# Fix: DNS for AI Discovery (DNS-AID) records under _agents (IETF draft)

> Web-audit fix skill for the `dns-aid` check (Discoverability, MAY).

## Goal

Publish DNSSEC-signed SVCB records under _agents for DNS-level agent discovery.

## Fix

Publish SVCB/HTTPS records under the `_agents` namespace (for example
`_index._agents.<domain>`, `_mcp._agents.<domain>`), DNSSEC-signed
(draft-mozleywilliams-dnsop-dnsaid). DNS-level discovery lets an agent find your endpoints
before any HTTP request.

## Resources

- [DNS-AID draft](https://datatracker.ietf.org/doc/draft-mozleywilliams-dnsop-dnsaid/)

## Copy-paste prompt

Paste this into your coding agent, replacing the Issue line with the Result line from [your audit](https://anc.dev/web-audit):

```text
Goal: Publish DNSSEC-signed SVCB records under _agents for DNS-level agent discovery
Issue: <the audit's finding for this check>
Fix: Publish SVCB/HTTPS records under the `_agents` namespace (for example `_index._agents.<domain>`, `_mcp._agents.<domain>`), DNSSEC-signed (draft-mozleywilliams-dnsop-dnsaid). DNS-level discovery lets an agent find your endpoints before any HTTP request.
Skill: https://anc.dev/web-audit/skill/dns-aid
Docs: https://datatracker.ietf.org/doc/draft-mozleywilliams-dnsop-dnsaid/
```

## Verify

Re-run the audit at [https://anc.dev/web-audit](https://anc.dev/web-audit) or call the `audit_website` MCP tool; the `dns-aid` check should report `pass`.