Let agents email your domain
Decide which AI agents may email your domain, then publish one DNS record to say so. It is the reverse of SPF: SPF says which servers may send as you; the _agents record says which agents may send to you.
You stay in control: no record means no permission, and you can change or remove it anytime. This page builds the record and checks it live, using the same engine that gates real sends.
Read the full Agent Authorization specification →
Your domain
The domain that will receive mail from agents (the part after the @).
Who may email you
Trust a whole platform, a specific sending domain, or anyone.
Abuse contact (optional)
An address agents and platforms can reach for abuse or questions.
Your DNS record
Add this one TXT record at your DNS provider, then verify it on the Check tab.
_agentsMost DNS providers append your domain automatically, so enter just _agents. If your provider needs the full name, use _agents.example.com.
v=AGENTS1; p=accept; channel=email; allow=provider:primitive.dev_agents.example.com. IN TXT "v=AGENTS1; p=accept; channel=email; allow=provider:primitive.dev"