CAIN-42 MCPGateAGENTIC AI 75 · #68
Bring-your-own-agent advertising
Yahoo DSP announced support for native agents, customer models and combinations connected through APIs or MCP.
Last reviewed 2026-11-11
Agentic AI 75 / #68
2026 status: Platform announcement · Category: Advertising
The 2026 development
Yahoo DSP announced support for native agents, customer models and combinations connected through APIs or MCP.
The governance gap
A customer-supplied agent on a platform is third-party code with budget authority. The platform needs a capability boundary, a sandbox and an audit trail that does not depend on the customer's own logging.
Where CAIN-42 fits: Moat 2 — Security-Context Continuity
Core question: Does authority survive every boundary? Identity, scope and delegation are carried across tools, agents, memories and systems.
Treat the customer agent as an untrusted workload: scoped credentials, a typed tool surface, a spend mandate and platform-side evidence.
How the wiring works
- Issue platform-scoped credentials per customer agent.
- Expose a typed tool surface, not a general API key.
- Bound spend and counterparties with a mandate.
- Keep platform-side evidence independent of the customer's logs.
What is real today
PROPOSED A design mapping only. No dedicated implementation exists yet; do not buy this as a finished control.
No Yahoo DSP or advertising API integration exists. This describes the boundary a platform would need.
| Component in this repository | What the module says it is |
|---|---|
cain/mcp_proxy.py | CAIN Trust Fabric - Universal MCP Transparent Interceptor & Proxy (Phase 2) |
cain/runtime/a2a.py | CAIN Sovereign — Agent-to-Agent Trust Fabric (Prompt 7, Phase 17). |
cain/argus/lease.py | CAIN ARGUS — the Autonomous Assurance Lease (Prompt 14, section 9). |
Descriptions are the first line of each module's own docstring, read without importing it. A module path is a pointer into this repository, not a hosted endpoint. Its existence is checked by the test suite; its status for this use is the label above.
Check it yourself
- Fire a live governed decision
/fabric/try - Fire a live decision through the CAIN-42 pipeline
/fabric/try— the same enforcement path every product sits behind.
Commercial package
| Offer | Third-Party Agent Review |
|---|---|
| Buyer | Ad platforms and enterprise marketing teams |
| Price (proposal) | Advisory from $10,000 |
| Bundle | Identity & Authority — Every agent, every delegation, every boundary. |
| Operator stream | Stream 8 of the 10-stream operator playbook |
CISO, IAM, platform security, agent-tool vendors is the bundle buyer. The entry offer for this bundle is Agent authority review; MCP/A2A boundary review; the range is $2,500–$7,500 per review; integration from $10,000. A price on this page is a proposal, not a validated rate, and no customer is claimed.
Buy this as a product or service
CAIN-A75-068 — Third-Party Agent Review DESIGN
A design-partner statement of work and architecture: authority boundaries, evidence points, and a build plan. No control is delivered and no integration is claimed.
Kind: Assessment · Price (proposal): Advisory from $10,000 · Lead time: 15 business days.
Open the product page · all 75 products
What this page does not claim
What this page is not. CAIN-42 is not affiliated with, endorsed by, integrated into, or shipped with the organisation named in the 2026 item. The item is public context; the page describes how CAIN-42 would govern that class of capability. No page here claims a customer, a partnership, a certification, a patent, or a production integration. Prices are proposals. Built by a three-person team.