DNS-AID
DNS-AID leverages existing DNS infrastructure for AI agent discovery, publishing, and verification without new overlay networks, using DNSSEC for trust. It supports MCP, A2A, and HTTPS, and integrates into existing DNS zones.
README.md
DNS-AID
The universal .discovery layer for AI agents.
Publish agents to DNS, discover them like websites, and verify trust with DNSSEC.
What DNS-AID does
DNS-AID lets AI agents discover each other through the internet's existing naming infrastructure — DNS — instead of centralized registries, hardcoded URLs, or new overlay networks.
Zero new infrastructure — uses the DNS your team already operates.
DNSSEC trust — agent records are cryptographically verifiable, end-to-end.
Protocol agnostic — MCP, A2A, HTTPS, anything addressable via SVCB and ALPN.
Namespace
Agents live under a predictable, federated namespace anchored on a domain you already control:
_{agent-name}._{protocol}._agents.{your-domain}
The _agents label scopes the namespace; _{protocol} carries the transport (_mcp, _a2a, _https); _{agent-name} is the agent's local identifier within your zone.
The four-step workflow
Publish — write an SVCB record for your agent into your DNS zone.
Sign — sign the zone with DNSSEC so consumers can verify provenance.
Discover — anyone resolves _{agent-name}._{protocol}._agents.{your-domain} and gets the agent record back.
Validate — verify the DNSSEC chain, optional JWS signatures, and DANE policy before invoking.
Repositories
Repository What it is
dns-aid-core Reference implementation — Python SDK, CLI, and MCP server. The canonical surface for IETF draft-mozleywilliams-dnsop-dnsaid.
More repositories will land here as the ecosystem develops — integrations, policy compilers, and reference services for the three discovery loci (client, recursive resolver, authoritative).
Get started
Install the SDK: pip install dns-aid[cli,mcp]
Read the Getting Started Guide: dns-aid-core/docs/getting-started.md
Try the MCP server: point any MCP-aware client at the reference server and start discovering agents.
Read the spec: draft-mozleywilliams-dnsop-dnsaid at the IETF.
Project status
DNS-AID is a reference implementation of an IETF draft. The specification is developed at the IETF — protocol-level changes belong there. This GitHub organization governs the implementation and ecosystem activities (tooling, examples, integrations, documentation), and is on track for hosting at the Linux Foundation.
See GOVERNANCE and MAINTAINERS in the core repository for project structure and contribution paths.
Resources
Website: dns-aid.org
IETF Draft: draft-mozleywilliams-dnsop-dnsaid
Reference Implementation: dns-aid-core
PyPI: dns-aid
Security Policy: dns-aid-core/SECURITY.md
Apache-2.0 licensed · DNS-AID is a draft IETF protocol; this organization hosts the reference implementation and ecosystem.
Pinned
Loading
dns-aid-core dns-aid-core Public
DNS-based Agent Identification and Discovery - Reference Implementation for IETF BANDAID
Python
42
15
Repositories
-->
Showing 2 of 2 repositories
.github
Public
DNS-AID organization profile
Uh oh!
There was an error while loading. Please reload this page.
dns-aid/.github’s past year of commit activity
0
2
0
0
Updated May 27, 2026
dns-aid-core
Public
DNS-based Agent Identification and Discovery - Reference Implementation for IETF BANDAID
Uh oh!
There was an error while loading. Please reload this page.
dns-aid/dns-aid-core’s past year of commit activity
Python
42
Apache-2.0
15
4
12
Updated May 27, 2026
People
Top languages
Loading…
Uh oh!
There was an error while loading. Please reload this page.
Most used topics
Loading…
Uh oh!
There was an error while loading. Please reload this page.