agent-discoverability

Publish and verify MCP server discovery via registries, OAuth metadata, manifests, and DNS-AID records.

3|1|Updated Apr 8, 2026
One-click install
npx skills add https://github.com/ever-just/agentskills --skill agent-discoverability-ever-just
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agent-discoverability
Source: https://github.com/ever-just/agentskills/tree/main/skills/agent-discoverability
Command: npx skills add https://github.com/ever-just/agentskills --skill agent-discoverability-ever-just

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Third-party AI agents cannot find or connect to an MCP server you operate unless it is listed in registries, exposes a working OAuth discovery chain, serves a capability manifest, and publishes DNS-AID records. This Skill walks through publishing and verifying all four surfaces so agents can resolve a domain to a working MCP session. ## Core Features & Use Cases - Registry Listing: Claim a reverse-DNS namespace, prove domain ownership via DNS TXT, publish a server.json to registry.modelcontextprotocol.io, and mirror to mcp.so, Smithery, Glama, and PulseMCP. - OAuth Discovery Chain Repair: Diagnose and fix the 401 + WWW-Authenticate to /.well-known/oauth-protected-resource (RFC 9728) to /.well-known/oauth-authorization-server (RFC 8414) chain, the most common cause of remote MCP connection failures. - Capability Manifest & DNS-AID: Serve /.well-known/agent/mcp.json and publish SVCB, TXT, _index._agents, and TLSA/DANE records under DNSSEC, verified with dns-aid verify. - Use Case: Your team ships an MCP endpoint at app.example.com/mcp but Claude Code clients report "cannot connect." Use this Skill to test the three OAuth hops with curl, fix the missing resource_metadata header, list the server in the official registry, and confirm a real client completes auth and lists tools. ## Quick Start Ask the agent to make your MCP server at your domain discoverable by listing it in the official MCP registry, fixing the OAuth discovery chain, serving a capability manifest, and publishing DNS-AID records, then verify end to end with a real client connection.

Frequently Asked Questions about agent-discoverability

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I list my MCP server in the official registry?▼

Claim a reverse-DNS namespace matching a domain you own, publish the verification TXT record the mcp-publisher CLI prints, then run mcp-publisher publish with a server.json describing your remote endpoint. Mirror the listing to mcp.so, Smithery, Glama, and PulseMCP.

Why won't clients connect to my remote MCP server even though it is up?▼

The usual cause is a broken OAuth discovery chain. An unauthenticated request must return 401 with a WWW-Authenticate: Bearer header carrying resource_metadata pointing to /.well-known/oauth-protected-resource, which then points to the authorization server metadata.

What DNS records does DNS-AID require for agent discovery?▼

DNS-AID uses a SVCB record with alpn and cap parameters, a TXT record with capabilities, an _index._agents TXT for enumeration, and a TLSA/DANE record binding the endpoint certificate, all under a DNSSEC-signed zone with the DS record at the registrar.

Does a registry listing make my product visible to ChatGPT or Perplexity?▼

No. MCP registry and directory listings make your server findable by agents and MCP tooling only. Answer-engine visibility for marketing pages requires separate SEO work such as sitemaps, JSON-LD, and IndexNow.

What happens to the TLSA record when my TLS certificate rotates?▼

The TLSA hash is pinned to the current endpoint certificate, so a stale record after rotation breaks DANE validation and agents reject a valid endpoint. Wire the TLSA update into the same renewal step that issues the certificate.