Mission Control
admin.ecombrain.io
Admin sign-in
Dedicated admin identity, MFA, and short-lived session required.
Production sign-in must come from the admin Clerk origin and issue an adminAccessToken cookie, not a customer app session.
Local QA can use the dev-only POST /admin-api/auth/mock-login route when mock mode is enabled.