---
name: dns-aid
description: Publish DNS-AID SVCB under _agents
---

# Fix: dnsAid

**Probe:** DoH (`cloudflare-dns.com`, `Accept: application/dns-json`, `do=1`) for SVCB/HTTPS/TXT on `_index._agents.`, `_mcp._agents.`, `_a2a._agents.` (apex + www). Pass requires DNSSEC-validated ServiceMode (`AD=true`).

**Zone config** (Cloudflare DNS → enable DNSSEC), example:

```
_index._agents.example.com.  SVCB  1 . alpn=h2
_mcp._agents.example.com.    SVCB  1 mcp.example.com. alpn=h2 port=443
```

This is zone-level — not a static file on the origin.

Spec: draft-mozleywilliams-dnsop-dnsaid