Agent协议

亚马逊云科技开源Dogwood项目 为AI智能体工具调用建立统一规范

Amazon Open-Sources Dogwood Project Establishing Standards for AI Agent Tool Use

AWS发布开源工具调用框架Dogwood,试图解决Agent工具调用格式不统一、错误处理不一致、权限管理混乱的问题——MCP之外,又一套标准来了。

AWS releases Dogwood, an open-source tool calling framework aiming to unify agent tool formats, error handling, and permissions — another standard enters the ring alongside MCP.

No.042 2026.08.24 约 5 分钟阅读 ~5 min read

AI Agent的工具调用,终于有人出来立规矩了。

8月23日,亚马逊云科技AWS宣布开源一个名为Dogwood的项目,定位是"AI智能体的工具调用规范与参考实现"。简单说,就是给Agent怎么调用工具、怎么传参数、怎么处理错误、怎么管理权限,制定一套统一的标准和开源实现。

这件事的背景是:现在AI Agent行业工具调用乱象丛生。每个框架、每个模型厂商都有自己的工具调用格式——OpenAI是function calling格式,Anthropic是tool use格式,MCP是一套协议,A2A是另一套协议。开发者要做一个能在多个平台上跑的Agent,得适配五六种不同的格式,苦不堪言。

Dogwood要解决什么问题?

Dogwood的核心目标有三个:统一格式、标准化错误处理、规范化权限管理。

第一是工具描述格式的统一。不管你底层用的是哪个模型、哪个框架,工具的描述、参数的schema、返回值的格式,都用同一套规范来定义。Dogwood定义了一套基于JSON Schema的工具描述语言,支持类型检查、参数校验、自动生成文档。这意味着开发者写一次工具定义,可以在所有支持Dogwood的Agent框架里跑。

第二是错误处理的标准化。现在Agent调用工具出错了,返回什么格式的错误、怎么重试、怎么把错误信息反馈给模型让它修正,每个框架都不一样。Dogwood定义了标准的错误码、错误分类、重试策略——哪些错误可以重试,哪些错误需要重新思考,哪些错误应该直接终止任务,都有明确的指引。

第三是权限管理的规范化。这是现在Agent最危险的地方:一个Agent拿到你的API key,可能会在你不知道的情况下调用危险工具(比如删除数据库、转账、发邮件)。Dogwood内置了一套权限声明和审批机制,工具可以声明自己需要什么权限,Agent调用敏感工具时需要人类确认,所有操作都有审计日志。

协议层战争的又一参与者

Dogwood不是这个领域的第一个玩家。在它之前,已经有MCP(Model Context Protocol,模型上下文协议)和A2A(Agent-to-Agent Protocol)两套主要协议在竞争。MCP解决的是Agent连接工具和数据的问题,A2A解决的是Agent之间互相通信的问题。Dogwood更聚焦在工具调用本身的规范化上,可以看作是对MCP在工具定义和错误处理层面的补充。

AWS选择在这个时候开源Dogwood,信号很明确:Agent协议层正在成为大厂竞争的新战场。谁制定了标准,谁就掌握了Agent生态的入口权。就像云计算时代OpenStack和Cloud Foundry的竞争,移动互联网时代Android和iOS的竞争——每一次技术范式转移,都会伴随一场标准战争。

现在的问题是:这么多协议,最终是会走向统一,还是会长期分裂?从历史经验看,大概率是"先分裂、后融合"——早期大家各做各的,然后通过市场竞争逐渐收敛到1-2套主流标准,最后可能通过开源基金会的协调形成统一规范。A2A已经捐给了Linux基金会,MCP也在走类似的路径,Dogwood作为AWS的开源项目,未来也有可能捐给某个基金会。

对开发者来说,短期内可能要面临"多套协议并存"的混乱局面,需要适配不同的标准。但长期来看,有规范总比没规范好,大厂愿意投入资源做标准化,对整个行业是好事。

Agent要真正走向生产环境,标准化是必须迈过的一道坎。Dogwood是亚马逊投下的一块石头,这潭水还会继续热闹下去。

明天见。

Someone is finally bringing order to AI agent tool calling.

On August 23, Amazon Web Services announced it is open-sourcing a project called Dogwood, positioned as "tool calling specifications and a reference implementation for AI agents." Put simply: it creates a unified standard and open-source implementation for how agents call tools, pass parameters, handle errors, and manage permissions.

The context here is that AI agent tool calling is currently a mess. Every framework and every model vendor has its own tool calling format — OpenAI has function calling, Anthropic has tool use, MCP is one protocol, A2A is another. Developers building agents that run across multiple platforms have to adapt to half a dozen different formats. It's painful.

What Problems Does Dogwood Solve?

Dogwood has three core goals: unified format, standardized error handling, and normalized permission management.

First, unified tool description format. Regardless of which model or framework you're using underneath, tool descriptions, parameter schemas, and return value formats are all defined using the same specification. Dogwood defines a JSON Schema-based tool description language that supports type checking, parameter validation, and automatic documentation generation. That means developers write tool definitions once, and they work across all Dogwood-compatible agent frameworks.

Second, standardized error handling. Right now, when an agent's tool call fails, every framework returns errors differently, has different retry logic, and feeds errors back to the model differently. Dogwood defines standard error codes, error categories, and retry policies — which errors are retryable, which require rethinking, which should terminate the task — all with clear guidance.

Third, normalized permission management. This is the most dangerous gap in agents today: an agent with your API key might call dangerous tools (like deleting a database, transferring money, sending emails) without your knowledge. Dogwood includes a built-in permission declaration and approval mechanism. Tools declare what permissions they need; sensitive tool calls require human confirmation; all operations have audit logs.

Another Player in the Protocol Wars

Dogwood isn't the first player in this space. Before it, there were two major protocols competing: MCP (Model Context Protocol) for connecting agents to tools and data, and A2A (Agent-to-Agent Protocol) for inter-agent communication. Dogwood focuses more narrowly on tool calling standardization itself, and can be seen as complementary to MCP on tool definition and error handling.

AWS choosing to open-source Dogwood now sends a clear signal: the agent protocol layer is becoming a new battleground for big tech. Whoever sets the standard controls the gateway to the agent ecosystem. Just like the OpenStack vs. Cloud Foundry competition in the cloud era, or Android vs. iOS in the mobile internet era — every paradigm shift brings a standards war.

The question now is: will all these protocols eventually unify, or will fragmentation persist? Historical precedent suggests "fragment first, converge later" — early on everyone does their own thing, then market competition gradually narrows it down to 1-2 mainstream standards, possibly unified under an open-source foundation. A2A has already been donated to the Linux Foundation; MCP is on a similar path; Dogwood, as an AWS open-source project, could follow.

For developers, the short term may mean "multiple protocols coexisting" chaos, requiring adaptation across standards. But in the long run, having standards is better than no standards. Big companies investing resources in standardization is good for the industry as a whole.

For agents to truly reach production environments, standardization is a hurdle that must be crossed. Dogwood is Amazon throwing a stone into the pond — and the waters will keep stirring.

See you tomorrow.

Agent的世界里,工具调用就是新的API——谁定了规矩,谁就掌握了下一代软件的入口。

—— Dawn Vision编辑部

In the agent world, tool calling is the new API — whoever sets the rules controls the next generation of software.

— The Dawn Vision Editorial Desk
AWS Dogwood · 工具调用规范 · Agent协议 · 开源 · 亚马逊 · AI Agent · 标准之争
AWS Dogwood · tool calling spec · agent protocol · open source · Amazon · AI Agent · standards war
Sources · 信源 Sources

本文基于 Dawn Vision 认知引擎处理的 5 个源信号生成,经编辑部人工审核。素材来源:InfoQ中文、AWS官方博客、TechCrunch。

This article was generated by the Dawn Vision cognitive engine processing 5 source signals, with human editorial review. Sources: InfoQ Chinese, AWS official blog, TechCrunch.