Loading…
2026 September 10-11 | Tokyo, Japan
View More Details & Registration

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.
arrow_back View All Dates
Thursday, September 10
 

08:00 JST

Registration & Badge Pick-Up
Thursday September 10, 2026 08:00 - 18:30 JST

Thursday September 10, 2026 08:00 - 18:30 JST
B1F Foyer (Outside Hall C)

09:00 JST

Keynote: Welcome - Angie Jones, Vice President of Developer Experience, Agentic AI Foundation
Thursday September 10, 2026 09:00 - 09:05 JST
___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Angie Jones

Angie Jones

Vice President, Agentic AI Foundation

Thursday September 10, 2026 09:00 - 09:05 JST
Hall C
  Keynote Sessions

09:05 JST

Keynote: Opening Remarks - Mazin Gilbert, Executive Director, The Agentic AI Foundation
Thursday September 10, 2026 09:05 - 09:10 JST
___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Mazin Gilbert

Mazin Gilbert

Executive Director, AAIF, The Linux Foundation
Mazin Gilbert is the Executive Director of the Agentic AI Foundation, part of the Linux Foundation. An IEEE Fellow with a Ph.D. in Artificial Intelligence and a Wharton MBA, Mazin brings 25+ years of experience driving AI innovation from research to global-scale deployment. His career... Read More →
Thursday September 10, 2026 09:05 - 09:10 JST
Hall C
  Keynote Sessions

09:10 JST

Keynote: MCP and the Era of Connectivity - David Soria Parra, Co-creator of MCP, Anthropic
Thursday September 10, 2026 09:10 - 09:20 JST
David will discuss the need for connectivity in an era of increasing AI capabilities. Open standards like MCP are at the heart of the AI revolution and the increased ability of models to reach out into the world. We discuss the last two years of MCP and look into the future of connectivity standards in the industry.
___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for David Soria Parra

David Soria Parra

Co-creator, Model Context Protocol (MCP), Anthropic
I am the co-creator of the Model Context Protocol (Modelcontextprotocol.io) and a Member of Technical Staff at Anthropic working on a wide variety of things. Formerly a senior manager at Facebook working on static analysis and simulation based testing. I was responsible of integrating... Read More →
Thursday September 10, 2026 09:10 - 09:20 JST
Hall C
  Keynote Sessions
  • Audience Level Any
  • Presentation Language English

09:20 JST

Keynote: Every AI Agent Needs a Gateway - Lin Sun, Head of Open Source, Solo.io
Thursday September 10, 2026 09:20 - 09:30 JST
AI agents are rapidly evolving from chatbots into autonomous systems that use tools, collaborate with other agents, and interact with enterprise data. But as their capabilities grow, so do the operational challenges. How do you know which agent consumed your AI tokens? Which tools were invoked? How do you govern, secure, and observe agent behavior across an increasingly complex ecosystem?

In this demo-driven keynote, Lin invites the audience to become part of a live agent experience, where her AI agent orchestrates multiple services and MCP tools to transform the audience in an unexpected way. Throughout the demo, every request flows through agentgateway, showcasing how an AI gateway enables secure access to MCP servers, intelligent traffic mediation, policy enforcement, cost attribution, and end-to-end observability for production-ready agentic systems.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Lin Sun

Lin Sun

Head of Open Source, Solo.io
Lin is the Head of Open Source at Solo.io, co-chair of KubeCon + CloudNatibeCon 2026. She actively contributes to AAIF and CNCF projects. She is the author of “Sidecar-less Istio Explained” and “AI Agents in Kubernetes”, and holds more than 200 patents.
Thursday September 10, 2026 09:20 - 09:30 JST
Hall C
  Keynote Sessions
  • Audience Level Any
  • Presentation Language English

09:35 JST

Keynote: The State and Future of A2A - Kaz Sato, Staff Developer Advocate, Cloud AI, Google
Thursday September 10, 2026 09:35 - 09:45 JST
As organizations build more capable agents, those agents will need a common way to communicate and work together across frameworks, vendors, and platforms. This keynote examines the current state of A2A, the problems it is designed to solve, and where the project is headed. We'll also see A2A in action through a production multi-agent system, including what happens when one of its agents is compromised.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Kaz Sato

Kaz Sato

Staff Developer Advocate, Cloud AI, Google
Kaz Sato, a Staff Developer Advocate from the Cloud AI team, has authored over 25 ML/AI blogs and demos for Google Cloud's official blog. His work has garnered attention from Jeff Dean and Eric Schmidt, and been featured in Newsweek and The New Yorker. He's a regular speaker at Google... Read More →
Thursday September 10, 2026 09:35 - 09:45 JST
Hall C
  Keynote Sessions
  • Audience Level Any
  • Presentation Language English
  • Presentation Slides Attached Yes

09:45 JST

Coffee Break
Thursday September 10, 2026 09:45 - 10:15 JST

Thursday September 10, 2026 09:45 - 10:15 JST
Hall A

09:45 JST

Solutions Showcase
Thursday September 10, 2026 09:45 - 19:00 JST

Thursday September 10, 2026 09:45 - 19:00 JST
Hall A

10:15 JST

Towards Trustworthy Autonomous Research - Wataru Kumagai, NexaScience/RIKEN
Thursday September 10, 2026 10:15 - 10:40 JST
Automating scientific research is one of the most important uses of AI agents, and as agents grow more autonomous, it is quickly becoming realistic. We can already let an agent run research that takes hours or even days.
The main challenge is not whether the agent finishes, but how much we can trust the results it reports. A result that looks successful may come from a misunderstood setup or a manipulated metric. Checking it by hand is hard, and asking another agent to check it only moves the problem one step further.
Being too strict is also risky. A good idea does not always give results quickly, and it is easy to find reasons to call a result a failure. A system that rejects too easily throws away promising research, while ideas that lead nowhere should be stopped early. Balancing proper rejection and reliable acceptance is the hardest part of automated research.
Based on my experience running agentic research-automation systems, I will explain how these problems appear in long-running tasks and the approaches we are developing to keep research reliable.
You will leave with a practical framework for trusting and using long-running autonomous agents in research and beyond.

___________________________
Presentation Language: Japanese

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Wataru Kumagai

Wataru Kumagai

Chief Research Officer / Senior Research Scientist, NexaScience / RIKEN
Wataru Kumagai is Chief Research Officer at NexaScience, a Japanese AI startup building agent execution infrastructure, and a Senior Research Scientist at RIKEN. He works on automating the machine learning research pipeline with multi-agent systems. His interests center on the reliability... Read More →
Thursday September 10, 2026 10:15 - 10:40 JST
Hall C
  Building Reliable Agent Systems

10:15 JST

Beyond Adoption: From Access Control to Execution Control in Enterprise MCP - Tomomichi Noguchi, Workato
Thursday September 10, 2026 10:15 - 10:40 JST
MCP makes it easier for AI agents to connect to enterprise systems, but moving from experimentation to production raises a deeper question: is controlling what an agent can access enough? An agent may have permission to update customer data, but that doesn't mean every authorized action should be executed in the same way.

This talk introduces the distinction between Access Control — what an agent is allowed to do — and Execution Control — how an authorized request should actually be carried out. We'll explore how mechanisms such as business rules, deterministic logic, and auditability, among others, can work together behind MCP tools to shape how execution happens in the enterprise.

The goal is to provide a practical architectural lens for teams taking MCP beyond adoption and into production: enterprise trust requires controlling not only what agents can access, but how their actions are executed.

___________________________
Presentation Language: Japanese

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Tomomichi Noguchi

Tomomichi Noguchi

Forward Deployed Engineering Lead, Japan, Workato
Noguchi leads Technical Services and Forward Deployed Engineering at Workato Japan, where he works with enterprise customers to turn automation and AI initiatives into scalable, production-ready programs.
Thursday September 10, 2026 10:15 - 10:40 JST
Hall B

10:15 JST

Stateless MCP: Inside the 2026 Transport Spec - Himanshu Sangshetti, Mem0
Thursday September 10, 2026 10:15 - 10:40 JST
Most MCP servers in production today are stateful- each client session is pinned to one server instance.

That works on a single node. Add a load balancer and scale horizontally, and sessions start breaking: Kubernetes routes a request to the wrong pod, a Fargate deployment rolls and drops active connections, and NGINX or AWS ALB need special configuration just to keep the server reachable.

The 2026 spec release candidate, locked May 21, fixes this at the transport layer through three SEPs.
- SEP-1442 removes the mandatory init handshake so negotiation folds into the first request.
- SEP-2322 makes elicitation stateless.
- SEP-2243 mirrors routing data into HTTP headers so load balancers can route without parsing the payload.

This session covers what each SEP changes, what breaks in the server you run today, and what to refactor before the spec ships. I'll also show how we externalize session state at Mem0, so a stateless server keeps the memory and context a real agent needs.

You'll leave with a migration checklist and an architecture for stateless-first MCP.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Himanshu Sangshetti

Himanshu Sangshetti

Member of Technical Staff (MTS), Mem0
Himanshu Sangshetti is an MTS at Mem0 (60k+ Github stars).

With a background in AI, cloud, and DevOps, he builds the memory layer for AI agents and helps engineers design and operate them in production.

An AWS Community Builder, HashiCorp Ambassador, and former AWS Cloud Capt... Read More →
Thursday September 10, 2026 10:15 - 10:40 JST
Hall 1F
  MCPCon

10:50 JST

CrabRAG: Why Automated Assistants Need Graph Memory, Not More Tokens - Stephen Chin, Neo4j
Thursday September 10, 2026 10:50 - 11:15 JST
Autonomous assistants are easy to demo and hard to make reliable. The problem is usually not tool access. It is memory.

Most assistant architectures still treat memory as a chat log plus vector retrieval. That is fine for document question answering, but it breaks down when the assistant must connect conversations, people, tools, and decisions across multiple tool iterations. For an AI engineer, a single request can depend on a Slack thread, a GitHub PR, a failed CI run, a calendar event, and prior operating preferences or constraints. These are not isolated pieces of context. They form a connected state that changes as work progresses and context grows.

In this talk, I’ll show why knowledge graphs, context graphs, and GraphRAG provide a better foundation for OpenClaw-style assistants. Knowledge graphs capture durable entities and relationships. Context graphs capture the operational layer assistants usually lose, including actions, decision traces, provenance, and recency. GraphRAG turns that structure into task-time context by combining graph traversal, semantic retrieval, and tool use.

Attendees will leave with practical patterns for schema design, retrieval routing, and evaluation, plus a concrete blueprint for assistants that remember more than the last prompt and retrieve more than the nearest chunk.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Stephen Chin

Stephen Chin

VP of Developer Relations, Neo4j
Stephen Chin is VP of Developer Relations at Neo4j, conference chair of the LF AI & Data Foundation, and author of numerous titles including the upcoming GraphRAG: The Definitive Guide for O'Reilly. He has given keynotes and main stage talks at numerous conferences around the world... Read More →
Thursday September 10, 2026 10:50 - 11:15 JST
Hall 1F
  Agentic Engineering
  • Audience Level Any
  • Presentation Language English

10:50 JST

Let AGENTS.md Write Itself: Self-Improving Coding Agents, No RL Required! - Rudraksh Karpe, Simplismart; Satyam Soni, NitroStack
Thursday September 10, 2026 10:50 - 11:15 JST
AGENTS.md is the file that tells any coding agent how to work in your repo. One open AAIF standard, read by Codex, Cursor, Claude Code, and goose. But it is static. Written once, by hand. It drifts as the code moves. Auto-generate it and agents often get worse, following bloated rules and chasing dead paths. The agent fails the same way every run. Nothing feeds those failures back. The text that drives it never learns.

This talk show how to fix that with a layer on top of AGENTS.md that tunes it from the agent's own runs.The loop is small. Run a task. Reflect on the trajectory in plain language. Find what broke. Propose one targeted edit. Validate it against an eval harness before it sticks. Reflect, mutate, validate, select. Borrowed from reflective optimizers like GEPA. No RL. No fine-tuning. Just an agent learning from its mistakes.

The layer is tool-agnostic because AGENTS.md is, and it extends to MCP tool selection. We measure what moved, task success, edits per gain, token cost, regressions on a held-out set. We beat hand-written and auto-generated files. You leave with a layer you drop onto the AGENTS.md you already have.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Satyam Soni

Satyam Soni

Developer Advocate, NitroStack
Satyam is a Software Developer working at the intersection of AI and cloud-native technologies. He is a former member of the Kubernetes release team, serving as Release Notes Lead for v1.32, with experience in release engineering and a Google Summer of Code contributor at openSUS... Read More →
avatar for Rudraksh Karpe

Rudraksh Karpe

Forward Deployed Engineer, Simplismart
Rudraksh is an FDE and AI Inference Engineer at Simplismart, where he builds high-performance AI inference systems. He previously worked as an AI Engineer at ZS Associates.

He is a two-time Google Summer of Code participant with openSUSE and a GSoC 2026 mentor. He has spoken internationally at KubeCon EU, PyTorch Conference EU, OpenSearch Korea, PyCon US, PyCon JP, openSUSE Conference Germany, and openSUSE Asia Summit Tokyo, covering GenAI, open source... Read More →
Thursday September 10, 2026 10:50 - 11:15 JST
Hall C
  Building Reliable Agent Systems
  • Audience Level Any
  • Presentation Language English

10:50 JST

Workshop: Building MCP Authorization with Keycloak and agentgateway - Yoshiyuki Tabata & Michito Okai, Hitachi
Thursday September 10, 2026 10:50 - 12:25 JST
As AI agents move from experimentation to production, authorization is becoming a core architectural concern. The MCP Authorization specification provides a standardized approach for protecting MCP resources and obtaining access tokens, but many developers have not yet seen these mechanisms in action.

In this hands-on workshop, participants will build a secure MCP environment using Keycloak, agentgateway, and MCP Inspector. Starting from an MCP server where all tools are publicly accessible, attendees will progressively introduce authorization controls using Keycloak and agentgateway, and observe how access to MCP tools changes.

Participants will use MCP Inspector to follow authorization flows step by step, including resource discovery, authorization server discovery, user authentication, token acquisition, authorization failures, and authorized tool invocation.

The workshop also explores Step-Up Authorization scenarios introduced in the latest MCP Authorization specification.

By the end of the session, participants will have a working MCP Authorization environment and practical experience securing MCP-based AI agent systems.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Yoshiyuki Tabata

Yoshiyuki Tabata

Chief OSS Consultant, Hitachi
Yoshiyuki Tabata is a Chief OSS Consultant at Hitachi OSPO with more than a decade of experience in identity and access management (IAM), authentication, authorization, and API security. He is a contributor to Keycloak, a co-author of the CNCF IAM Whitepaper, and serves as Tech Lead... Read More →
avatar for Michito Okai

Michito Okai

Software Engineer, Hitachi, Ltd.

Thursday September 10, 2026 10:50 - 12:25 JST
Hall B
  Workshop
  • Presentation Language English
  • Presentation Slides Attached Yes

11:25 JST

Carbon-Aware Agentic Engineering: Reducing Unnecessary Computation in AI Agent Workflows - Kouki Hama, NTT, Inc
Thursday September 10, 2026 11:25 - 11:50 JST
From a green software perspective, waste in agentic AI comes not only from model choice, but also from workflow design. Agent workflows combine planning, retrieval, retries, memory, tools, and model calls. Poor controls can lead to large models for simple tasks, long histories, repeated retrieval, or needless tool calls, increasing compute, cost, and latency.

This talk presents a design-review approach for reducing unnecessary computation in agent workflows. As a case study, it uses Lean Agentic AI (https://github.com/navveenb/lean-agentic-ai) as an open-source workflow example. For each workflow step, it asks: Is an LLM needed? Is the model appropriate? Is context bounded? Could code, rules, or a smaller model replace a large-model call?

The goal is not precise carbon accounting. Instead, it identifies avoidable inference, oversized context, and needless tool calls before estimating CO2 emissions.

Takeaways:
* See how agent workflow design affects compute, cost, and latency.
* Understand how reducing unnecessary computation supports green software goals.
* Ask simple review questions to reduce unnecessary LLM calls, retrieval, memory, and tool use.

___________________________
Presentation Language: English
Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Kouki Hama

Kouki Hama

Senior Research Engineer, NTT, Inc
Kouki Hama is a Senior Research Engineer at NTT, Inc., Computer & Data Science Laboratories. His research focuses on green software engineering and software supply chain assurance, including CI/CD, GreenOps, FinOps, Software Carbon Intensity, and SBOM-based governance. As personal... Read More →
Thursday September 10, 2026 11:25 - 11:50 JST
Hall C
  Agentic Engineering

11:25 JST

MCP 2026-07-28 Under the Microscope: Security Implications for Stateless Agents - Thejes sree Satheesh kumar, Thoughtworks & Srinivasan Sekar, TestMu AI
Thursday September 10, 2026 11:25 - 11:50 JST
The MCP 2026-07-28 release candidate introduces a major shift in how agents connect, authenticate and manage state. With a stateless protocol core, first-class extensions and hardened authorization, the new spec improves scalability and interoperability, but it also changes the security model in ways that many builders may not fully anticipate. In this talk, I will examine the release candidate through a defender’s lens and highlight the practical risks that emerge when session state disappears, trust boundaries move and extension-based flexibility expands the attack surface. I will discuss failure modes such as broken state assumptions, capability confusion, unsafe cross-client behavior, and authorization mistakes in real deployments. The session will also cover concrete hardening patterns for secure MCP adoption, including least-privilege tool design, explicit state handling, authorization scoping, telemetry and rollout validation. Attendees will leave with a practical checklist for evaluating stateless MCP systems and defending agent runtimes in production.

___________________________
Presentation Language: English
Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Thejes sree Satheesh kumar

Thejes sree Satheesh kumar

Quality Analyst, MCP and AI Security Researcher, Thoughtworks
Thejes Sree Satheesh Kumar (she/her) is a Quality Analyst – Consultant at ThoughtWorks specializing in application and AI security testing. A CEH, CompTIA Security+ professional, With a strong background in automation testing (like Playwright), she combines quality engineering and... Read More →
avatar for Srinivasan Sekar

Srinivasan Sekar

Director of Engineering, TestMu AI
Srinivasan Sekar is a Director of Engineering at TestMu AI (formerly LambdaTest). He loves contributing to Open Source. He is an Appium Member and Contributor to various open-source repositories like Selenium, Webdriver.io, taiko, etc. He worked extensively on testing various Microservices... Read More →
Thursday September 10, 2026 11:25 - 11:50 JST
Hall 1F
  MCPCon

12:00 JST

Letting an Agent Upgrade Production Kubernetes — Without Getting Paged at 3 AM - Sanskar Agrawalla & Abhijeet Chaudhuri, Quartic.ai
Thursday September 10, 2026 12:00 - 12:25 JST
Kubernetes upgrades are high-stakes, deprecation-laden, and still mostly manual — most "AI for K8s upgrades" projects stop at a feasibility check. We went further: we built an agentic system that planned and executed a real cluster upgrade end to end, and in this talk we walk through exactly how it went, with the steps, evidence, and screenshots from our actual runs.


We'll break down the architecture we shipped — a planner → executor → verifier loop, deprecated-API and CRD/Helm compatibility analysis run before anything touched the cluster, a human-in-the-loop approval gate for irreversible steps, and health-gated automatic rollback. Using captured logs and screenshots, we'll show a real multi-node upgrade as it happened, the failure cases that nearly broke it (version skew, stuck drains, webhook deadlocks), and the decisions we deliberately refused to let the model make.

You leave with an open-source blueprint for autonomous infra agents with production-grade guardrails — plus real numbers on success rate, time saved, preflight catches, and rollbacks triggered.

___________________________
Presentation Language: English
Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Sanskar Agrawalla

Sanskar Agrawalla

Site Reliability Engineer, Quartic.ai
👋 Site Reliability Engineer at Quartic.ai | Tech Enthusiast

Hey there! I'm a Site Reliability Engineer with a passion for building impactful solutions. Currently, I'm working on cutting-edge projects that drive innovation. From enhancing monitoring processes to optimizing infrastructure, I'm all about crafting efficient and secure systems... Read More →
avatar for Abhijeet Chaudhuri

Abhijeet Chaudhuri

Site Reliability Engineer, Quartic.ai
Site Reliability Engineer who runs a production distributed system on Kubernetes — Kafka, Spark, Airflow, and a fleet of edge devices — where long-running operations are a daily reality, having experience in implementing scalable cloud-native solutions across Kubernetes, AWS... Read More →
Thursday September 10, 2026 12:00 - 12:25 JST
Hall C
  Building Reliable Agent Systems
  • Audience Level Any
  • Presentation Language English
  • Presentation Slides Attached Yes

12:00 JST

Sponsored Session: Same Prompt, Different Agent: Building an Assembly Line for Agents - Kan Wang, Raytone
Thursday September 10, 2026 12:00 - 12:25 JST
Run the same prompt twice and you get two different agents. Both work. Neither is the same. If you ship agents to customers rather than demos, this is a failure mode you already know, and it is why agent work has not industrialized.

Today's AI coding is 3D printing: brilliant for one-offs, unreliable at scale. Assembly is the alternative, and agents have finally converged enough to make it possible. They have a bill of materials: model, harness, interface layer, state, tool integrations. Open source ships every part. Nobody ships the guarantee that two of them work together.

You will leave with the six-station line we run, why moving the model from author to assembler cuts variance and token spend at the same time, the compatibility matrix we maintain, and the list of component pairs that deadlock, which is the part almost nobody publishes.

We will also name what assembly does not fix, and where reproducibility stops being enough.


In order to facilitate networking and business relationships at the event, you may choose to visit a third party's booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies. 

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Kan Wang

Kan Wang

Co-Founder, Raytone
Kan leads international Token business development at Raytone, with over 11 years of experience in global cloud services, AI data, and enterprise technology partnerships. He previously worked in Business Strategy and Innovation at ByteDance, developing international business models... Read More →
Thursday September 10, 2026 12:00 - 12:25 JST
Hall 1F
  Building Reliable Agent Systems
  • Audience Level Any
  • Presentation Language English
  • Presentation Slides Attached Yes

12:25 JST

Lunch (Provided Onsite)
Thursday September 10, 2026 12:25 - 13:30 JST

Thursday September 10, 2026 12:25 - 13:30 JST
Hall A

13:00 JST

Sponsor Activity - 100 Free Raytone Studio Pro Accounts: Turn Natural-Language Requests into Project Deliverables
Thursday September 10, 2026 13:00 - 13:10 JST
Raytone Studio is a web agent and complete workbench that understands requests, runs tasks, generates files, previews results, and archives deliveries. The first 100 to sign up at our booth receive a free Studio Pro account. Additional giveaways throughout the event include free GLM Coding Plans and Studio Pro accounts.

Sponsor: Raytone
Location: Solutions Showcase in Hall A



In order to facilitate networking and business relationships at the event, you may choose to visit a third party's booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies. 
Thursday September 10, 2026 13:00 - 13:10 JST
Hall A

13:30 JST

Designing Trust Boundaries for Agent-to-Agent Systems: Lessons Learned from a Technical PoC - Ryuji Iijima, Softbank Corp.
Thursday September 10, 2026 13:30 - 13:55 JST
As AI agents increasingly invoke tools, access enterprise data, and collaborate, a new architectural challenge emerges: Where should trust boundaries be defined, and where should governance and security controls be enforced?

To explore this, we conducted a technical PoC introducing a shared control layer across agent-to-agent communications and tool execution pathways. Rather than presenting an ideal architecture, this session focuses on practical challenges and lessons learned during implementation.

Key topics include:
- Defining the "Agent": How to define what constitutes an agent in an ecosystem and where to establish trust boundaries for validation, monitoring, and control
- Architectural Insights: Redesign considerations and insights that emerged through prototype development and PoC activities.
- Performance Trade-offs: Balancing stronger security and governance with the low-latency requirements needed for real-world deployment.

We will share practical takeaways on designing trust boundaries and navigating trade-offs among security, governance, and operational performance.

___________________________
Presentation Language: Japanese

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Ryuji Iijima

Ryuji Iijima

Engineer, AgentSecOps Platform Initiative, SoftBank Corp.
An engineer with experience in mobile authentication, enterprise communications, data integration platforms, and AI security. He is interested in how trust can be established, maintained, and governed across complex distributed systems. His current work focuses on AI agent ecosystems... Read More →
Thursday September 10, 2026 13:30 - 13:55 JST
Hall C
  Building Reliable Agent Systems
  • Presentation Language Japanese
  • Presentation Slides Attached Yes

13:30 JST

Do Tools Still Matter? MCP Tool Design in the Age of Code Mode - Ruben Casas, Postman
Thursday September 10, 2026 13:30 - 13:55 JST
The first wave of MCP adoption was defined by abundance. Every API endpoint became a tool, every workflow became a collection of tool calls, and many servers exposed hundreds of operations directly to agents. It worked, but at a cost: bloated context windows, slower tool selection, and increasingly unreliable agent behaviour.

But then Code Mode appeared!

With approaches Code Mode agents can search an API surface, generate code, and interact with services directly. If models can consume entire APIs and write code to acomplish a task, does tool design still matter?

In this talk, we'll compare three approaches to agent tooling: curated workflow-oriented tools, tool discovery and search, and Code Mode's search-and-execute model. Using real-world examples, benchmarks, and evals, we'll explore the trade-offs in reliability, latency, token usage, and task success.

Attendees will leave with a practical framework for deciding when to consolidate tools, when to expose APIs, and whether the future of MCP is better tools or fewer tools altogether.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Ruben Casas

Ruben Casas

Staff Engineer, Postman
Ruben Casas is a Google Developer Expert and Staff Engineer at Postman. He builds developer tooling, AI agents, and MCP apps, and writes about frontend architecture at scale and AI. Ruben is a podcast guest and has spoken at major conferences, sharing insights from large-scale migrations... Read More →
Thursday September 10, 2026 13:30 - 13:55 JST
Hall 1F
  MCPCon

13:30 JST

Workshop: Governing AI Agent Actions: MCP and Beyond - Shannon Williams & Chris Urwin, Obot AI
Thursday September 10, 2026 13:30 - 15:05 JST
Enterprise adoption of the Model Context Protocol is accelerating, and MCP has become the primary way agents connect to enterprise tools and data. But MCP is only part of how agents act. Agents also run CLIs, execute Skills, and generate code that calls APIs directly. Governing MCP well matters. Governing everything else agents can do matters just as much.

Building MCP servers and writing Skills isn't particularly hard. The real challenges are deciding which actions agents are allowed to take, controlling who can take them, and proving it all later. These are architectural questions, and they need answers before agents scale across an organization.

In this workshop, we will:
  1. Show how to control agent actions with policies that apply across MCP servers, CLIs, Skills, and agent-generated code — including allowlists, access control by users and groups, and human-in-the-loop approvals.
  2. Explain why enterprises need managed registries for MCP servers and Skills, and how admin review and approval change the trust model.
  3. Work through audit and compliance requirements: capturing complete logs of agent and tool activity, exporting to enterprise storage, and generating reports.
  4. ⁠Demonstrate how to discover shadow AI — unmanaged agents, MCPs, and Skills already running in your organization — and how to block them or bring them under management.
  5. Look at token usage and spend visibility by agent, user, and group.

You'll leave with a clear picture of the architectural decisions ahead of you, and a better sense of what your security team will require before signing off on scaling AI agents across your organization.

___________________________
Presentation Language: English
Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Shannon Williams

Shannon Williams

President, Obot AI
I am the President and co-founder of Obot AI, and have been building open source software for the last 20 years. Prior to starting Obot, I co-founded Cloud.com (creator of CloudStack) and Rancher Labs (creator of Rancher, k3s, Longhorn, etc). I was a board member of the CNCF for 4... Read More →
avatar for Chris Urwin

Chris Urwin

VP of Field Engineering, Obot AI
Chris Urwin is VP of Field Engineering at Obot AI and a veteran engineering leader. With deep hands-on experience in cloud‑native platforms, Kubernetes, containers, CI/CD, and developer tooling, he builds and scales global technical teams. Chris bridges product, engineering, and... Read More →
Thursday September 10, 2026 13:30 - 15:05 JST
Hall B
  Workshop

14:05 JST

The Agent Builder Loop from Daily Work to OSS - Minoru Onda, KDDI Agile Development Center Corporation
Thursday September 10, 2026 14:05 - 14:30 JST
AI agent discussions often focus on coding or MCP. My starting point is different. I use coding agents such as Claude Code and Codex as assistants for work beyond development. Instead of automating isolated tasks, I keep them beside me as a secretary and knowledge platform for routine operations, speaking requests, internal coordination, slide preparation, and customer-facing project delivery.

That daily use reveals agent-worthy problems. With Markdown, Git, Google Workspace, and MCP in the loop, work becomes context an agent can read, improve, and hand back. I then turn those problems into agents I build, deploy, review, and operate myself.

I will cover Vibe Presales, my term for turning a customer's concerns, constraints, and reactions in a presales conversation into a working demo while the context is fresh. I will also share lessons from a PowerPoint-building agent, including design, deployment, review, and output quality for real slide and proposal work.

These lessons become OSS code, articles, books, and hands-on material. Attendees leave with a loop for living with agents at work, building reliable systems, and sharing reusable lessons.

___________________________
Presentation Language: English
Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Minoru Onda

Minoru Onda

KDDI Agile Development Center Corporation
Technology Evangelist, KDDI Agile Development Center Corporation
Thursday September 10, 2026 14:05 - 14:30 JST
Hall C
  Building Reliable Agent Systems

14:05 JST

Who Owns the Agentic Loop? - Angie Jones, Agentic AI Foundation
Thursday September 10, 2026 14:05 - 14:30 JST
A customer is due a refund. The support agent sends 10x the amount that was due. Who is at fault? Was it the team that set the rules, the runtime that managed the loop, the model that chose the action, or the tool that carried it out?

In this agentic whodunit, we'll follow the evidence through one failed run and uncover where the mistake happened. Solving the case raises a harder question. Who owns the outcome when an agent acts on your behalf?

We'll examine the agentic loop as the unit of ownership, from the runtime and model to the tools, data, and control plane around them. You'll learn what teams need at each layer to inspect what happened, constrain what can happen, and change the system when it no longer meets their needs. Along the way, we'll see how open source infrastructure gives teams the access they need to own the full path from decision to action.

___________________________
Presentation Language: English
Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Angie Jones

Angie Jones

Vice President, Agentic AI Foundation

Thursday September 10, 2026 14:05 - 14:30 JST
Hall 1F

14:40 JST

What Happens When Your MCP Tools Cost Money? - Prakash Rao, AIG Technologies & Marco González, Red Hat
Thursday September 10, 2026 14:40 - 15:05 JST
What happens when an AI agent has to pay for its tools? Today, nobody knows. Open-source MCP servers run for free, and their maintainers quietly absorb the cost. The x402 protocol changes the model: a server can charge a small payment for each tool call, with no accounts or API keys needed. The plumbing works. The open question is how agents behave once tools have a price.

We put it to the test. We built a paid MCP server on Cloud and ran it end to end, live, settling real payments on a public testnet. We put the agent behind an identity provider and a policy gateway, to see what a paid tool call has to carry before anyone would run one in production. We gave the same work to two competing vendors to see who really decides which one gets bought. And we varied the system prompt, to see how much of a model's spending behaviour is a property of its instructions rather than of the request.

The result is practical guidance for maintainers: how to price a call, where the payment flow breaks, which model behaviours to expect, and whether per-call payments can realistically fund an open-source MCP server.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Prakash Rao

Prakash Rao

Principal Cloud Engineer, AIG Technologies
Prakash Rao is a Principal Cloud Engineer at AIG Technologies in Japan, designing Google Cloud infrastructure for financial services: hybrid connectivity, enterprise networking, and security architecture. His recent work includes deploying AI agents on Vertex AI Agent Engine and infrastructure... Read More →
avatar for Marco González

Marco González

Sr. Software Engineer, Red Hat
Senior Software Engineer at Red Hat with 13+ years of global experience in 3G, 4G, and 5G network integration. US patent creator and Telco Automation expert. 2026 AAIF ambassador and active CNCF Program Committee member and speaker at KubeCon, Kubedays, and CNCF events. Contributor... Read More →
Thursday September 10, 2026 14:40 - 15:05 JST
Hall 1F
  MCPCon

14:40 JST

The Production Gap: Why Governing Agent Traffic Is the Key To Shipping Multi-Agent Systems - Juhi Singh, Kong & Prithvi Raj, Mirantis
Thursday September 10, 2026 14:40 - 15:05 JST
Every team building agentic systems hits the same wall: the gap between a demo and a system you'd trust in production. Most assume it's an engineering problem. It isn't. It's a governance problem and governance in a multi-agent system isn't a policy document. It's the full data path.



We demonstrate a production-style multi-agent workflow where customer feedback flows through agents, MCP tools, GitHub integrations, and multiple LLM providers before triggering automated actions.



We show how cloud-native primitives govern every interaction: OpenTelemetry for distributed tracing across agent hops, OPA for declarative policy enforcement, API gateways for prompt injection protection and model routing, and Kubernetes for workload isolation.



The hardest part of running agents in production isn't the AI. It's the same problems Kubernetes solved for microservices, observability, traffic management, policy, workload isolation applied to a new class of workload the ecosystem is still learning to instrument.


___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.
Speakers
avatar for Juhi Singh

Juhi Singh

Developer Evangelist, Kong
Juhi is the Developer Evangelist (APAC) at Kong. She’s passionate about helping the developer community and building strong connections. Outside of work, Juhi enjoys reading, staying fit, trekking, traveling, and cooking. She describes herself as a "product of a community" with... Read More →
avatar for Prithvi Raj

Prithvi Raj

Senior Community Manager & Developer Advocate, Mirantis
Prithvi Raj is a Senior Community Manager & Developer Advocate at Mirantis working with the OSPO. He is a CNCF Ambassador with 6+ years of experience who helped scale a CNCF incubating project and runs the CNCG Platform Engineering Meetup group. He is currently leading the community... Read More →
Thursday September 10, 2026 14:40 - 15:05 JST
Hall C
  Multi-Agent and Distributed Systems

15:05 JST

Coffee Break
Thursday September 10, 2026 15:05 - 15:35 JST

Thursday September 10, 2026 15:05 - 15:35 JST
Hall A

15:10 JST

Sponsor Activity: Workato - Demo Session
Thursday September 10, 2026 15:10 - 15:25 JST
Workato is Enterprise MCP — the platform that connects your apps and data, orchestrates integrations, automates workflows, deploys AI agents, and governs everything securely at enterprise scale.
Stop by our booth at T0 for live demos of Enterprise MCP and AI Agents in action, and claim a few SWAG too!
p.s. Our sweet purple friend, Dewy, might stop by in one of these sessions!


WorkatoはEnterprise MCPのプラットフォームです。アプリとデータを接続し、連携をオーケストレーションし、ワークフローを自動化し、AIエージェントを展開し、すべてをセキュアに、エンタープライズ規模でガバナンスするプラットフォームです。
ブースでは、Enterprise MCPとAI Agentsのライブデモを交えてご紹介します。

Thursday September 10, 2026 15:10 - 15:25 JST
Hall A

15:35 JST

Stop Giving Agents Tokens: Securing With Side-Car Proxies - Ritwik Ranjan, Independent Contributor
Thursday September 10, 2026 15:35 - 16:00 JST
As autonomous agents move from experimental scripts to production systems, we’re exposing a massive flaw in how they’re built. We are giving LLMs the power to execute code, access files, and make network requests—essentially turning them into untrusted programs with direct authority over our infrastructure.

Prompt injection isn’t just a model quirk; it’s an open door to a massive attack surface. The moment an agent processes untrusted data, that input can hijack generated code, trigger outbound requests, and lead to data leaks or Server-Side Request Forgery (SSRF). Without proper guardrails, a highly capable agent is just a friendly interface over a Remote Code Execution (RCE) vulnerability.

This session reframes the entire security challenge. Instead of wasting time trying to make the model perfectly "safe," we’ll look at how to design infrastructure that stays secure even after the agent is compromised. By enforcing strict policy gates, we ensure that even if an agent is hijacked, it cannot access secrets, traverse your network, or execute privileged actions.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Ritwik Ranjan

Ritwik Ranjan

Software Engineer, Independent Contributor
Ritwik Ranjan is a systems-focused software engineer with a track record of building resilient, high-scale cloud platforms. With prior engineering experience across Microsoft Azure Core and Amazon Web Services (AWS), he brings a strong foundation in distributed infrastructure, runtime... Read More →
Thursday September 10, 2026 15:35 - 16:00 JST
Hall C
  Building Reliable Agent Systems

15:35 JST

Lessons From Building a Generative UI Runtime for MCP Apps - Rabi Guha, Thesys Inc
Thursday September 10, 2026 15:35 - 16:00 JST
MCP UI lets servers return interactive application surfaces instead of plain tool results. But it raises a new question: what happens when the interface inside that surface is generated at runtime by the agent?

This talk shares lessons from building a Generative UI layer within MCP UI. MCP UI provides the app/resource boundary and host communication model, while frameworks like OpenUI provide the generated interface inside that boundary: a component registry, model-friendly UI language, streaming validation, form state, and explicit actions that route back to MCP tools.

The key shift is that MCP UI does not have to mean one fixed widget per tool result. A server can expose capabilities and context, the agent can generate the right interface for the task, and the host can still control rendering, permissions, actions, and observability.

The demo uses a data-dashboard workflow: an agent connects to a datasource, inspects data, generates an interactive dashboard with filters and drilldowns, then turns the result into persistent artifacts such as reports, documents, or slide decks.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Rabi Guha

Rabi Guha

Co-Founder & CEO - Thesys, Thesys Inc

Rabi Shanker Guha is Co-Founder and CEO of Thesys, the Generative UI company behind C1 and OpenUI. Previously, he was Head of Engineering and a founding member at DevRev.ai, where he helped scale the engineering team to about 150 people. He has also held roles at Google and Nutanix, and... Read More →
Thursday September 10, 2026 15:35 - 16:00 JST
Hall 1F
  MCPCon

15:35 JST

Architecting Agent-Native Data Layers: Managing Persistent State Across MCP Tools - Tomohiro Ichimura, Yugabyte Japan
Thursday September 10, 2026 15:35 - 16:00 JST
As multi-agent systems move to production, managing persistent state and data lineage across independent tools is a critical engineering bottleneck. This session explores the architectural gaps in current agent workflows and introduces an open-source approach to building structured, tiered datastores using the Model Context Protocol (MCP).

We will present the concept of an "agent-native data layer" and the "datapack" framework—designed to decouple and layer data specifically for multi-agent environments. Attendees will learn how an open-source MCP server can act as a unified abstraction layer to securely bridge public and proprietary data. You will walk away with actionable design patterns to ensure independent tools seamlessly retain state and context without vendor lock-in.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Tomohiro Ichimura

Tomohiro Ichimura

Head of Japan and Korea, Yugabyte Japan
As Head of Japan and Korea, leading both commercial strategy and technical operations to bridge the gap between business growth and complex engineering. With a deep background in distributed systems, cloud-native infrastructure, and data platforms—built across technical and business... Read More →
Thursday September 10, 2026 15:35 - 16:00 JST
Hall B
  Multi-Agent and Distributed Systems

16:10 JST

Building an AI for Security Exception Tickets: What Actually Worked - Juan Corena, Woven by Toyota
Thursday September 10, 2026 16:10 - 16:35 JST
This session presents a lightweight AI assistant built to help a Security Assurance team review policy exception tickets more efficiently. The assistant summarizes tickets, generates follow-up questions, and maps requests to internal standards to support faster reviews.

The solution uses GitHub Workflows, a custom MCP server and client written in Go, ServiceNow integration, and Python-based evaluation. We used RAGAS to assess relevance and hallucination risk, and verified that the assistant retrieved internal standards through MCP calls.

We will share early results, including meaningful time savings in ticket review, as well as practical challenges such as stakeholder alignment, service account access, and the difficulty of evaluating correctness in security workflows. Attendees will leave with a practical blueprint for building a standards-grounded AI workflow for security review. In our implementation, the initial review step dropped from about 60 minutes of manual effort to about 50 seconds of automated generation plus validation, a time savings of roughly 98.6% per ticket.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Juan Corena

Juan Corena

Senior Software Engineer, Woven by Toyota
Juan Corena is currently an Application Security Engineer at Woven by Toyota working on security automation, dynamic analysis and internal cryptographic standards. Previously, he worked in privacy compliance for ad networks, digital assistants, information security research and as... Read More →
Thursday September 10, 2026 16:10 - 16:35 JST
Hall C
  Building Reliable Agent Systems

16:10 JST

Tasks at Scale: How MCP's New Task Lifecycle Powers Long-Running Agentic Systems - Abhishek Pandit, NitroStack
Thursday September 10, 2026 16:10 - 16:35 JST
In the 2026-07-28 MCP spec, Tasks graduated from an experimental core feature to a full extension, and the redesign reflects hard lessons from production use. For teams building agentic systems, this isn't a minor API tweak. It changes how long-running work, the kind agents constantly trigger (data pipelines, multi-step workflows, async approvals) gets modeled, tracked, and scaled across a stateless protocol.

This session is a field report on what it takes to build agentic systems around the new Tasks lifecycle.

We'll cover:
  1. Why Tasks moved from core to an extension, and what that signals about MCP's evolution philosophy
  2. The new server-directed task model: how a tools/call returns a task handle, and the client drives it via tasks/get, tasks/update, and tasks/cancel
  3. Why tasks/list was removed entirely, and what that means for how agents discover and track in-flight work
  4. Patterns for orchestrating dozens or hundreds of concurrent tasks across a fleet of agents without sessions to lean on
  5. Migration lessons from the experimental 2025-11-25 Tasks API, including what broke and how we handled the transition without downtime.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Abhishek Pandit

Abhishek Pandit

CEO, NitroStack
Abhishek Pandit is a technology entrepreneur and software architect with 7+ years building scalable, high-performance systems using Node.js, React, AWS, and Azure. As CEO of NitroStack, he focuses on AI agents and Model Context Protocol (MCP), helping developers build secure, production-ready... Read More →
Thursday September 10, 2026 16:10 - 16:35 JST
Hall 1F
  MCPCon

16:10 JST

Workshop: Enterprise Agentic AI: Architecting Autonomous Java Systems for Production - Daniel Oh, Red Hat & Kevin Dubois, IBM
Thursday September 10, 2026 16:10 - 17:45 JST
Step into the future of enterprise automation by building production-ready agentic AI systems using Java. This hands-on lab guides you through designing scalable multi-agent architectures that seamlessly connect with enterprise infrastructure. You will gain practical experience implementing key design patterns such as sequence, parallel, routing, loop, and supervisor models while enabling direct agent-to-agent (A2A) collaboration. We will also address real-world deployment challenges by integrating human-in-the-loop control points and robust observability features. Leave equipped with functional code and the architectural blueprints needed to bring robust agentic AI into your organization.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Daniel Oh

Daniel Oh

Senior Principal Developer Advocate, Red Hat
Java Champion, CNCF Ambassador & TAG DevEX Co-Chair, AAIF Ambassador, Microsoft MVP, Developer Advocate, Technical Marketing, Keynote Speaker, Published Author
avatar for Kevin Dubois

Kevin Dubois

Sr Principal Developer Advocate, IBM
Kevin Dubois is often featured as a (keynote) speaker at conferences around the world, where he shares his passion and knowledge about developer experience, Agentic AI, open source, cloud native development and Java. He is also an author, java Champion, and an accomplished software... Read More →
Thursday September 10, 2026 16:10 - 17:45 JST
Hall B
  Workshop

16:45 JST

Intent as Code: Why Existing Permissions Aren’t Enough for AI - Masaya Nakamura, Studist
Thursday September 10, 2026 16:45 - 17:10 JST
MCP grants AI agents access to file systems, Git, cloud, and SaaS. Yet permission models — IAM, OAuth scopes, PATs — were built for humans and fall short for AI.

The issue isn’t granularity. Existing permissions assume “human rationality” as a boundary: write access doesn’t mean a human wipes a repo; CI write access doesn’t mean a human exfiltrates secrets. Permissions stay broad because human judgment fills the gap. AI lacks this buffer — through prompt injection or edge cases, it acts destructively where a human would stop. Per-call approval collapses under fatigue.

As an SRE on strong production credentials, my question wasn’t “how to restrict AI” but “how to maximize safe delegation.”

I propose Intent as Code: coding what was left to human rationality. Three OSS tools:
safe-push rejects pushes touching .github/ or others’ commits, preventing CI hijacking
safe-gh wraps gh CLI with conditions like “only own issues” or “only approved PRs to develop” — expressing intent PATs can’t
safe-webfetch uses Claude Code Hooks to auto-allow learned-safe URLs, cutting fatigue decisions

Attendees leave understanding why permissions fall short for AI, with patterns to apply.

___________________________
Presentation Language: Japanese

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Masaya Nakamura

Masaya Nakamura

Super Engineer, studist
Super Gokigen Engineer
Thursday September 10, 2026 16:45 - 17:10 JST
Hall C
  Human-Agent Collaboration

16:45 JST

Running an MCP Proxy at Scale - Camila Rondinini, Anthropic
Thursday September 10, 2026 16:45 - 17:10 JST
The MCP spec is clear about how one client and one server talk to each other. It says much less about what happens when the client is itself a distributed system, serving millions of people across thousands of third-party MCP remote servers.

At Anthropic, we run a proxy between our products and a large, growing set of remote servers. At that scale, we started running into problems the spec doesn't answer.

This talk is about three of them:

- Authentication: How do we make authentication work across servers that all implement it a little differently? How do we keep people connected when connections drop and credentials expire, without making them sign in again?

- Caching: How do we avoid hammering the MCP remote servers, and which caching strategies make that possible?

- Monitoring: How do we monitor a system where the servers vary widely, from stable production ones to unstable ones still in development? When something breaks, how do we tell whether the fault is ours or the server's?

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Camila Rondinini

Camila Rondinini

Member of Technical Staff, Anthropic
Camila Rondinini is a Member of Technical Staff on the Connectivity team at Anthropic, where she works on supporting MCP across Anthropic's product surfaces. Her focus is on improving the reliability and monitoring of MCP at scale.
Thursday September 10, 2026 16:45 - 17:10 JST
Hall 1F
  MCPCon

17:20 JST

Accelerating the Autonomous Web With WebMCP - Vin Lim, StaffOS
Thursday September 10, 2026 17:20 - 17:45 JST
AI agents have long been capable of interacting with the web, relying on brittle DOM scrapers and heavy browser automation has kept these workflows slow and prone to failure. We will explore how the WebMCP shifts agentic web interaction from merely functional to highly performant and efficient by providing a standardized, machine-readable layer for context sharing and action execution. WebMCP eliminates the friction and overhead of legacy automation techniques.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Vin Lim

Vin Lim

CTO, StaffOS
Vin is the co-founder of StaffOS, an AI Workforce platform for business to deploy and govern AI agents. He is also a Google Developer Expert, having partnered with Google to advocate web technology for the past 10 years, speaking, mentoring and conducting community workshops.
Thursday September 10, 2026 17:20 - 17:45 JST
Hall C
  Interoperability & Standards

17:20 JST

Legacy Meets LLM: Giving Frontier Models a Telephone (PSTN) Over MCP - Shinya Saito, Gen-AX Corp
Thursday September 10, 2026 17:20 - 17:45 JST
A web service exposes /health; a phone line exposes nothing. The telephone is the oldest telecommunication tool still in production — and our LLM voice agents answer customer calls over it, with no way to know whether they are answering, hearing, and behaving correctly right now.

So we gave a frontier model a telephone.

Our MCP server gives any LLM a phone: dial PSTN numbers, speak via TTS, and read the other side via silence-detected transcripts. A frontier model becomes the caller, phoning our production voice agents in an agent-calls-agent loop — one mechanism covering the whole testing spectrum: ping-style health checks, deep evaluation via scripted and adversarial conversations, and load testing with concurrent caller fleets.

We cover the MCP tool design for a domain the spec wasn't written for — tools that block for tens of seconds, turn-taking over live audio, per-call session state — where the spec fought us and what we would feed back, plus what broke: timeout cascades and evaluations that flap.

We are open-sourcing the server. You'll leave knowing how to connect your own agent to the PSTN — and how to ping, probe, and load-test anything that answers a phone.

___________________________
Presentation Language: Japanese

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.

Speakers
avatar for Shinya Saito

Shinya Saito

Backend Engineer, Gen-AX Corp
Shinya Saito is a Product Engineer at Gen-AX developing X-Ghost, an enterprise voice AI platform. He builds production voice agents and telephony infrastructure, spanning observability, evaluation, and large-scale testing. Recently he has used the Model Context Protocol (MCP) to connect... Read More →
Thursday September 10, 2026 17:20 - 17:45 JST
Hall 1F
  MCPCon

17:45 JST

Attendee Reception
Thursday September 10, 2026 17:45 - 19:00 JST

Thursday September 10, 2026 17:45 - 19:00 JST
Hall A
 
Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.
Filtered by Date -