Ask what an agent may do

There is no account and no login. An agent’s authority is published in public DNS, alongside SPF and CAA, or it does not exist.