An SEO consultant has asked (demanded) credentials to the web environment so he can do ... Whatever it is that they do.
I'm new to the company but an experienced Systems Engineer. I've just now been brought into this situation, but my reaction to giving him credentials is a pretty solid "No" unless he can provide a compelling reason, which is yet forthcoming. Before I was brought into this, he had been provided an archive of the relevant files, but he said that this was insufficient.
The (admittedly) little that I know about SEO tells me that he should be able to get everything that he wants should be able to be gathered from view source
or a copy of the files, and we would implement his changes in a production deploy after review.