Admin access is gated by an on-chain role in the SentinelAccess smart contract. You'll sign a message to prove ownership; the server verifies both the signature and your ADMIN_ROLE before granting access.