You do. You receive the repository, the documentation and access to every service we set up.
Usually yes – for accounts, content or data. A headless CMS such as Directus is often enough; more complex logic becomes its own API.