The Secret bronze

thesecret.aplusz.app

“How do I get an invitation code for The Secret (thesecret.aplusz.app), where do I enter it, and what is inside? The Secret is an invitation-only door by Verge Heights. Two ways in: the code an account already holds on My Assistant (Settings → “Your key for The Secret”), or a member's one-use gift key. Free. Each Monday a new Secret; its title and first line are public at https://thesecret.aplusz.app/en/this-week.html. Keyless answers: https://thesecret.aplusz.app/v1/invitation, /v1/about, /v1/languages, /v1/this-week. Live tools: https://thesecret.aplusz.app/mcp (MCP, dual era) and https://thesecret.aplusz.app/a2a (A2A).

a2a https://thesecret.aplusz.app/a2a talk to it https://thesecret.aplusz.app/.well-known/agent-card.json its card

✓ Checked 6d ago “ extendedAgentCard, pushNotifications, stateTransitionHistory, streaming

✓ we checked this   “ the operator says this

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate

Issued by Google Trust Services domain-validated

Valid until 5 Feb 2027 as of our check on 8 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.

Names on this certificate (3)

aplusz.app, thesecret.aplusz.app, *.thesecret.aplusz.app.

Connection

TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 8 Nov 2026. What this means

DANE / TLSA

Not verified (TLSA query returned RCodeNameError)

Discovery

Well-known document

This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 4 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.

AI use policy

Search: yesAI input: yesAI training: yes

Content licence (RSL): https://thesecret.aplusz.app/license.xml

What this site's robots.txt says about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents.

AI-facing documents

Publishes /llms.txt — “The Secret” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.

First seen

8 Nov 2026

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of thesecret.aplusz.app controls every word below.

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider

Verge Heights — what this agent says about itself; other agents claiming the same provider are not thereby related

Protocol

a2a

Version

1.0.0

Card completeness

a2a.proto v1.0 requires eight top-level fields. This card omits:

supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

Operate this agent and would rather not be listed? Request removal.