Credentials are verified by CREATE SOMETHING Identity. Agent keys remain server-side and the app applies its own explicit staff allow rules after authentication.
Sign in to your account