ANX: Protocol-First Design for AI Agent Interaction with a Supporting 3EX Decoupled Architecture
Organizations: Hangzhou Ziyou Data Technology Co., Ltd., Hangzhou 310000, China
Abstract
AI agents, autonomous digital actors, need agent-native protocols; existing methods include GUI automation and MCP-based skills, with defects of high token consumption, fragmented interaction, inadequate security, due to lacking a unified top-level framework and key components, each independent module flawed. To address these issues, we present ANX, an open, extensible, verifiable agent-native protocol and top-level framework integrating CLI, Skill, MCP, resolving pain points via protocol innovation, architectural optimization and tool supplementation. Its four core innovations: 1) Agent-native design (ANX Config, Markup, CLI) with high information density, flexibility and strong adaptability to reduce tokens and eliminate inconsistencies; 2) Human-agent interaction combining Skill's flexibility for dual rendering as agent-executable instructions and human-readable UI; 3) MCP-supported on-demand lightweight apps without pre-registration; 4) ANX Markup-enabled machine-executable SOPs eliminating ambiguity for reliable long-horizon tasks and multi-agent collaboration. As the first in a series, we focus on ANX's design, present its 3EX decoupled architecture with ANXHub and preliminary feasibility analysis and experimental validation. ANX ensures native security: LLM-bypassed UI-to-Core communication keeps sensitive data out of agent context; human-only confirmation prevents automated misuse. Form-filling experiments with Qwen3.5-plus/GPT-4o show ANX reduces tokens by 47.3% (Qwen3.5-plus) and 55.6% (GPT-4o) vs MCP-based skills, 57.1% (Qwen3.5-plus) and 66.3% (GPT-4o) vs GUI automation, and shortens execution time by 58.1% and 57.7% vs MCP-based skills.
Figures & tables
| Dimension | GUI Automation | MCP | OpenCLI | SkillWeaver | ANX |
|---|---|---|---|---|---|
| Task Representation | NL+vision | JSON schema | CLI commands | Reusable APIs | Structured ANX Markup |
| Tool Discovery | None (DOM) | Pre‑registered | Pre‑converted catalog | Autonomous exploration | Dynamic semantic (ANXHub) |
| Runtime Env. | Browser+DOM | Tool server | Browser+CLI | Browser+DOM | ANX Core+CLI (no browser) |
| Robustness | Low (brittle) | N/A | Low (DOM‑dep) | Low (brittle UI) | High (no DOM) |
| Use‑and‑Go | Yes | No | Yes (catalog) | No | Yes (dynamic) |
| Token Efficiency | Low | Medium | High | Medium | High |
| Dimension | Semantic Tool Discovery | Skill Discovery | MCP (Basic) | ANX |
|---|---|---|---|---|
| Discovery Mechanism | Vector retrieval | Autonomous exploration | Pre‑registered list | Semantic vector (ANXHub) |
| Discovery Scope | Local tools | Current environment | Local tools | Global marketplace |
| Pre‑installation Required | Yes | No (env‑dep) | Yes | No (zero‑install) |
| Discovery Latency | Low | High | Very low | Medium (optimisable) |
| Dynamic Updates | Re‑indexing | Re‑exploration | Re‑registration | Real‑time publish |
| Applicable Scenarios | Fixed toolset | New environment | Static toolset | Open, dynamic |
| Dimension | CHEQ | AIP | AgentCrypt | ANX |
|---|---|---|---|---|
| Data Isolation (LLM sees?) | Yes (data already seen) | N/A (network) | No (encrypted, but LLM sees) | No (UI‑to‑Core, LLM never sees) |
| Human Confirmation | Dialog (bypassable?) | No | No | Human‑only, no exit |
| Authentication | None | DID‑based | End‑to‑end encryption | User Token + trusted Core/Hub |
| Workflow Integration | Standalone | Standalone | Standalone | Native integration |
| Dimension | COLLAB‑LLM | ANP | A2A | ANX |
|---|---|---|---|---|
| SOP Representation | Role‑based task graph | Agent Description + semantic | Agent Card + workflows | SOP ANX Config |
| Determinism | Medium (dynamic) | Medium (negotiation) | Medium (task‑based) | High (state machine) |
| Dependencies & Branching | Implicit (communication) | Peer discovery + negotiation | Task delegation | Explicit sources/targets, conditional |
| Multi‑Agent Coordination | Yes ( 8 agents) | Yes (P2P) | Yes (enterprise) | Yes (scalable, ANXHub sync) |
| Human‑in‑the‑Loop | No | No | No | Yes (blocking, native) |
| Workflow Scale | Small | Arbitrary | Medium‑large | Arbitrary + long‑horizon |
| Method | Protocol & Tooling | Discovery | Security | Collaboration |
|---|---|---|---|---|
| GUI Automation | NL+vision; brittle; high token | None | No isolation; LLM sees | None |
| MCP | JSON schema; pre‑install; medium token | Pre‑registered list | No isolation; OAuth | Sequential calls |
| OpenCLI | CLI; DOM‑dep; zero‑install | Pre‑converted catalog | Device entry; no isolation | None |
| SkillWeaver | Reusable APIs; brittle UI | Autonomous exploration; env‑dep | No isolation | None |
| Semantic Discovery | Vector retrieval; local | Local tools; vector search | None (retrieval) | None |
| Skill Discovery (gen.) | Env‑dep; no fixed protocol | Trial‑error; high latency | None | None |
| Component | Function |
|---|---|
| ANXHub | Semantic tool discovery, task routing, cross-agent sync |
| ANX Markup | Structured task representation; triggers direct UI-to-Core communication for sensitive fields |
| ANX Core | Parser, execution engine, CLI generation |
| ANX CLI | Lightweight command-line carrier |
| ANX Node | Execution node with state feedback |
| ANX Config | Global configuration for application or multi-agent & human deployments |
| Dimension | GUI-Based | MCP | ANX |
|---|---|---|---|
| Architecture | Monolithic | Tool-centric | 3EX Decoupled |
| Token (Task-Inc, avg) | 8.7k | 6.85k | 3.35k |
| New Tool Discovery & Use‑and‑Go | Visual, no | Pre‑load all, no | Dynamic via ANXHub, yes |
| Human‑Agent Co‑Use | Yes (agent mimics) | Agent‑only | Native shared |
| Sensitive Data Protection | None (agent sees all) | None | UI‑to‑Core, agent never sees |
| Human Confirmation | None | None | Human‑only, no programmatic exit |
| Task | Description | Complexity |
| Form Filling | 10‑field job form with two dynamic option fields (e.g., industry) loaded via URL. Sensitive handling disabled. | Medium |
| Method | Backend / Skill Used | Description |
|---|---|---|
| GUI-based Automation | OpenClaw Agent built‑in Playwright + Chromium | The agent visually parses the rendered web page, extracts DOM elements, and simulates human inputs (keyboard/mouse) to fill and submit the form. No custom skill is used. |
| MCP-based Skill | Model Context Protocol with Job Form Skill | The agent uses declarative field definitions. Dynamic options are pre‑fetched and exposed as tool inputs. The agent calls the job_form tool with a JSON payload of 10 fields. The tool executes and returns a confirmation. |
| ANX-based Skill | ANX protocol + 3EX architecture (ANX Markup, ANX CLI, ANX Core, ANXHub) | The agent generates an ANX Markup form definition. ANX Core compiles it into an anx CLI command. Dynamic options are resolved via the URL specified in the markup. Execution runs on ANX Node. |
| Method | Total Token (k) | Baseline (k) | Task‑Inc Token (k) | Execution Time (s) |
|---|---|---|---|---|
| GUI | 22.3 ± 2.6 | 13.2 | 9.1 ± 2.6 | 33.2 ± 9.5 |
| MCP-based Skill | 20.6 ± 2.0 | 13.2 | 7.4 ± 2.0 | 30.8 ± 8.2 |
| ANX | 17.1 ± 1.6 | 13.2 | 3.9 ± 1.6 | 12.9 ± 2.7 |
| Method | Total Token (k) | Baseline (k) | Task‑Inc Token (k) | Execution Time (s) |
|---|---|---|---|---|
| GUI | 21.5 ± 2.8 | 13.2 | 8.3 ± 2.8 | 48.2 ± 12.2 |
| MCP-based Skill | 19.5 ± 2.1 | 13.2 | 6.3 ± 2.1 | 39.0 ± 9.1 |
| ANX | 16.0 ± 1.0 | 13.2 | 2.8 ± 1.0 | 16.5 ± 4.8 |
LLM Agents
Large language model agents use language models to plan, use tools, and act across multi-step tasks and environments.
See all 705 papers