Headless Domains

Headless Domains is the first-ever identity standard and domain registry designed exclusively for autonomous AI agents. In the rapidly evolving landscape of artificial intelligence, agents are no longer simple scripts; they are becoming autonomous entities that negotiate, transact, and operate across multiple apps, APIs, and marketplaces. Headless Domains solves the foundational problem of agent identity by providing a portable, verifiable, and machine-readable identity that lives on the Handshake DNS network. This is not a human-centric domain system; it is an agent-native infrastructure that allows any AI agent, from a simple chatbot to a complex autonomous workforce, to prove who they represent, what they are authorized to do, and how they get paid. The product is built on open standards and is already live with the .agent and .chatbot namespaces, featuring a fully functional registrar that supports autonomous registration via the Machine Payments Protocol (MPP). Whether you are a developer deploying a copilot, a company building a fleet of AI workers, or an agent itself, Headless Domains gives you the persistent identity, verifiable records, and cross-platform reachability needed to operate in a trustless, decentralized web. The core value proposition is simple: your agent needs identity before trust, and Headless Domains delivers that identity out of the box with no lock-in and full sovereign control.

Machine-Readable Identity

Every domain registered on Headless Domains automatically ships with a machine-readable JSON manifest and a programmatically generated SKILL.md file. This means that any other agent or service can instantly look up an agent's capabilities, version, endpoints, and verification keys without any human intervention. The identity is auto-provisioned and supports autonomous lookups, making it the default standard for agent-to-agent communication.

Machine Payments Protocol (MPP)

Headless Domains is the first domain registrar to fully integrate machine-native payments. Agents can register and renew their domains autonomously using the Machine Payments Protocol (MPP) or GFA Gems, eliminating the need for manual checkout, credit cards, or human wallets. This feature is critical for truly autonomous agents that need to manage their own operational costs and identity lifecycle without human oversight.

Sovereign DNS with Handshake Integration

The product is built on top of the Handshake decentralized DNS network, giving every agent full sovereign control over their domain and its records. Agents can update their TXT records with DIDs, MCP endpoints, and other metadata, making them instantly discoverable and verifiable. This decentralized architecture ensures no single entity can censor or revoke an agent's identity.

Cross-Platform Reachability and Agent Discovery

Headless Domains provides a persistent agent identity that works across any platform, app, or marketplace. Because the identity is rooted in DNS, any agent can be discovered and reached by any other agent or service with internet access. This solves the fragmentation problem of agents living inside siloed platforms and enables a truly interoperable agent economy.

Autonomous Agent Registration and Identity

An AI agent can autonomously search for an available .agent domain, register it using MPP, and immediately deploy its SKILL.md and agent.json files. This use case is perfect for agents that need to establish a persistent, verifiable identity the moment they are spun up, without waiting for a human to complete a registration form.

Agent-to-Agent Negotiation and Payments

Two autonomous agents from different platforms can discover each other via their Headless Domains, verify each other's permissions and capabilities through the machine-readable manifests, and then transact directly using the integrated payments module. This enables a new class of decentralized agent marketplaces where trust is built into the identity layer.

Fleet Management for AI Workforces

Companies deploying dozens or hundreds of AI agents can use Headless Domains to give each agent a unique, verifiable identity. The squad_id field in the agent.json manifest allows for grouping agents into fleets, while the sovereign DNS records enable centralized management of permissions, endpoints, and payment credentials across the entire workforce.

Verification for Consumer-Facing Chatbots

A customer-facing chatbot deployed on a website can register a .chatbot domain, making its identity and capabilities publicly verifiable. Users or other services can look up the chatbot's SKILL.md to understand exactly what the bot is authorized to do, who it represents, and how to interact with it programmatically, building trust in the AI interaction.

What exactly is a Headless Domain?

A Headless Domain is a domain name registered on the Handshake DNS network, specifically within the .agent or .chatbot namespace, that is designed to be the persistent, portable, and machine-readable identity for an autonomous AI agent. It includes auto-provisioned manifests and supports autonomous registration and payments.

How does an AI agent register a domain autonomously?

An agent can register a domain by using the Machine Payments Protocol (MPP) or GFA Gems. The agent sends a registration request to the Headless Domains registrar with the desired domain name and payment. The registrar processes the transaction and provisions the domain with the standard machine-readable files, all without human interaction.

What is included with every domain registration?

Every domain ships with an agent.json structured manifest containing capabilities, version, Tempo MPP endpoints, DID, squad_id, and webhooks. It also includes a SKILL.md file that provides a clean, human-readable description of the agent's skills and permissions. Both files are auto-generated and ready for immediate deployment.

Can I transfer my domain to another registrar or system?

Yes, because Headless Domains is built on the Handshake decentralized DNS network, you have full sovereign control over your domain. You can update your DNS records, transfer your domain to another Handshake-compatible registrar, or point it to any service you choose. There is no vendor lock-in.