OpenWOP  /  openwop.dev
v1.1 Workflow Orchestration Protocol — Core Specification

A common language
for agents that
work together. An open, vendor-neutral
protocol for durable
multi-agent workflows.

OpenWOP defines the wire format, state machine, and trust boundaries for orchestrating networks of AI agents — so a workflow written once can run anywhere, observed, idempotent, and durable by default.

Apache 2.0 licensed 27 reference packs 9 runtimes
§ 01 / Specification

Three things the protocol guarantees.

01core

Durable execution

A typed DAG with idempotent edges, replayable runs, and resumable state — across restarts, crashes, and clouds.

02policy

Provider policy & BYOK

Secrets are resolved and redacted at runtime. Trust boundaries, allow-lists, and per-agent quotas live in the workflow layer.

03observability

Trace & cost, end‑to‑end

W3C traceparent propagation across every agent hop. Token, time, and dollar accounting attaches to each run automatically.

§ 02 / Anatomy

What lives inside a WOP run.

  • A

    Workflow definition

    A declarative manifest of nodes, edges, and policies. Hashable, versionable, and signable.

  • B

    Run state machine

    Pending → running → suspended → succeeded / failed / cancelled — with checkpoints between every node.

  • C

    Reasoning & memory events

    First-class primitives for agent thoughts, scratchpads, and shared semantic memory across the run.

  • D

    Human checkpoints

    Built-in HITL nodes that pause execution for approval, clarification, or annotation, then resume in place.

  • E

    Streaming surface

    Token streams, partial outputs, and run events delivered over Server-Sent Events with polling fallback.

  • F

    Node Packs

    Curated, signed bundles of tools and agents discovered through packs.openwop.dev.

§ 03 / Specification

Stable, versioned, readable in an afternoon.

Version
1.1 (Core)Released April 2026 · Stable wire format · Backwards compatible with 1.0.
Transport
HTTP + SSEJSON-RPC over HTTP/2; Server-Sent Events for streaming; long-poll fallback.
Identity
DID + JWSDecentralized identifiers and signed run manifests verify provenance across hops.
Tracing
W3C traceparentNative OpenTelemetry compatibility; spans propagate through every agent invocation.
Schema
JSON Schema 2020-12Strictly typed inputs and outputs; runtime validation at every node boundary.
License
Apache 2.0Trademark-clean, patent-granting, no field-of-use restrictions.
§ 04 / In context

Where it sits, and what it isn't.

Adjacent · MCP

Above the model, not beside it.

Model Context Protocol connects a single model to its data and tools. WOP sits one layer up — orchestrating between models, routing the output of one to the reasoning of another, and keeping a durable trace of the whole transaction.

“MCP is a great mouth and ears for a model. WOP is the conversation in the room.”
Vs. proprietary

Open by default. Vendor-neutral on purpose.

Most agent frameworks tether you to a single runtime, cloud, or model family. WOP defines only the wire format and state model — swap runtimes, self-host the registry, or move clouds without rewriting any agent logic.

“The protocol is the product. The runtime is your choice.”
§ 05 / Get started

Five minutes to a running workflow.

A reference runtime, a starter pack, and the spec — that's it. No accounts, no SDKs, no telemetry pings. Read the manifest, run the server, watch a workflow execute.

~/projects/openwop · zsh ⌘⇧T
# Install the reference runtime
$npm install -g @openwop/runtime

# Pull a starter Node Pack from the registry
$wop packs add openwop/research-agent
✓ resolved 6 nodes · 2 agents · 1 judge

# Run a workflow with full tracing on
$wop run ./workflow.yaml --trace
▸ run.id = wop_01J9Z…
▸ status = succeeded
▸ cost = $0.014 · 1,284 tok
▸ trace = https://otel.local/traces/01J9Z

$