-provider credentials for live inference; never place them in code or logs
Permissions
- Use authorized test data only; isolate sessions and credentials per user; obtain human authorization before external side effects
Limitations
This procedure follows Google ADK at the pinned revision; other versions, models, or remote services may differ in APIs and event semantics. Recheck permissions, retention, and recovery before production.
Pinned upstream source
- Repository
- google/adk-python
- File path
- docs/guides/a2a/agent/config/index.md
- Pinned commit
e9b74d36140f2594b24c481fb7a3825b2cb01e96- Source checked
- 2026-10-14 · Reviewed against the pinned upstream source
Repository metrics
These values describe the upstream repository, not popularity or likes for an individual skill or playbook.
- Stars
- Not collected
- Forks
- Not collected
- Observed at
- Not collected
No metrics snapshot is available yet.
License: Apache-2.0
Main topic
Make Agent behavior safer and easier to verify