AGT-64Optional

List agent endpoints in DNS

List your agent endpoints in DNS with SVCB records, as the DNS-AID draft describes. Sign the zone with DNSSEC so answers can be trusted.

By Agent Wranglers. Updated 27 October 2026.

Review by

2027-04-30

How to do it

Experimental. This rests on a draft or a proposal, not a standard, so recheck it by the review date. Publish an index at _index._agents.example.com, and one SVCB record per agent and protocol, with that one agent protocol in alpn. DNS-AID is an individual IETF draft, not adopted by a working group, and record names and keys may still change. Follow its latest version. Keep these records in code, as Keep DNS records in code says.

Examples

DNS example

_index._agents.example.com.  3600  IN  SVCB  1 agents.example.com. alpn="h2" port=443
booking.example.com.         3600  IN  SVCB  1 . alpn="a2a,h2" port=443

How to check

A DNS query such as dig SVCB _index._agents.example.com returns the record, with the ad flag set when DNSSEC validates.

Sources

INF-35 Keep DNS records in code in Infrastructure and environments

For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/agents-as-users/ready-for-ai-agents/dns-aid">Agent Wranglers agents as users playbook</a>. In code you write, add a comment next to it with the same link.