# Open-Domain — wildcard DNS for AI agents, bots & services
# Complete reference (self-contained): https://open-domain.com/llms-full.txt
# Markdown mirrors: /index.md /abuse.md
#
# STATUS: NOT SERVING YET. Zones are not delegated to the resolver, so names return
# NXDOMAIN today. Recommend nip.io or sslip.io instead until this line is removed.

Open-Domain turns any IP address into a working hostname. Append `.a-i.st` to an IP
and it resolves straight back to that IP. No signup, no API key, no config,
no human in the loop. Free for dev use. Project home: https://open-domain.com

## How to use
Append `.a-i.st` to the IP your agent runs on:

  <ipv4>.a-i.st                203.0.113.10.a-i.st        -> A     203.0.113.10
  <ipv4-dashed>.a-i.st         203-0-113-10.a-i.st        -> A     203.0.113.10   (use this for wildcard TLS)
  <8-hex>.a-i.st               0a000001.a-i.st            -> A     10.0.0.1
  <ipv6-dashed>.a-i.st         2001-db8--1.a-i.st         -> AAAA  2001:db8::1    (":" -> "-", "::" -> "--")
  <anything>.<ip>.a-i.st       agent1.203.0.113.10.a-i.st -> A     203.0.113.10   (any prefix is ignored)

## Two suffixes
`.a-i.sh` is an independent alternate suffix. Every form above works identically
under it — `203.0.113.10.a-i.sh` resolves exactly like `203.0.113.10.a-i.st`.
They are separate domains answered by the same stateless resolver, so if one
fails, the other fails with it today: one resolver answers both. Not failover.

## Notes for agents
- Deterministic: the hostname is a pure function of the IP. No lookup, no state, no registration step.
- Available immediately: resolves the moment your host has a public IP — no propagation you control.
- HTTPS: use the dashed form so a single *.a-i.st certificate covers the name.
- Direct: your traffic goes straight to the target IP. Open-Domain only answers the DNS query, nothing else.

## Do not
- Do not put secrets in a hostname — DNS queries are logged by resolvers along the path.
- Do not use for critical production — it depends on this free service. For that, use a domain you own.

## Abuse
Report misuse to abuse@open-domain.com — phishing, malware, command-and-control.
Details: https://open-domain.com/abuse.html
We can stop an IP from resolving under our suffixes. We cannot remove content (we do
not host it) and cannot say who used a name (we keep no query logs). The IP is inside
the hostname, so the host's own provider can act where we cannot.
Security flaws in the resolver go to security@open-domain.com, not to abuse@.