# A2A server authentication

**URL:** <https://discuss.elastic.co/t/a2a-server-authentication/390030>\
**Category:** Kibana\
**Tags:** elastic-ai-assistant\
**Created:** [August 31, 2026, 5:06pm UTC](https://discuss.elastic.co/t/a2a-server-authentication/390030 "2026-08-31T17:06:16Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![venkatkumar229](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/venkatkumar229/32/104663_2.png) [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\
**Post date:** [August 31, 2026, 5:06pm UTC](https://discuss.elastic.co/t/a2a-server-authentication/390030/1 "2026-08-31T17:06:17Z")

</div>

Hi Team,

We have created a **Custom AI Agent in Elasticsearch** and are planning to access it from an external application through the **A2A (Agent-to-Agent) Server**.

Currently, we understand that authentication to the A2A Server/API can be done using **Basic Authentication with an API Key**.

We would like to understand whether it is possible to use **any alternative authentication mechanism** instead of Basic Auth/API Key when connecting to our Custom AI Agent externally through the A2A Server as in our prod env basic auth will not be accepted as per security concerns.

---

<div class="post-metadata">

**Author:** ![venkatkumar229](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/venkatkumar229/32/104663_2.png) [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\
**Post date:** [September 2, 2026, 5:03pm UTC](https://discuss.elastic.co/t/a2a-server-authentication/390030/2 "2026-09-02T17:03:35Z")

</div>

Hi Team,

Can anyone help me with this query.