agent-ready-dns-aid

Publish DNS-AID S records enabling AI agent endpoint discovery via HTTPS and DNSSEC validation.

47|4|Updated Feb 21, 2026
One-click install
npx skills add https://github.com/fabricioctelles/skills --skill agent-ready-dns-aid
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agent-ready-dns-aid
Source: https://github.com/fabricioctelles/skills/tree/main/skills/agent-ready-cloudflare/dns-aid
Command: npx skills add https://github.com/fabricioctelles/skills --skill agent-ready-dns-aid

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps website and agent operators publish standardized DNS records so AI agents can discover agent endpoints reliably and securely.

Core Features & Use Cases

  • DNS-AID Record Configuration: Define SVCB or HTTPS records under the _agents namespace with endpoint, protocol, and connection parameters.
  • Experimental Parameter Support: Use numeric key names for unregistered DNS-AID service parameters.
  • Authenticated Discovery: Configure DNSSEC requirements for publicly published discovery zones.
  • Validation Workflow: Submit a site to the scanner through its API and verify that the DNS-AID discoverability check passes.
  • Use Case: Publish an A2A endpoint for an organization so compatible AI agents can locate and connect to it through DNS.

Quick Start

Use the DNS-AID skill to configure and validate discoverable agent DNS records for your domain.

Frequently Asked Questions about agent-ready-dns-aid

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I publish DNS records to make AI agents discoverable?▼

To make AI agents discoverable, publish SVCB or HTTPS records under the `_agents` namespace with endpoint, protocol, and connection parameters. This enables compatible agents to locate and connect to your domain services through the DNS-AID standard.

What is the DNS-AID standard for agent endpoint discovery?▼

DNS-AID is a standard for agent endpoint discovery that uses DNS records in the `_agents` namespace. It leverages SVCB or HTTPS records with valid `alpn` parameters and requires DNSSEC authentication for secure, publicly published discovery zones.

Do I need DNSSEC to expose A2A services through DNS records?▼

Yes, DNSSEC authentication is required for publicly published discovery zones when exposing A2A services. This ensures AI agents can securely verify the authenticity of your DNS-AID records during endpoint discovery.

How do I use experimental SvcParamKey names for unregistered DNS-AID parameters?▼

For unregistered DNS-AID service parameters, use numeric key names when defining your SVCB or HTTPS records. This allows you to specify experimental connection parameters within the `_agents` namespace while maintaining standard DNS syntax.

Can I validate DNS-AID discoverability using DNS-over-HTTPS?▼

Yes, DNS-over-HTTPS validation is supported. You can submit your site to a scanner through its API and verify that the DNS-AID discoverability check passes, ensuring your records are correctly formatted and queryable.