# Beyond DNS: Unlocking the Internet of AI Agents via the NANDA Index and Verified AgentFacts

arXiv: https://arxiv.org/abs/2507.14263 · HTML: https://mlsanity.com/paper/2507.14263/

## Key facts

- Cited by 21 papers in the map (data through 14 Oct 2026).
- Builds on 1 of its 2 references that are in the map.
- First posted on arXiv 18 Jul 2025.

## Builds on (most cited first, 1 of 1)

- [IPFS - Content Addressed, Versioned, P2P File System](https://mlsanity.com/paper/1407.3561/) (2014)

## Built on by (most cited first, 21 of 21)

- [A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes](https://mlsanity.com/paper/2601.05293/) (2026)
- [AI Agents with Decentralized Identifiers and Verifiable Credentials](https://mlsanity.com/paper/2511.02841/) (2025)
- [Inter-Agent Trust Models: A Comparative Study of Brief, Claim, Proof, Stake, Reputation and Constraint in Agentic Web Protocol Design-A2A, AP2, ERC-8004, and Beyond](https://mlsanity.com/paper/2511.03434/) (2025)
- [Echoing: Identity Failures when LLM Agents Talk to Each Other](https://mlsanity.com/paper/2511.09710/) (2025)
- [Toward a Safe Internet of Agents](https://mlsanity.com/paper/2512.00520/) (2025)
- [Evolution of AI Agent Registry Solutions: Centralized, Enterprise, and Distributed Approaches](https://mlsanity.com/paper/2508.03095/) (2025)
- [The AGNTCY Agent Directory Service: Architecture and Implementation](https://mlsanity.com/paper/2509.18787/) (2025)
- [Dissociative Identity: Language Model Agents Lack Grounding for Reputation Mechanisms](https://mlsanity.com/paper/2605.30169/) (2026)
- [Using the NANDA Index Architecture in Practice: An Enterprise Perspective](https://mlsanity.com/paper/2508.03101/) (2025)
- [Distributed General-Purpose Agent Networks: Architecture, Key Mechanisms, and Prototypes](https://mlsanity.com/paper/2606.17368/) (2026)
- [Synergy: A Next-Generation General-Purpose Agent for Open Agentic Web](https://mlsanity.com/paper/2603.28428/) (2026)
- [Toward an AI-Native Internet: Rethinking the Web Architecture for Semantic Retrieval](https://mlsanity.com/paper/2511.18354/) (2025)
- [Crypto x AI, AI x Crypto: A Survey](https://mlsanity.com/paper/2606.13892/) (2026)
- [LLM-Enabled Multi-Agent Systems: Empirical Evaluation and Insights into Emerging Design Patterns & Paradigms](https://mlsanity.com/paper/2601.03328/) (2026)
- [Agentic AI Governance and Lifecycle Management in Healthcare](https://mlsanity.com/paper/2601.15630/) (2026)
- [Distributed Legal Infrastructure for a Trustworthy Agentic Web](https://mlsanity.com/paper/2603.06884/) (2026)
- [OpenAgenet / OAN White Paper: Open Infrastructure for Trusted Agent Interconnection](https://mlsanity.com/paper/2606.03161/) (2026)
- [AONA: A Comprehensive Architecture and Workflow Design for Global Agentic Collaboration](https://mlsanity.com/paper/2606.20573/) (2026)
- [AI Tool Discovery at Scale: All You Need is DNS](https://mlsanity.com/paper/2607.18242/) (2026)
- [TessIndex: Capability Verified Identity System for the Agent Economy](https://mlsanity.com/paper/2608.21942/) (2026)
- [PANDA: A Decentralized Architecture with Flexible Orchestration for Scalable, Fault-Tolerant Multi-Agent Systems](https://mlsanity.com/paper/2609.38482/) (2026)

## Abstract (arXiv)

The Internet is poised to host billions to trillions of autonomous AI agents that negotiate, delegate, and migrate in milliseconds and workloads that will strain DNS-centred identity and discovery. In this paper, we describe the NANDA index architecture, which we envision as a means for discoverability, identifiability and authentication in the internet of AI agents. We present an architecture where a minimal lean index resolves to dynamic, cryptographically verifiable AgentFacts that supports multi-endpoint routing, load balancing, privacy-preserving access, and credentialed capability assertions. Our architecture design delivers five concrete guarantees: (1) A quilt-like index proposal that supports both NANDA-native agents as well as third party agents being discoverable via the index, (2) rapid global resolution for newly spawned AI agents, (3) sub-second revocation and key rotation, (4) schema-validated capability assertions, and (5) privacy-preserving discovery across organisational boundaries via verifiable, least-disclosure queries. We formalize the AgentFacts schema, specify a CRDT-based update protocol, and prototype adaptive resolvers. The result is a lightweight, horizontally scalable foundation that unlocks secure, trust-aware collaboration for the next generation of the Internet of AI agents, without abandoning existing web infrastructure.