Applications / .agi / A2652T-T59922 · published by ICANN 7 October 2026 · snapshot 2026-10-08
.agi
StandardActiveZero Gravity Labs Inc., US Q1·Q25
Ultimately controlled by Michael Heinrich Q108 · ICANN record ↗
§ 1 — Meaning of the string Q118·Q120
agi, ai-agent
agi
§ 2 — Mission and purpose Q133
Zero Gravity Labs proposes .agi as the trusted digital home for artificial general intelligence:
a namespace where an AI system can be discovered, verified, and trusted, rather than operating as an anonymous, unverifiable endpoint on the general internet. The mission for .agi is a global namespace in which every registered AI system carries an identity that other systems, businesses, and people can rely on.
As AI systems increasingly act on behalf of users and organizations, there is no existing, industry-recognized namespace tying an endpoint to a verified AI system with clear ownership, provenance, and
accountability. General-purpose TLDs carry no such signal, and that gap already creates impersonation and trust problems as AI agents proliferate. .agi closes that gap — not by certifying that a given system is safe or compliant, but by giving verified AI systems and their operators a dedicated namespace where ownership, provenance, and governance information can be reliably published and checked.
Intended Registrants and Users
The Registry Operator anticipates registrants and users drawn from:
● Organizations developing or operating large-scale AI models and AI agent platforms;
● Enterprises deploying AI agents that need a verifiable identity for the systems acting on their behalf;
● AI safety, auditing, and verification organizations publishing provenance or governance information;
● Infrastructure providers building agent-to-agent communication, authentication, or transaction protocols; and
● Researchers and standards bodies working on AI identity, provenance, and accountability frameworks.
Related Activities
Zero Gravity Labs intends to operate .agi in parallel with .agent, its existing Web3 TLD counterpart on Unstoppable Domains' Web3 naming infrastructure, consistent with the framework
ICANN's Technical Study Group on New gTLD Integrations with Alternative Naming Systems is developing: the two namespaces will maintain strict parallel control, so a name registered in one is only
available in the other to the same registrant. Additional detail is provided in response to Question 222.
AI systems are subject to a regulatory environment that is evolving rapidly and varies by jurisdiction. .agi's registry-level commitments are limited to naming infrastructure and do not constitute a
certification that any registered AI system is safe, compliant, or free of malicious behavior. The Registry Operator will apply the same legal-compliance obligations to .agi as to every other applied-for string, including sanctions screening and cooperation with lawful requests from competent authorities.
Sustainability
Demand for .agi is anchored in a large, accelerating secular trend rather than speculative activity: deployed AI systems are growing rapidly, and each one adopting a verifiable identity has a structural
incentive to maintain and renew it for as long as the system operates. This gives .agi a registrant base with durable renewal incentives, supporting the TLD's operation over the full term of the Registry Agreement and beyond.
§ 3 — Commitments and safeguards Q164–Q188
| More trustworthy, consumer risk, regulated sector, government reporting, harm, government function Q164–Q169 | No to each |
|---|---|
| Voluntary Safeguard PICs Q170·Q171 | None · 90 applications in the round offer some |
| Registry Voluntary Commitments Q172·Q173 | None · 5 do |
| Code of Conduct exemption requested Q185·Q188 | No |
§ 4 — All other published answers
Every other answer ICANN published for this application, in the order of the form. Contact details (Q17–Q24) are left to the ICANN record.
Q212Q4.2-1 - Provide the applying entity’s self-certification document, signed by the CEO, President, CFO and/or equivalent officer of the applying entity. If financial statements are provided by a Qualified Parent Entity (QPE), the CEO, President, CFO, and/or equivalent officer of the QPE must co-sign the certification document. The self-certification document must represent and warrant: SC4.2-1.1 - The applying entity and/or a QPE will fund the startup and long-term operation of all applied-for gTLD strings and (if applicable) currently operated gTLDs of a QPE. SC4.2-1.2 - The applying entity or QPE has at a minimum of US$50,000 plus 25% of the application base fee for each applied-for gTLD string in Cash and Cash Equivalents on the balance sheet of the provided financial statements, up to a maximum of US$300,000, designated to support the startup and operation of all of the applying entity’s applied-for gTLD strings. SC4.2-1.3 - The applying entity and/or its officers are bound by law in its jurisdiction to represent financial statements accurately and the applying entity is in good standing in that jurisdiction.
Q4.2-1 - Provide the applying entity’s self-certification document, signed by the CEO, President, CFO and/or equivalent officer of the applying entity. If financial statements are provided by a Qualified Parent Entity (QPE), the CEO, President, CFO, and/or equivalent officer of the QPE must co-sign the certification document. The self-certification document must represent and warrant: SC4.2-1.1 - The applying entity and/or a QPE will fund the startup and long-term operation of all applied-for gTLD strings and (if applicable) currently operated gTLDs of a QPE. SC4.2-1.2 - The applying entity or QPE has at a minimum of US$50,000 plus 25% of the application base fee for each applied-for gTLD string in Cash and Cash Equivalents on the balance sheet of the provided financial statements, up to a maximum of US$300,000, designated to support the startup and operation of all of the applying entity’s applied-for gTLD strings. SC4.2-1.3 - The applying entity and/or its officers are bound by law in its jurisdiction to represent financial statements accurately and the applying entity is in good standing in that jurisdiction.
Answered with a document. Attachments are not published by ICANN.
Q220Q5.1-1 - Provide the applying entity’s self-certification document, signed by the CEO, President, CFO and/or equivalent officer of the applying entity. The self-certification document must represent and warrant: SC5.1-1.1 - The applying entity will appropriately protect confidentiality of data and prevent unauthorized access to data and services. SC5.1-1.2 - The applying entity will maintain a mature, appropriately funded and staffed security program, following a recognized, modern security framework based on risk management (such as the ISO27000 series, COBIT, HITRUST CSF, legally required security frameworks, or equivalent). The security program must be in place prior to delegation, and exist through at least the period of the registry agreement. SC5.1-1.3 - The applying entity is aware of and has designed its systems and business to comply with the relevant privacy and security regulations for all countries in which it operates.
Q5.1-1 - Provide the applying entity’s self-certification document, signed by the CEO, President, CFO and/or equivalent officer of the applying entity. The self-certification document must represent and warrant: SC5.1-1.1 - The applying entity will appropriately protect confidentiality of data and prevent unauthorized access to data and services. SC5.1-1.2 - The applying entity will maintain a mature, appropriately funded and staffed security program, following a recognized, modern security framework based on risk management (such as the ISO27000 series, COBIT, HITRUST CSF, legally required security frameworks, or equivalent). The security program must be in place prior to delegation, and exist through at least the period of the registry agreement. SC5.1-1.3 - The applying entity is aware of and has designed its systems and business to comply with the relevant privacy and security regulations for all countries in which it operates.
Answered with a document. Attachments are not published by ICANN.
Q221Q5.2-1 - Provide the applying entity’s self-certification document, signed by the CEO, President, CFO and/or equivalent officer of the applying entity. The self-certification document must represent and warrant: SC5.2-1.1 - The applying entity will, no later than delegation of the Top Level Domain (TLD), establish a dedicated abuse point of contact responsible for addressing matters requiring expedited attention and providing a timely response to abuse complaints concerning any name registered in the TLD. SC5.2-1.2 - The applying entity will, no later than delegation of the TLD, establish, publish, and provide to ICANN the location of a mechanism for members of the public to submit reports of abuse in accordance with the current obligations of the Base RA and any Consensus Policies. SC5.2-1.3 - The applying entity has developed proposed measures for removal of orphan glue records for names removed from the zone when provided with evidence in written form that the glue is present in connection with malicious conduct (see Specification 6). SC5.2-1.4 - The applying entity has or will have at time of delegation, established policies for handling complaints regarding abuse. Such policies are to be maintained and posted publicly so that anyone can review the policies via the Internet and any other means deemed appropriate by the applying entity. The applying entity’s policies at a minimum should contain appropriate confirmation of the receipt of the abuse report, the process of review of the report, and actions that will be taken if the applying entity confirms the report is legitimate. SC5.2-1.5 - The applying entity understands that DNS Abuse is Phishing, Malware, Botnets, Pharming and Spam (when used to deliver other forms of DNS Abuse). The applying entity understands and is prepared to contribute to the mitigation or disruption of DNS Abuse in domains in the TLD zone. SC5.2-1.6 - The applying entity’s abuse response capabilities are resourced appropriately to ensure a timely and adequate investigation and response to reports of DNS Abuse. This includes capabilities to receive and evaluate evidence of DNS Abuse in reports, and to take action to stop or disrupt the DNS Abuse. SC5.2-1.7 - The applying entity is prepared to conduct periodic scans of its zone to identify if domains are being used to perpetrate DNS Abuse, and to maintain statistical reports of the scans, the findings, and actions taken.
Q5.2-1 - Provide the applying entity’s self-certification document, signed by the CEO, President, CFO and/or equivalent officer of the applying entity. The self-certification document must represent and warrant: SC5.2-1.1 - The applying entity will, no later than delegation of the Top Level Domain (TLD), establish a dedicated abuse point of contact responsible for addressing matters requiring expedited attention and providing a timely response to abuse complaints concerning any name registered in the TLD. SC5.2-1.2 - The applying entity will, no later than delegation of the TLD, establish, publish, and provide to ICANN the location of a mechanism for members of the public to submit reports of abuse in accordance with the current obligations of the Base RA and any Consensus Policies. SC5.2-1.3 - The applying entity has developed proposed measures for removal of orphan glue records for names removed from the zone when provided with evidence in written form that the glue is present in connection with malicious conduct (see Specification 6). SC5.2-1.4 - The applying entity has or will have at time of delegation, established policies for handling complaints regarding abuse. Such policies are to be maintained and posted publicly so that anyone can review the policies via the Internet and any other means deemed appropriate by the applying entity. The applying entity’s policies at a minimum should contain appropriate confirmation of the receipt of the abuse report, the process of review of the report, and actions that will be taken if the applying entity confirms the report is legitimate. SC5.2-1.5 - The applying entity understands that DNS Abuse is Phishing, Malware, Botnets, Pharming and Spam (when used to deliver other forms of DNS Abuse). The applying entity understands and is prepared to contribute to the mitigation or disruption of DNS Abuse in domains in the TLD zone. SC5.2-1.6 - The applying entity’s abuse response capabilities are resourced appropriately to ensure a timely and adequate investigation and response to reports of DNS Abuse. This includes capabilities to receive and evaluate evidence of DNS Abuse in reports, and to take action to stop or disrupt the DNS Abuse. SC5.2-1.7 - The applying entity is prepared to conduct periodic scans of its zone to identify if domains are being used to perpetrate DNS Abuse, and to maintain statistical reports of the scans, the findings, and actions taken.
Answered with a document. Attachments are not published by ICANN.
Q121As per Section 3(d) of Specification 11 of the Base Registry Agreement, a registry operator of a “generic string” may not impose eligibility criteria for registering names in the TLD that limit registrations exclusively to a single person or entity and/or that person’s or entity’s “Affiliates” (as defined in Section 2.9(c) of the Registry Agreement). “Generic String” means a string consisting of a word or term that denominates or describes a general class of goods, services, groups, organizations or things, as opposed to distinguishing a specific brand of goods, services, groups, organizations or things from those of others. Confirm that the applied-for string is not a “generic string” in which the applying entity intends to limit registrations exclusively to a single person or entity.
As per Section 3(d) of Specification 11 of the Base Registry Agreement, a registry operator of a “generic string” may not impose eligibility criteria for registering names in the TLD that limit registrations exclusively to a single person or entity and/or that person’s or entity’s “Affiliates” (as defined in Section 2.9(c) of the Registry Agreement). “Generic String” means a string consisting of a word or term that denominates or describes a general class of goods, services, groups, organizations or things, as opposed to distinguishing a specific brand of goods, services, groups, organizations or things from those of others. Confirm that the applied-for string is not a “generic string” in which the applying entity intends to limit registrations exclusively to a single person or entity.
true
Q222If the applying entity wishes to provide any additional information or supporting materials that the applying entity believes may be of interest to the public or relevant to the application, please include them here.
If the applying entity wishes to provide any additional information or supporting materials that the applying entity believes may be of interest to the public or relevant to the application, please include them here.
Zero Gravity Labs provides this supplementary information on the relationship between the applied-for TLD .AGI and its existing Web3 TLD counterpart, .AGENT, on Unstoppable Domains' Web3
naming infrastructure. It does not modify, and is not incorporated into, the applying entity's binding commitments elsewhere in this application.
Although .AGI and .AGENT do not share the same string, Unstoppable Domains treats .AGENT as .AGI's Web3 counterpart given the two namespaces' closely related subject matter, and makes the
commitments below on that basis.
Parallel Operation of the TLD and its Web3 TLD Counterpart
The TLD .AGI will operate in parallel with its Web3 counterpart, .AGENT, kept synchronized so that a Domain Name registered in one is, wherever practicable, held by the same registrant in the other. A name registered in only one namespace is blocked from third-party registration in the other, available only to the existing registrant.
Technical Compatibility of the Web3 Namespace
The Web3 TLD .AGENT is constrained to avoid technical incompatibility with the DNS or ICANN's
labeling rules:
● No registration string is permitted in the Web3 namespace that would violate ICANN's labelling rules — no emoji, no strings exceeding DNS label-length limits, none that would fail standard Punycode (xn--) conversion, and no non-ASCII characters a compliant IDNA implementation would reject.
● The Web3 namespace is a separate, non-DNS naming and resolution system; it neither publishes nor depends on DNS resource records.
● Where IPFS content addressing is used with the Web3 namespace, it is limited to file storage and retrieval; the applying entity does not use IPFS to host the Web3 name-resolution service itself.
Alignment with the Technical Study Group and the RSEP Process
ICANN's Technical Study Group on New gTLD Integrations with Alternative Naming Systems is examining the security/stability implications of integrating new gTLDs with alternative (e.g., blockchain-based) naming systems. Once awarded the TLD, the applying entity intends to pursue this parallel operation model through ICANN's RSEP process, consistent with whatever framework that work
produces, and will keep its policies compatible with the finalized framework rather than treating this description as fixed.
Any future RSEP framework here may be designed around matching strings, which is not the case for .AGI and .AGENT; this pairing may fall outside it. The applying entity will nonetheless apply the same registrant matching and mutual-blocking approach voluntarily, outside the RSEP, and will separately pursue any RSEP or other ICANN process later made available for non-matching pairs.
Pre-Existing Rights Protection in the Web3 Namespace
The Web3 TLD .AGENT has been preemptively screened against WIPO/TMCH brand lists, with matching names blocked from registration there. Separately, Unstoppable Domains' Terms and Conditions already prohibit knowingly claiming or purchasing a Web3 Domain Name identical to a third party's brand or trademark. Any unresolved rights conflict can be addressed under that prohibition.
Launch Sequencing
Immediately after the TMCH Sunrise period, all then-existing Web3 Domain Names in .AGENT will be blocked from registration in the TLD, pending the sequence below:
● A valid Sunrise application matching an existing Web3 Domain Name will be reviewed, and the Web3 registration removed in favor of the Sunrise applicant unless both share common control, per the prohibition above.[https://unstoppable.ai/terms]
● Once Sunrise concludes — including resolution of any name contention — all remaining Web3 Domain Names will be registered as corresponding Domain Names in the TLD, to the same registrant.
● Where a Web3 registrant's data does not meet the TLD's registrant-data standards, that registrant will be asked to update it before, or promptly after, the corresponding Domain Name is registered in the TLD.
Q223By submitting this Application, the applying entity confirms that it is submitting this Application with a good faith (“bona fide”) intent to operate the gTLD for which it has applied, and that the applying entity has read and understands the provisions of Section 5.2.3.1 Prohibited Communications and Activities of the Applicant Guidebook regarding the New gTLD Program rules prohibiting certain communications and activities to prevent parties from privately resolving string contention among themselves.
By submitting this Application, the applying entity confirms that it is submitting this Application with a good faith (“bona fide”) intent to operate the gTLD for which it has applied, and that the applying entity has read and understands the provisions of Section 5.2.3.1 Prohibited Communications and Activities of the Applicant Guidebook regarding the New gTLD Program rules prohibiting certain communications and activities to prevent parties from privately resolving string contention among themselves.
true
Q224By submitting this Application, the applying entity confirms that it has read and understands the provisions of Section 5.2.3.1 Prohibited Communications and Activities of the Applicant Guidebook regarding the New gTLD Program rules prohibiting certain communications and activities to prevent parties from privately resolving string contention among themselves.
By submitting this Application, the applying entity confirms that it has read and understands the provisions of Section 5.2.3.1 Prohibited Communications and Activities of the Applicant Guidebook regarding the New gTLD Program rules prohibiting certain communications and activities to prevent parties from privately resolving string contention among themselves.
true