The universal .discovery layer for AI agents.
Publish agents to DNS, discover them like websites, and verify trust with DNSSEC.
DNS-AID lets AI agents discover each other through the internet's existing naming infrastructure β DNS β instead of centralized registries, hardcoded URLs, or new overlay networks.
Zero new infrastructureβ uses the DNS your team already operates.** DNSSEC trust**β agent records are cryptographically verifiable, end-to-end.** Protocol agnostic**β MCP, A2A, HTTPS, anything addressable via SVCB and ALPN.
Agents live under a predictable, federated namespace anchored on a domain you already control:
_{agent-name}._{protocol}._agents.{your-domain}
The _agents
label scopes the namespace; _{protocol}
carries the transport (_mcp
, _a2a
, _https
); _{agent-name}
is the agent's local identifier within your zone.
Publishβ write an SVCB record for your agent into your DNS zone.** Sign**β sign the zone with DNSSEC so consumers can verify provenance.** Discover**β anyone resolves_{agent-name}._{protocol}._agents.{your-domain}
and gets the agent record back.Validateβ verify the DNSSEC chain, optional JWS signatures, and DANE policy before invoking.
| Repository | What it is |
|---|---|
| dns-aid-core |
draft-mozleywilliams-dnsop-dnsaid
.More repositories will land here as the ecosystem develops β integrations, policy compilers, and reference services for the three discovery loci (client, recursive resolver, authoritative).
Install the SDK:pip install dns-aid[cli,mcp]
Read the Getting Started Guide:dns-aid-core/docs/getting-started.md** Try the MCP server:point any MCP-aware client at the reference server and start discovering agents. Read the spec:**draft-mozleywilliams-dnsop-dnsaidat the IETF.
DNS-AID is a reference implementation of an IETF draft. The specification is developed at the IETF β protocol-level changes belong there. This GitHub organization governs the implementation and ecosystem activities (tooling, examples, integrations, documentation), and is on track for hosting at the Linux Foundation.
See GOVERNANCE and MAINTAINERS in the core repository for project structure and contribution paths.
Website:dns-aid.org** IETF Draft:draft-mozleywilliams-dnsop-dnsaid Reference Implementation:dns-aid-core PyPI:dns-aid Security Policy:**dns-aid-core/SECURITY.md
Apache-2.0 licensed Β· DNS-AID is a draft IETF protocol; this organization hosts the reference implementation and ecosystem.