Probably there's a good and obvious reason here (like legal problems?), but I don't see it right off...
Would it not be effective to capture and parse the q*n transactions at setup ? Or is the needed data not available until you send a valid ID/pswd? Wouldn't the handshaking require most of the OFX data?
Rufus