Start linking a new institution. Returns a Plaid link_token the user completes in their browser, then calls link_complete with the public_token.

Exchange a public_token (from completed Plaid Link) for a permanent access_token. Stores token in macOS Keychain. Caches institution + accounts metadata in SQLite.

List all linked institutions with their last-sync timestamps and keychain status. Does NOT return any access tokens.

Remove a linked institution. Revokes the Plaid item, deletes the keychain entry, and clears local SQLite state.

Pull current balances for all linked institutions (or one specific alias) and write the auto-sync block in Accounts.md.

Pull investment holdings (stocks, ETFs, mutual funds, bonds) and write the auto-sync block in Investments.md.

Skipped silently for institutions that don't support the Plaid investments product (most checking-only banks).

Cursor-based transaction sync. First run pulls historical; subsequent runs pull only the delta. Stores raw transactions in SQLite. Use rollup_month to write the Cash Flow.md monthly summary afterward.

Pull credit-card APRs, minimums, statement balances, and student-loan payoff info. Skipped silently for institutions that don't support the Plaid liabilities product.

Convenience: balances + holdings + liabilities + transactions in sequence. Use this for daily / on-demand full refresh.

Compute income / expense / by-category totals for a given YYYY-MM from the SQLite transaction store, then write the auto-sync block in Cash Flow.md.

Verify the MCP's runtime config: Plaid creds, vault path, finance folder, keychain access, SQLite state. Returns a green/yellow/red summary with explicit blockers if any.

Return the last N audit-log entries. Every Plaid call and every keychain operation is recorded.