The universal .discovery layer for AI agents.
Publish agents to DNS, discover them like websites, and verify trust with DNSSEC.
DNS-AID lets AI agents discover each other through the internet's existing naming infrastructure — DNS — instead of centralized registries, hardcoded URLs, or new overlay networks.
- Zero new infrastructure — uses the DNS your team already operates.
- DNSSEC trust — agent records are cryptographically verifiable, end-to-end.
- Protocol agnostic — MCP, A2A, HTTPS, anything addressable via SVCB and ALPN.
Agents live under a predictable, federated namespace anchored on a domain you already control:
_{agent-name}._{protocol}._agents.{your-domain}
The _agents label scopes the namespace; _{protocol} carries the transport (_mcp, _a2a, _https); _{agent-name} is the agent's local identifier within your zone.
- Publish — write an SVCB record for your agent into your DNS zone.
- Sign — sign the zone with DNSSEC so consumers can verify provenance.
- Discover — anyone resolves
_{agent-name}._{protocol}._agents.{your-domain}and gets the agent record back. - Validate — verify the DNSSEC chain, optional JWS signatures, and DANE policy before invoking.
| Repository | What it is |
|---|---|
| dns-aid-core | Reference implementation — Python SDK, CLI, and MCP server. The canonical surface for IETF draft-mozleywilliams-dnsop-dnsaid. |
More repositories will land here as the ecosystem develops — integrations, policy compilers, and reference services for the three discovery loci (client, recursive resolver, authoritative).
- Install the SDK:
pip install dns-aid[cli,mcp] - Read the Getting Started Guide: dns-aid-core/docs/getting-started.md
- Try the MCP server: point any MCP-aware client at the reference server and start discovering agents.
- Read the spec: draft-mozleywilliams-dnsop-dnsaid at the IETF.
DNS-AID is a reference implementation of an IETF draft. The specification is developed at the IETF — protocol-level changes belong there. This GitHub organization governs the implementation and ecosystem activities (tooling, examples, integrations, documentation), and is on track for hosting at the Linux Foundation.
See GOVERNANCE and MAINTAINERS in the core repository for project structure and contribution paths.
- Website: dns-aid.org
- IETF Draft: draft-mozleywilliams-dnsop-dnsaid
- Reference Implementation: dns-aid-core
- PyPI: dns-aid
- Security Policy: dns-aid-core/SECURITY.md
Apache-2.0 licensed · DNS-AID is a draft IETF protocol; this organization hosts the reference implementation and ecosystem.
