How access works.

Email and password. Authenticator 2FA is optional and uses a TOTP app plus backup codes.

Each account gets an organization. Owners and admins issue gateway keys for that organization.

The Aerogate admin key stays on the server. The browser never receives it.