The AGNTCY Agent Directory Service: Architecture and Implementation
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
The Agent Directory Service (ADS) is a distributed directory for the discovery of AI agent capabilities, metadata, and provenance. It leverages content-addressed storage, hierarchical taxonomies, and cryptographic signing to enable efficient, verifiable, and multi-dimensional discovery across heterogeneous Multi-Agent Systems (MAS). Built on the Open Agentic Schema Framework (OASF), ADS decouples capability indexing from content location through a two-level mapping realized over a Kademlia-based Distributed Hash Table (DHT). It reuses mature OCI / ORAS infrastructure for artifact distribution, integrates Sigstore for provenance, and supports schema-driven extensibility for emerging agent modalities (LLM prompt agents, MCP servers, A2A-enabled components). This paper formalizes the architectural model, describes storage and discovery layers, explains security and performance properties, and positions ADS within the broader landscape of emerging agent registry and interoperability initiatives.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 5 of its 38 references that are in the map. First posted on arXiv 23 Sep 2025.
Builds on
5 of 38 references.
References · 5
- 2025Beyond DNS: Unlocking the Internet of AI Agents via the NANDA Index and Verified AgentFactscited by 21
- 2025Upgrade or Switch: Do We Need a Next-Gen Trusted Architecture for the Internet of AI Agents?cited by 8
- 2025Evolution of AI Agent Registry Solutions: Centralized, Enterprise, and Distributed Approachescited by 4
- 2025Using the NANDA Index Architecture in Practice: An Enterprise Perspectivecited by 3
- 2025NANDA Adaptive Resolver: Architecture for Dynamic Resolution of AI Agent Namescited by 1
Built on by
Citing papers per year: 2025: 1; 2026: 3.
4 papers.
- 2025Toward a Safe Internet of Agentscited by 6
- 2026Agentic AI Governance and Lifecycle Management in Healthcarecited by 0
- 2026Usable Agent Discovery for Decentralized AI Systemscited by 0
- 2026Trade-offs in Decentralized Agentic AI Discovery Across the Compute Continuumcited by 0
- 2026Trade-offs in Decentralized Agentic AI Discovery Across the Compute Continuum12 May 2026
- 2026Usable Agent Discovery for Decentralized AI Systems25 Apr 2026
- 2026Agentic AI Governance and Lifecycle Management in Healthcare22 Jan 2026
- 2025Toward a Safe Internet of Agents29 Nov 2025
Similar, not cited
Close in wording, no citation either way
- 2025Agent Name Service (ANS): A Universal Directory for Secure AI Agent Discovery and Interoperability
- 2026Infrastructure for the Agentic Web: Gap Analysis and Architecture from the Agentverse Platform
- 2025AgentHub: A Registry for Discoverable, Verifiable, and Reproducible AI Agents
- 2026Data Facts: A Metadata Schema for Structured Data Exchange in the NANDini Multi-Agent Ecosystem ↗
- 2026The Importance of Out-of-Band Metadata for Safe Autonomous Agents: The Redpanda Agentic Data Plane
- 2026AgentRiskBOM: A Risk-Scoping Security Bill of Materials for Agentic AI Systems
- 2026ADR: An Agentic Detection System for Enterprise Agentic AI Security
- 2026The Agent Operating System (AOS): A Reference Operating Architecture for Distributed Agentic Systems