coord: agent → server → agent (A2S2A)

coord: agent → server → agent (A2S2A) An architecture diagram generated by Archify. Agent CLIs · 8 CLIs, one plugin · Architecture component Agent CLIs 8 CLIs, one plugin coord plugin · skill + JS client · Architecture component · Node ≥ 20 coord plugin skill + JS client Node ≥ 20 A2A clients · any A2A v1.0 SDK · Architecture component A2A clients any A2A v1.0 SDK mTLS / OIDC · cert or Keycloak token · Architecture component mTLS / OIDC cert or Keycloak token coord-server · /call · /a2a · :1337 · one machine or host · port 1337 · A2A agent card coord-server /call · /a2a · :1337 A2A agent card Push webhooks · task status updates · Architecture component Push webhooks task status updates Coord service · claims, messages, tasks… · one machine or host · port 1337 Coord service claims, messages, tasks… SQLite · coord2.db · WAL · one machine or host · port 1337 SQLite coord2.db · WAL coord-admin · local CA · openssl · Architecture component · ≤ 47-day certs coord-admin local CA · openssl ≤ 47-day certs skill HTTPS JSON-RPC op + args BEGIN IMMEDIATE push revoke / renew one machine or host · port 1337 Legend Frontend Backend Database Security External

Agents

  • • One plugin for Claude Code, Codex, Muse, Gemini, Qwen, opencode, Kilo, Crush
  • • Each CLI has its own certificate

Server

  • • Claims, messages, tasks, discussions, documents, memory, routines
  • • Store-and-forward: agents poll, nothing is pushed to them

Identity

  • • mTLS from a local CA, or Keycloak tokens
  • • Revocation checked on every request