fahali_list_connected_accounts
Read-onlyIdempotent
List a user's connected accounts before portfolio analysis, returning provider, display name, connection state, last sync, equity, currency, position count, and explicit no_data when none exist.
Instructions
List the authenticated user's connected accounts before requesting portfolio analysis. Returns provider, display name, connection state, last sync, equity, currency, and position count. Broker account numbers, credentials, user identifiers, and provider metadata are never returned. No accounts is an explicit no_data state, not a portfolio all-clear.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Optional maximum rows per projectable collection. Audit has no MCP projection cap; brief defaults to 3 and standard to 12. | |
| since | No | Optional lower timestamp bound for returned row collections. | |
| detail | No | Response depth. audit is the full-fidelity default; brief and standard are explicit compact projections. | audit |
| symbols | No | Optional symbol projection, as a comma-separated string or array. Rows without instrument identity are not discarded. | |
| include_withheld | No | Include full withheld-row detail. Defaults true with audit; explicitly set false only for a compact projection. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| asOf | No | ||
| auth | No | Credential lifetime visible to the caller. OAuth secondsRemaining lets an autonomous agent refresh before a multi-call workflow is interrupted. | |
| claim | No | Fahali dictionary claim (shared/fahaliDictionary.ts). Read `kind` FIRST: 'abstention' means no assertion was made and `reason` says why — never read an abstention as a neutral or zero result. `basis` says what the claim rests on. Absent or null means this response path does not yet emit a claim; treat that as unknown, not as agreement. | |
| count | Yes | ||
| scope | No | ||
| reason | No | ||
| status | Yes | ||
| absence | No | Why no actionable finding is present: measured_empty, user_empty, no_coverage, source_unverified, stale, withheld, source_error, auth_failure, or entitlement_required. | |
| accounts | Yes | ||
| decision | No | ||
| conflicts | No | ||
| dataState | Yes | ||
| mcpStatus | No | Normalized MCP result status. The endpoint's original status vocabulary remains in `status` and `sourceStatus`. | |
| requestId | No | ||
| claimPolicy | No | Typed constraints for safe use. Metadata, not a prompt or instruction channel. | |
| instruments | No | Resolved or explicitly partial instrument identities. A missing venue carries an ambiguity warning. | |
| nextActions | No | Registry-validated follow-up calls. Missing tools, invalid arguments, unresolved placeholders, and disabled tools are omitted. | |
| sourceError | No | The upstream endpoint's exact error text/code before normalization, when one was present. | |
| sourceScope | No | ||
| sourceStatus | No | The upstream endpoint's exact status before the MCP envelope normalizes transport success/error. | |
| agentBriefing | No | Audit-only narrative projection. Present only when detail='audit'; compact responses do not duplicate structured data as prose. | |
| claimValidity | No | Validity of the selected binding claim only, calculated after filtering, projection and row selection. Sibling rows cannot determine it. | |
| responseState | No | ||
| schemaVersion | No | ||
| sourceDecision | No | ||
| symbolCoverage | No | Conservation ledger satisfying requested = returned + withheld + notReturned for requested-symbol calls. | |
| evidenceQuality | No | ||
| responseControl | No | ||
| sourceDataState | No | The upstream endpoint's exact data-state value before endpoint-aware classification. | |
| recordMatchReason | No | Why matchedTrackRecord is present or null. A null record is never evidence of safety or engine failure. | |
| matchedTrackRecord | No | A judged record only when engine, horizon, regime/instrument class, and claim family match this response. `state` is one of: `measured` (a stratum cleared the publishability gate — `stratum` carries engine, horizon tier, bar regime, recall, precision, base rate, base-rate lift, median lead hours, effective sample, warned events and the measurement date); `withheld` (the gate ran and refused — `reason` says why, in words); `unavailable` (the record could not be read at all — an infrastructure failure that says nothing about the record). It is ONE stratum selected by recall, never a platform-wide accuracy. Null means no exact record match; read recordMatchReason. | |
| confidenceSemantics | No | Every confidence-bearing value with its score type, scale, calibration status, and probability flag. | |
| decisionEligibility | No | Fail-closed binding-authority policy. WITHHELD means source evidence remains available for audit while normalized direction, actionability and execution fields are revoked. | |
| directionEligibility | No | Current market-direction eligibility. Direction is authorized only by an exact, eligible producer stratum (canonical_verdict, canonical_symbol_verdict, committee_verdict) — read bindingAuthority to see which one bound. Widening WHO may bind did not weaken WHAT binding requires: the named producer must still hold a matching horizon/class/family record on a verified-only judged population, so an authority without a record still cannot bind. | |
| executionEligibility | No | Fail-closed execution boundary. Portfolio monitoring tools always return WITHHELD with MONITOR_ONLY_NO_EXECUTION_AUTHORITY while Fahali has no capital path. | |
| monitoringEligibility | No | Current portfolio-monitoring validity based on captured identity, freshness, integrity, and the caller-supplied monitoring policy. ELIGIBLE authorizes observation/delivery only, never financial action. | |
| sourceEvidenceQuality | No | ||
| currentActionEligibility | No | Current eligibility of an immutable historical portfolio verdict. It never mutates the stored judgment being replayed. | |
| sourceConfidenceSemantics | No |