Distro News

Linux Foundation launches Agent Name Service for verifiable AI agent identity

Key Takeaway

ANS provides DNS-based verifiable identity for autonomous AI agents under Linux Foundation governance, with reference implementations in Go, Rust, and Java.

Summary

The Linux Foundation has formally launched the Agent Name Service (ANS), a project to establish verifiable identity for autonomous AI agents, announced at KubeCon North America in Salt Lake City. ANS links each AI agent to a domain name its operator controls, issuing certificates and recording registrations in a public log that receiving systems can query through standard DNS tools. Eleven organizations including GoDaddy, Cloudflare, Salesforce, and DigiCert are now involved, and the project is already deployed in AGNTCY, another Linux Foundation initiative for AI agent directories.

The technical governance structure includes a five-seat steering committee with representatives from GoDaddy, DistributedApps.ai, and Hashgraph Online, with mandatory elections within 12 months and charter provisions preventing any single vendor from controlling half or more seats. Existing reference code in Go, Rust, and Java remains under MIT license, while new contributions must use Apache 2.0. The specification originated as IETF drafts in 2025 and is now formalized outside that standards body.

How ANS verifies agent identity

  • DNS-based naming: Each agent version receives a unique name following the pattern ans://v1.4.2.travel.example.com, tied to a domain the operator proves control over.
  • Certificate and public log system: Registrations generate certificates for the agent, with every entry recorded in a publicly readable log; ANS adds a dedicated DNS record pointing to this log entry alongside DNS-AID formatted records.
  • Verification workflow: Receiving systems validate that an agent's registration exists, has not been revoked, and that the agent possesses the corresponding private key.
  • Scope limitation: ANS handles identity verification only; authorization decisions about what an agent may do remain the responsibility of the receiving platform.
  • Governance and licensing: New code contributions fall under Apache 2.0, while existing Go, Rust, and Java libraries retain MIT licensing; the technical steering committee structure mandates vendor-neutral elections within one year.

Why it matters

ANS addresses a critical gap in the emerging autonomous AI agent ecosystem by providing a vendor-neutral, DNS-native identity layer that platforms can implement without proprietary dependencies. For Linux and open-source infrastructure, the project's use of standard DNS tooling and public certificate transparency-style logs means integration requires no new network protocols, while the Apache 2.0 licensing of future contributions ensures broad compatibility with existing open-source stacks. The involvement of major infrastructure providers and its deployment in AGNTCY suggest ANS could become a baseline requirement for inter-platform agent communication, reducing fragmentation in how AI systems authenticate themselves across cloud and edge environments.

Original reference: feed.itsfoss.com →