← Latest papers
💻 computer science

Agent Identity URI Scheme: Topology-Independent Naming and Capability-Based Discovery for Multi-Agent Systems

This paper proposes the agent:// URI scheme, a topology-independent identity system that decouples agent references from network location through trust-root scoping, hierarchical capability paths, and cryptographic attestation to enable stable, scalable, and capability-based discovery in decentralized multi-agent systems.

Original authors: Roland R. Rodriguez

Published 2026-07-15
📖 7 min read🧠 Deep dive

Original authors: Roland R. Rodriguez

Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer

Imagine the internet as a massive, bustling city where millions of tiny, super-smart robots (called "agents") are constantly running errands for us. Some robots buy groceries, others approve invoices, and some even write code. For these robots to work together, they need to find each other. In the early days of the internet, we solved a similar problem for humans: we realized that a person's name (like "Jane Smith") should be different from their current address (like "123 Maple Street"). If Jane moves to a new house, her name stays the same, but her address changes. The postal service uses a special map to find her new home without needing to know her name changed.

Today's robot city has a glitch. Instead of giving robots a stable name, we've been using their current "address" (like a specific web link) as their name. If a robot moves to a new server or a different cloud provider, its address changes, and suddenly, everyone who was trying to talk to it loses the connection. It's like if every time you moved apartments, your name legally changed to your new street number, and all your friends forgot who you were. This paper tackles that exact problem. It proposes a new way to name these robots so they can move around the world without losing their identity, while also letting other robots find them based on what they do (like "approve invoices") rather than just where they live.


The Problem: When Moving Means Forgetting

The authors point out that current systems make a fundamental mistake: they tie a robot's identity directly to its location. Imagine a robot named "Invoice-Approver" living at https://agents.acme.com/approver. If the company moves its servers to a new cloud provider, the link changes. Suddenly, every workflow, every contract, and every log that referenced the old link breaks. The robot is still there, but it's now a stranger because its "name" (the link) changed.

Furthermore, if a robot needs to find a specialist—say, someone who can handle "hazmat shipping quotes"—it currently has no way to ask, "Who can do this?" across different companies. It can only ask, "Is the robot at this specific link available?" This makes the whole system fragile and hard to scale.

The Solution: A New ID Card System

The paper introduces a new naming scheme called agent://. Think of this as a new type of ID card for robots that separates three things: Who they are, What they do, and Where they are.

  1. The Trust Root (The Issuing Authority): This is the organization that vouches for the robot, like a government issuing a passport. In the new system, this is written as a domain name (e.g., acme.com). It tells you who is responsible for the robot.
  2. The Capability Path (The Job Description): This describes exactly what the robot does, using a hierarchical path like /workflow/approval/invoice. This is the robot's "skill set." Crucially, the robot's identity is tied to this path. If a robot changes its job (e.g., from approving invoices to approving expenses), it gets a new ID because it is effectively a different worker with a different identity.
  3. The Agent ID (The Unique Serial Number): This is a unique code that stays the same forever, but only as long as the robot keeps the same job and organization. If the robot moves to a new server, this code stays the same. If the robot changes its job path or its issuing organization, this code changes to reflect the new identity.

The full ID looks like this: agent://acme.com/workflow/approval/invoice/agent_01h.... Notice that the actual server address (like https://agents.acme.com) is not in the ID. The ID is just a name.

How It Works: The Magic Phone Book

So, how do you find a robot if you don't know its address? The paper suggests using a decentralized "phone book" called a DHT (Distributed Hash Table). Instead of one giant list at a central office, this phone book is spread across thousands of computers.

  • Finding by Skill: If you want an agent that can "approve invoices," you don't look for a specific address. You look up the skill path /workflow/approval/invoice in the phone book. The system calculates a special key based on the organization (acme.com) and the skill, then asks the network, "Who has this key?"
  • The Result: The network returns a list of robots that match that skill. Crucially, the system checks a digital "seal" (a cryptographic token) to make sure the robot actually has the right to say it can do that job.
  • Moving Without Breaking: If the robot moves to a new server, it just updates its location in the phone book. Its ID (agent://...) stays exactly the same. Anyone looking it up still finds it, because the name never changed.

What the Authors Found

The team tested this idea to see if it actually works in the real world.

  • Can it name everything? They took 369 real-world tools from popular robot frameworks (like LangChain and CrewAI) and tried to map them to this new system. The result? 100% coverage. Every single tool could be given a unique, collision-free name using their new grammar.
  • Does the search work? They simulated a network with 10,000 registered robots. When they asked for agents with specific skills, the system found exactly the right ones every time. For broad searches (like "find any workflow agent"), it returned an average of 128 agents. For specific searches, it found about 39.
  • Is it fast? The math behind the names is incredibly quick. Parsing a name and finding the right key takes less than 7 microseconds. That is so fast it's practically instant compared to the time it takes for data to travel over the internet.
  • Is it secure? The system uses digital signatures (PASETO tokens) issued by the organization. This means you don't have to trust the robot's word; you trust the organization that signed the ID. If a robot lies about its skills, the signature won't match, and the system rejects it.

What It Doesn't Do (And What's Still Unknown)

The paper is careful to say what this isn't. It doesn't solve the problem of how to get people to run the phone book nodes (the computers that store the list). The authors suggest that organizations might do it because they want their own robots to be found, or they might use a "tit-for-tat" system where you help others to get help. But they admit this part needs more work.

They also note that while the system handles different organizations well, it doesn't automatically know that "approving invoices" at Company A is the same as "authorizing purchases" at Company B. That requires a separate mapping service, which they propose as a future idea.

The Big Picture

The authors aren't claiming to have built the final, perfect robot city. Instead, they've fixed the foundation. By separating the robot's name from its address, they've created a system where robots can move, scale, and work together across different companies without breaking the connections that hold them together. It's a bit like giving every robot a permanent passport instead of a temporary address label, ensuring that no matter where they go, they remain who they are.

Drowning in papers in your field?

Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.

Try Digest →