A budget-governed portfolio agent finds a .kred name, checks the price,
and surfaces the exact moment it would spend your credits — then proves its own authority
still holds, live, against public DNS.
AID → ANS → MCP-I → DNSid · the Agentic ID stack
🤖
Portfolio Agent tahabosstanci.kred
Loading agent record from the Domains.Kred API…
AID …ANS …MCP-I …DNSid …
01 · The Agentic ID Stack
live from api.domains.kred
AID agent identity & discovery
…
Provision a keypair and publish the agent's discovery record to DNS.
GET /domains/:d/agent
ANS agent name service
…
Issue the agent's name certificate and trust card.
GET /domains/:d/agent/ans
MCP-I model context protocol
…
Generate the agent's DID and verifiable credential scopes.
GET /domains/:d/agent/mcpi
DNSid governance
…
Does this authority still hold right now? Public, no key required.
GET /domains/:d/agent/dnsid/status
02 · Self-verification · what the world sees
public DNS · third-party resolvers
AID discovery record
_agent.tahabosstanci.kred TXT
querying…
via dns.google · live
Agent proxy endpoint
agent.tahabosstanci.kred CNAME
querying…
via dns.google · live
DNSid governance
tahabosstanci.kred · status
querying…
api.domains.kred · public
03 · Registry console · the trust surface
check → price → preview
—…
Price (USD)
—
Credits required
—
Ceiling
—
Balance after
—
…
The agent never spends above your ceiling. Preview runs
POST /domains/:d/register/preview — a real validation against the registry that
costs nothing: it reports credits_required, balance_after
and any blockers before a single credit moves.