Skip to content
Methodology

DNS-AID agent records

ia.dns-aid · 1.14

Find MAY Recommendation

Why it matters

DNS-AID publishes agent discovery pointers under the _agents DNS names. This checkpoint detects SVCB or HTTPS answers and accepts an index TXT fallback; it does not verify the advertised service.

How to fix it

Publish an SVCB record for your agent index under _index._agents.

  1. Add an SVCB record at _index._agents.<zone> that points to your agent index.

    _index._agents.example.com. 3600 IN SVCB 1 agents.example.com. alpn=h2
  2. Add _mcp._agents and _a2a._agents records only for protocols that you serve.

Verify

curl -sf -H 'accept: application/dns-json' 'https://cloudflare-dns.com/dns-query?name=_index._agents.{domain}&type=SVCB' | jq -e '.Answer | length > 0'

Expected: exit code 0

Run a new scan for this checkpoint:

isagentready results {domain} --checkpoint ia.dns-aid
Details Mapping, lifecycle and references