Forward-deployed / Learning zone
Agentic AIa standalone module
Lesson 05

Multi-agent systems & protocols

TL;DR

Sometimes one loop isn't enough. The task is too big for one context window, too parallel for one worker, or needs specialists. Multi-agent systems answer with a few recurring topologies: an orchestrator delegating to subagents (the workhorse pattern), pipelines of specialists, and peer handoffs. The honest rule: multi-agent buys context isolation and parallelism, and pays in coordination overhead. Split poorly, a crowd of agents underperforms one good loop at many times the cost. On protocols: two matter today. MCP connects agents to tools. A2A aims to connect agents to each other, and it's real but early. The rest of the acronym soup on stack infographics is speculative, niche, or invented. Treat "the agent internet" as a research direction, not an install step.

🎯 For the AI PM

Why it matters — Multi-agent architectures are where agent budgets go to multiply. Token spend scales with agent count, and coordination failures are emergent — each agent behaves, but the system misbehaves. They're also the industry's favourite thing to oversell.

What it changes in your decisions — Demand the same justification for "add an agent" as for "add a service": a named bottleneck (context, parallelism, or specialization) that a single loop demonstrably can't clear. Architecture diagrams with six agents get the question "what did each one earn?"

Ask yourself — "Would one agent with better tools and cleaner context do this — and have we actually tried?"

Risk if ignored — A five-agent system that's slower, costlier, and less debuggable than the single agent it replaced. Teams adopt it because the diagram looked like an org chart, and org charts feel like progress.

The topologies

Multi-agent topologies

Context isolation and parallelism, paid for in coordination overhead

Split poorly, a crowd of agents underperforms one good loop at many times the cost.

Orchestrator–subagents — the workhorse
Orchestrator — owns the goal & integrates
Subagent: research A (own context)
Subagent: research B (own context)
Subagent: verify claims
Pipeline of specialists
Draft
→
Review / critique
→
Finalize
Peer handoff
Triage agent
hands off →
Billing specialist
or →
Tech-support specialist

Two disciplines keep any topology sane: structured handoffs (defined artifacts, not vibes), and someone owns the whole.

Two disciplines keep any topology sane. Structured handoffs: subagent briefs and returns are defined artifacts (task, constraints, expected output format), not vibes. Most multi-agent failures are really specification failures at the seams. Someone owns the whole: one place — orchestrator or human — is accountable for the integrated result, or you ship beautifully-done fragments that don't compose.

The protocol landscape, honestly

You've seen the infographics: eight layers, a "protocol layer" listing A2A, MCP, ACP, ANP, AGORA, TAP, OAP, FCP, AGP as if they were TCP/IP. Here's the reality check, worth internalizing because it inoculates you against a whole genre of hype:

One protocol family did arrive with real backing: agentic commerce. Google's AP2 (Agent Payments Protocol) and OpenAI/Stripe's ACP (Agentic Commerce Protocol, powering Instant Checkout inside ChatGPT) both shipped in late 2025 — mandates, payment credentials, and merchant integration for agents that buy things. It's early, but note what it validates: the money layer is exactly the transaction-cost territory that workflow capture says agents absorb. Watch this family more closely than the alphabet soup above.

Here's the strategic read: tool-to-agent standardization (MCP) succeeded because the problem was concrete and the payoff immediate. Agent-to-agent standardization is harder — it needs identity, trust, payments, and liability answers, not just message formats. So the "agent internet" arrives, if it does, the way the web did: unevenly, driven by a few killer use cases. Meanwhile, every external agent your agent talks to is an untrusted input source wearing a peer costume. The security lesson applies double at organization boundaries.

When to go multi-agent

A decision rule that survives contact with vendors:

  1. Start with one agent. Better tools, tighter prompts, and cleaner context fix most "we need more agents" symptoms.
  2. Add subagents when a bottleneck is named: context (isolate the messy subtask), parallelism (independent threads), or specialization (genuinely different tools/permissions — for example, only the deploy agent holds deploy credentials, which is a security win as much as an architecture one).
  3. Stop when coordination cost shows up — in the token bill, the latency, or the debugging sessions that now span four transcripts.

The industry name for the mature end of step 2 is agent chaining, or a "mixture of agent experts": specialized agents, each strong in one domain or task, composed into one system. It's a real pattern — serious coding and research agents are built this way today — but note what makes it work in practice. The specialists earn their place by owning different tools, permissions, or context, not by having a different adjective in their prompt.

Failure modes

Practitioner checklist