Company skill DNS

Your agents resolve acme/*

Public Orrery is gravity. Private namespaces are the business — scoped stars, audit retention, and no install on every laptop.

Create namespace See public resolve

Resolve only

acme/pdf, acme/release-gate — live endpoints your fleet already trusts.

Keys & scopes

Machine budgets, allowlisted callers, Envelope retention for audit — not another GitHub org full of READMEs.

Private by default

Competitors don't scrape your catalog. Agents still get zero-setup access from any harness you authorize.

Example resolve

acme/release-gate
  → mcp://acme.orrery.lol/s/release-gate
  → digest sha256:77d0…
  → constellation: secret-scan → license → human-approve
  → namespace: private · seats billed monthly