OpenAI, AWS, Cursor, GitHub and Microsoft have expressed support for Agent Plugin 1.0.0, a reusable portable package standard for expanding AI agents.

According to a recent report by The New Stack, Agent Plugin, led by agent infrastructure company Vercel, is a vendor-neutral open standard. It combines AI agent skills and MCP servers into a single deployable plugin that can be moved to other clients or runtime environments.

Jonathan Hefner (조너선 헤프너), a technical staff member at Vercel, explained in a blog post, "A plugin is a simple format that only needs a manifest file and a defined folder structure. The program that uses it decides installation and deployment, permission management and screen layout."

Developers can use agent plugins to connect agents to GitHub, Jira, Slack, Figma and cloud services, as well as payment services and map and weather APIs. Vercel said the standards process and technical decisions are fully open and no specific company dictates the direction.

Reactions are mixed. Grainger Van Veen (그레인저 판반) Madoori (마두리), a senior cloud platform engineer, said, "It only solved the easy problems, while the hard problems remain." He added, "If the same plugin runs on six clients, that means there are six times as many failure points for permission management, and the standard is pushing governance and permission management onto each client."

He also said, "Interoperability without trust and permission management is not a security architecture. It is just another channel for spreading bugs and excessive permissions."

By contrast, Edward Rothschild (에드워드 로스차일드), president and CTO of Edrnite, called it "an important advance that increases interoperability by reducing the friction that has stood in the way of enterprise AI adoption." Adam Dallul (애덤 달룰), founder of Empirio Labs AI, also welcomed the move, saying skills and MCP servers can now be packaged once and passed across Codex, ChatGPT, Cursor, Copilot, Kiro and VS Code. He also conveyed concerns that if useful features remain only in vendor-specific extension areas, the standard may be open only on the surface and the lock-in effect would merely shift elsewhere.

Agent Plugin 1.0.0 initially covers only two types: agent skills and MCP servers. Elements such as commands, hooks and the agent itself are still managed separately by each client.