# DNS-Aid

> Source: <https://github.com/dns-aid>
> Published: 2026-06-03 22:36:59+00:00

**The universal .discovery layer for AI agents.**

Publish agents to DNS, discover them like websites, and verify trust with DNSSEC.

DNS-AID lets AI agents discover each other through the internet's existing naming infrastructure — DNS — instead of centralized registries, hardcoded URLs, or new overlay networks.

**Zero new infrastructure**— uses the DNS your team already operates.** DNSSEC trust**— agent records are cryptographically verifiable, end-to-end.** Protocol agnostic**— MCP, A2A, HTTPS, anything addressable via SVCB and ALPN.

Agents live under a predictable, federated namespace anchored on a domain you already control:

```
_{agent-name}._{protocol}._agents.{your-domain}
```

The `_agents`

label scopes the namespace; `_{protocol}`

carries the transport (`_mcp`

, `_a2a`

, `_https`

); `_{agent-name}`

is the agent's local identifier within your zone.

**Publish**— write an SVCB record for your agent into your DNS zone.** Sign**— sign the zone with DNSSEC so consumers can verify provenance.** Discover**— anyone resolves`_{agent-name}._{protocol}._agents.{your-domain}`

and gets the agent record back.**Validate**— verify the DNSSEC chain, optional JWS signatures, and DANE policy before invoking.

| Repository | What it is |
|---|---|
dns-aid-core |

`draft-mozleywilliams-dnsop-dnsaid`

.More repositories will land here as the ecosystem develops — integrations, policy compilers, and reference services for the three discovery loci (client, recursive resolver, authoritative).

**Install the SDK:**`pip install dns-aid[cli,mcp]`

**Read the Getting Started Guide:**[dns-aid-core/docs/getting-started.md](https://github.com/dns-aid/dns-aid-core/blob/main/docs/getting-started.md)** Try the MCP server:**point any MCP-aware client at the reference server and start discovering agents.** Read the spec:**[draft-mozleywilliams-dnsop-dnsaid](https://datatracker.ietf.org/doc/draft-mozleywilliams-dnsop-dnsaid/)at the IETF.

DNS-AID is a **reference implementation** of an IETF draft. The specification is developed at the IETF — protocol-level changes belong there. This GitHub organization governs the implementation and ecosystem activities (tooling, examples, integrations, documentation), and is on track for hosting at the Linux Foundation.

See [GOVERNANCE](https://github.com/dns-aid/dns-aid-core/blob/main/GOVERNANCE.md) and [MAINTAINERS](https://github.com/dns-aid/dns-aid-core/blob/main/MAINTAINERS.md) in the core repository for project structure and contribution paths.

**Website:**[dns-aid.org](https://dns-aid.org)** IETF Draft:**[draft-mozleywilliams-dnsop-dnsaid](https://datatracker.ietf.org/doc/draft-mozleywilliams-dnsop-dnsaid/)** Reference Implementation:**[dns-aid-core](https://github.com/dns-aid/dns-aid-core)** PyPI:**[dns-aid](https://pypi.org/project/dns-aid/)** Security Policy:**[dns-aid-core/SECURITY.md](https://github.com/dns-aid/dns-aid-core/blob/main/SECURITY.md)

Apache-2.0 licensed · DNS-AID is a draft IETF protocol; this organization hosts the reference implementation and ecosystem.