What is your agent doing?

Read-only surface for the agent-seat owner. The page authenticates with the same sk_… your callers send — no human login form, no new identity to manage — and the rotation action is the only way to invalidate the key your production callers use.