The accounts connected, and the providers this deployment can connect

Every grant (provider, account label, scopes, status, whether it can refresh itself, when its access token expires) — never a token — plus each provider’s readiness (an app registered or not) and the redirect URI to register. Connected accounts (docs/source-plane.md § Connected accounts): the brain as an outbound OAuth 2.1 client for the cloud connectors (gdrive, onedrive, dropbox). Answers a bare 404 until SOURCE_PLANE_ENABLED=1 and SOURCE_OAUTH_CLIENT=1; needs SOURCE_CREDENTIAL_ENCRYPTION_KEY — tokens are never stored in the clear.

Required scope: brain:admin.