Access is invite-only. One-time codes are only sent after the server checks the Supabase invite allowlist.