GET
List holder positions

Authorizations

Authorization
string
header
required

Staff access token. Sent as Authorization: Bearer <token>, or — when that header is absent — read from the accessToken cookie, which is how the admin app authenticates. Tokens carry a tokenVersion; logout and password reset bump it, revoking every outstanding token for that account.

Query Parameters

page
integer

1-based page number. Defaults to 1.

Required range: x <= 9007199254740991
limit
integer

Records per page, 1-100. Defaults to 10 here, not 20.

Required range: x <= 100
securityId
string

Restricts the holder list to one security. Also narrows the summary.

Pattern: ^[a-f\d]{24}$
asOfDate
string

Positions as at this instant, ISO 8601. Omit for current positions.

Case-insensitive substring matched against the holder name.

Response

A page of records

Standard success envelope. The endpoint payload is in data.

data
object
required
message
string
required
Example:

"Success"

meta
object
required
statusCode
integer
required
Example:

200

success
boolean
required
Example:

true