agent-ready-dns-aid

Publish DNS-AID S records enabling AI agent endpoint discovery via HTTPS and DNSSEC validation.

47|4|Updated Feb 21, 2026
One-click install
npx skills add https://github.com/fabricioctelles/skills --skill agent-ready-dns-aid
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: agent-ready-dns-aid
Source: https://github.com/fabricioctelles/skills/tree/main/skills/agent-ready-cloudflare/dns-aid
Command: npx skills add https://github.com/fabricioctelles/skills --skill agent-ready-dns-aid

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps website and agent operators publish standardized DNS records so AI agents can discover agent endpoints reliably and securely.

Core Features & Use Cases

  • DNS-AID Record Configuration: Define SVCB or HTTPS records under the _agents namespace with endpoint, protocol, and connection parameters.
  • Experimental Parameter Support: Use numeric key names for unregistered DNS-AID service parameters.
  • Authenticated Discovery: Configure DNSSEC requirements for publicly published discovery zones.
  • Validation Workflow: Submit a site to the scanner through its API and verify that the DNS-AID discoverability check passes.
  • Use Case: Publish an A2A endpoint for an organization so compatible AI agents can locate and connect to it through DNS.

Quick Start

Use the DNS-AID skill to configure and validate discoverable agent DNS records for your domain.

Frequently Asked Questions about agent-ready-dns-aid

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I publish DNS records to make AI agents discoverable?

To make AI agents discoverable, publish SVCB or HTTPS records under the `_agents` namespace with endpoint, protocol, and connection parameters. This enables compatible agents to locate and connect to your domain services through the DNS-AID standard.

What is the DNS-AID standard for agent endpoint discovery?

DNS-AID is a standard for agent endpoint discovery that uses DNS records in the `_agents` namespace. It leverages SVCB or HTTPS records with valid `alpn` parameters and requires DNSSEC authentication for secure, publicly published discovery zones.

Do I need DNSSEC to expose A2A services through DNS records?

Yes, DNSSEC authentication is required for publicly published discovery zones when exposing A2A services. This ensures AI agents can securely verify the authenticity of your DNS-AID records during endpoint discovery.

How do I use experimental SvcParamKey names for unregistered DNS-AID parameters?

For unregistered DNS-AID service parameters, use numeric key names when defining your SVCB or HTTPS records. This allows you to specify experimental connection parameters within the `_agents` namespace while maintaining standard DNS syntax.

Can I validate DNS-AID discoverability using DNS-over-HTTPS?

Yes, DNS-over-HTTPS validation is supported. You can submit your site to a scanner through its API and verify that the DNS-AID discoverability check passes, ensuring your records are correctly formatted and queryable.