List a managed investor's holdings
GET/v1/investors/:investorId/holdings
Returns a page of the investor's portfolio positions — one row per cooperative with the current share count, oldest position first — as a paged envelope: items plus page, size, total_items, total_pages, has_next, has_previous. page is 1-based (default 1) and size defaults to 20 and is capped at 100 — a larger size is silently clamped to the cap rather than rejected. 404 if the investor is not owned by the partner.
Request
Responses
- 200
- 401
- 403
- 404
- 429
OK
Response Headers
Requests permitted per minute for the authenticated API client.
Requests still available in the current window. The bucket refills continuously, so this rises as you go rather than resetting on a boundary.
Seconds until the budget is back to its full limit. Not the wait for the next single request — that is Retry-After on a 429.
Missing or invalid access token.
Token lacks a scope this endpoint requires. The body carries code: INSUFFICIENT_SCOPE and a required_scopes array naming what is missing; the response also carries WWW-Authenticate: Bearer error="insufficient_scope", scope="…". A 403 with code: FORBIDDEN is a different failure and adding scopes will not fix it.
Not found — the resource does not exist, or does not belong to the calling partner. Acting on an investor another partner owns also returns 404 (no cross-tenant existence oracle).
Rate limit exceeded — 600 requests a minute per API client. Unlike every other 4xx here, the request itself is fine: sleep for the Retry-After seconds given and resend it unchanged. See https://docs.valueverde.de/docs/rate-limits.
Response Headers
Requests permitted per minute for the authenticated API client.
Requests still available in the current window. The bucket refills continuously, so this rises as you go rather than resetting on a boundary.
Seconds until the budget is back to its full limit. Not the wait for the next single request — that is Retry-After on a 429.
Seconds to wait before resending. Always at least 1.