[makeitfutureDev]

User and channel pages currently show whether a Composio key is saved without showing which apps or accounts it reaches. Add read-only account lists to the Users drawer and conversation MCP Connections tab, showing application, account label/available identity, status, default/type metadata, counts and connection source, with refresh controls.

Personal connections stay personal; shared connections resolve channel → organization and honor no-defaults and DM suppression. SDK inventory uses the existing Enterprise entitlement and exact stable identity, with pagination and no SDK-session or authorization creation. Personal inventory reads Composio's published app declaration and queries each app's reported accounts; its visible limitation explains that unpublished/inactive connections may be absent. Missing discovery and failures are explicit unavailable/partial states. Responses allowlist account metadata, scrub known keys, and omit credential/business payloads. Lookups have bounded concurrency and a one-minute overall deadline.

Validation:

• Full coverage suite: 3,884 tests, 3,850 passed, 34 optional/live skips, 0 failed. Coverage: lines 94.27%, branches 86.29%, functions 90.10%.
• New focused inventory/UI/route cases: 32 passed, covering scope, authentication, pagination, privacy, errors, deadlines and refresh races.
• Static checks, secret scan, security coverage and DCO passed.
• Chromium source-fixture checks at desktop 1440×1100 and mobile 390×844 passed with real templates/styles and controlled API data; no page overflow or JavaScript errors.
• Acceptance definitions and reproduction steps added; live production account verification remains unexecuted. These admin metadata reads are engine-independent.