Domain control
The publisher added a unique verification record to their domain’s DNS, which only someone who controls that domain can do. So the domain shown next to the badge really is theirs.
Verified publisher
It tells you who published an agent — not that the agent is safe.
A “Verified publisher” has proven they control the domain or GitHub organization shown next to their name. That confirms their identity. It is not a safety review of the agent itself — for that, read the security facts on each agent’s page.
How identity is proven
A publisher earns the badge one of two ways. Both are things only the real owner can do, so the badge can’t be claimed for a domain or organization someone doesn’t control.
GitHub organization ownership
The publisher signed in with GitHub, and we confirmed they are an owner or admin of the organization they claim. So the organization shown next to the badge really is theirs.
What the badge does not mean
- It does not mean the agent is safe, audited, or certified by FindAgent.
- It does not replace the per-listing security facts — always check what an agent can do, where your keys go, and whether it was scanned and human-reviewed on its own page.
- It says nothing about quality, reliability, or whether the agent is right for you.
In short: the badge answers “who published this?” — not “is this safe?”. Read the security guarantees to see what every agent is held to, verified publisher or not.