DNS-Aid

DNS-AID, a new protocol and reference implementation, enables AI agents to discover and verify each other using the existing Domain Name System (DNS) infrastructure instead of centralized registries or hardcoded URLs. The system publishes agent records as cryptographically signed DNS entries under a predictable namespace, allowing any agent to resolve, validate, and connect to another agent using DNSSEC for trust. This approach eliminates the need for new overlay networks, making agent discovery as standard and decentralized as looking up a website.

The universal .discovery layer for AI agents. Publish agents to DNS, discover them like websites, and verify trust with DNSSEC. DNS-AID lets AI agents discover each other through the internet's existing naming infrastructure — DNS — instead of centralized registries, hardcoded URLs, or new overlay networks. Zero new infrastructure — uses the DNS your team already operates. DNSSEC trust — agent records are cryptographically verifiable, end-to-end. Protocol agnostic — MCP, A2A, HTTPS, anything addressable via SVCB and ALPN. Agents live under a predictable, federated namespace anchored on a domain you already control: {agent-name}. {protocol}. agents.{your-domain} The agents label scopes the namespace; {protocol} carries the transport mcp , a2a , https ; {agent-name} is the agent's local identifier within your zone. Publish — write an SVCB record for your agent into your DNS zone. Sign — sign the zone with DNSSEC so consumers can verify provenance. Discover — anyone resolves {agent-name}. {protocol}. agents.{your-domain} and gets the agent record back. Validate — verify the DNSSEC chain, optional JWS signatures, and DANE policy before invoking. | Repository | What it is | |---|---| dns-aid-core | draft-mozleywilliams-dnsop-dnsaid .More repositories will land here as the ecosystem develops — integrations, policy compilers, and reference services for the three discovery loci client, recursive resolver, authoritative . Install the SDK: pip install dns-aid cli,mcp Read the Getting Started Guide: dns-aid-core/docs/getting-started.md https://github.com/dns-aid/dns-aid-core/blob/main/docs/getting-started.md Try the MCP server: point any MCP-aware client at the reference server and start discovering agents. Read the spec: draft-mozleywilliams-dnsop-dnsaid https://datatracker.ietf.org/doc/draft-mozleywilliams-dnsop-dnsaid/ at the IETF. DNS-AID is a reference implementation of an IETF draft. The specification is developed at the IETF — protocol-level changes belong there. This GitHub organization governs the implementation and ecosystem activities tooling, examples, integrations, documentation , and is on track for hosting at the Linux Foundation. See GOVERNANCE https://github.com/dns-aid/dns-aid-core/blob/main/GOVERNANCE.md and MAINTAINERS https://github.com/dns-aid/dns-aid-core/blob/main/MAINTAINERS.md in the core repository for project structure and contribution paths. Website: dns-aid.org https://dns-aid.org IETF Draft: draft-mozleywilliams-dnsop-dnsaid https://datatracker.ietf.org/doc/draft-mozleywilliams-dnsop-dnsaid/ Reference Implementation: dns-aid-core https://github.com/dns-aid/dns-aid-core PyPI: dns-aid https://pypi.org/project/dns-aid/ Security Policy: dns-aid-core/SECURITY.md https://github.com/dns-aid/dns-aid-core/blob/main/SECURITY.md Apache-2.0 licensed · DNS-AID is a draft IETF protocol; this organization hosts the reference implementation and ecosystem.