> ## Documentation Index > Fetch the complete documentation index at: https://docs.0xinsider.com/llms.txt > Use this file to discover all available pages before exploring further. # List games > One coherent game view per row: both sides with their provider ids and live scores, the UTC kickoff, the provider's own status, the esports series format, and every linked Polymarket market with its condition id and outcome token ids. Built from the same provider-first live and upcoming projections the site's sports boards use, so a request pays no provider fan-out of its own. Ordered by kickoff, then by event_slug; games whose kickoff the provider has not published sort last. coverage names the sports and leagues this deployment serves and any scope whose source was unavailable for the read, so an empty page is never ambiguous. A sport or status outside the published vocabulary returns an empty page rather than a 400. Carries the board's existing competitor-bound provider moneyline price state by default, with an observation clock and explicit incomplete or invalid state. It does not fetch another provider endpoint. Sharp-money splits and holder identities remain on their own gated routes. One row per game: both sides, the kickoff, the provider's status, and every linked Polymarket market with its classified moneyline price state. Use this instead of matching team-name strings across market searches and fetching each price separately. The catalog is live. It is built from the same provider-first live and upcoming projections the 0xinsider sports boards use, so a request pays no provider fan-out of its own. ## Identity `event_slug` is the game's identity, for example `nfl-buf-nyj-2026-09-22`. It is the key [`GET /api/v1/games/{event_slug}`](/api-reference/endpoint/get-game) takes and the key the `live_sports_updated` webhook event carries, so a receiver can read the full game straight from a pulse. `game_id` is the provider's Gamma `gameId`. It is absent when the canonical owner has no single value for the slug: the provider stamps one `gameId` across an event's derivative markets, so an ambiguous read is reported as unknown rather than resolved by a rule. ## Both sides `competitors` is the two sides in the provider's own order. For a team league the provider lists the home side first. | Field | What it is | | ------------- | ------------------------------------------------ | | `name` | The competitor's name as the provider gives it | | `provider_id` | The provider's league-scoped id, as a string | | `logo` | Provider crest or logo URL | | `score` | The provider's score, verbatim, as a string | | `record` | The provider's season record, for example `12-4` | `score` is a string because the provider sends one. A set score, a map score and a run total are not all integers. Read `coverage.competitors` before you join on anything. `provider_ids` means every side carries an id. `labels` means only the provider's names identify them, so a name join is the only option and it can be wrong. `unavailable` means the provider identified neither side. ## Status `status.state` is one of `scheduled`, `live`, `paused`, `ended`, `postponed`, `cancelled`, `suspended`, `delayed` or `unknown`. A postponement, a cancellation and a suspension keep their own state. Folding them into "not live" loses the difference between a game that will be played later and one that never will be. A kickoff in the past is never read as live on its own. `status.state` stays `scheduled` until the provider moves it, because that is exactly the case where a guess would invent a live game. `status.match_status` is the provider status folded onto one vocabulary across leagues. `status.provider_status` keeps the provider's own string, verbatim, so `match_status: "unknown"` still tells you what arrived. ## Markets `markets` is every market this read linked to the game, ordered by `condition_id`. | Field | What it is | | --------------------------- | -------------------------------------------------------------------------------------------- | | `id` | The `mkt_`-prefixed id every other V1 response uses | | `condition_id` | The raw provider condition id | | `sports_market_type` | The provider's own type, for example `moneyline` or `spread` | | `side` | Which side the YES leg pays: `home`, `away`, `draw` or `other` | | `outcome_yes`, `outcome_no` | The provider's outcome labels | | `outcome_token_ids` | CLOB token ids in the provider's own index order | | `prices` | Provider moneyline state and observation clock, when this market has a classified projection | `draw_offered` says whether the game has a draw leg at all. Do not assume a two-outcome moneyline: a soccer 1X2 game has three. ## Market prices `markets[].prices.provider.state` is `paired`, `incomplete` or `invalid`. A paired state carries `competitor_a` and `competitor_b`, each with a price, provider id when available, label and price provenance. `binding_provenance` says how the board matched those legs to competitors; use that identity instead of reinterpreting YES and NO. An incomplete or invalid state carries `reason` and any identity facts the provider supplied, with no guessed price pair. `prices.observed_at` is the board cache vintage for a Gamma-backed projection or the older of the two CLOB leg clocks for a CLOB display pair. `prices.observation_source` names that basis. A null clock means no reliable observation time, not an observation made now; Gamma does not provide a source-side timestamp for this projection. The game's `freshness` block describes the board half that supplied it. Markets with no classified moneyline projection omit `prices`. ## Coverage Every page carries a top-level `coverage` with `sports`, `leagues` and `sources_unavailable`. An empty `data` with a full `coverage` means no games matched; an empty `data` with your sport missing from `coverage.sports` means the sport is not served. A `sport` or `status` outside the published vocabulary returns an empty page, never a `400`. `sources_unavailable` names any scope whose source half did not answer this read, as `:`. ## Ordering and paging Ordered by kickoff, then by `event_slug`. Games the provider has published no kickoff for sort last. The `gms_v1_` cursor pins the page position, not a snapshot. The catalog is live, so a game added or removed between pages moves with it. ## Example ```bash theme={null} curl -sS \ -H "Authorization: Bearer $OXINSIDER_API_KEY" \ 'https://api.0xinsider.com/api/v1/games?sport=Soccer&status=live&limit=20' ``` ## What it does not return * Order books, midpoints or a market-specific price history. Use [`GET /api/v1/market/{condition_id}/snapshot`](/api-reference/endpoint/get-market-snapshot) for its fuller market card. * Sharp money splits or holder identity. Those stay on [`GET /api/v1/markets/sharp-money-flows`](/api-reference/endpoint/sharp-money-flows) and [`GET /api/v1/market/{condition_id}/holders`](/api-reference/endpoint/get-market-holders) under their own access rules. * Every Polymarket sports event. `coverage.sports` and `coverage.leagues` name what this deployment serves; a game outside them is not in this catalog. * A derived or normalized score. Scores are the provider's strings, and a game with no live-score frame reads `coverage.scores: "unavailable"` rather than zero. ## OpenAPI ````yaml GET /api/v1/games openapi: 3.1.0 info: x-generated-rate-limit-policy-from: web/src/lib/rate-limit-facts.ts via web/scripts/generate-api-policy.ts title: 0xinsider API description: >- Follow provider-exposed large-trade activity from Polymarket. Polymarket wallet-attributed trades can add grades, P&L, strategy, and diagnostic-score context when sufficient source data exists. Fields can be null or unavailable. Normal API requests use a 30-second server timeout that returns HTTP 408 Request Timeout with the standard error envelope (error.code request_timeout) when exceeded. Every /api/v1 failure answers that envelope, including a body that is not JSON or does not fit the request schema (400 invalid_body), a query or path value that does not parse (400 invalid_query, invalid_path), a missing Content-Type: application/json (415 unsupported_media_type), a body over 1048576 bytes (413 payload_too_large) and a method the path does not serve (405 method_not_allowed), each with error.param naming the field where one is known and meta.request_id equal to X-Request-Id. Unknown query names are ignored by default and reported in X-Query-Ignored, while X-Effective-Query lists the normalized names and values applied using form-urlencoded decoding, where + is a space; strict mode returns 400 bad_request with error.reason unknown_query_parameter before the handler runs, including for an unknown name with an incomplete percent escape. Public REST /api/v1/* endpoints, excluding /api/v1/mcp, use Bearer-token based non-credentialed browser CORS: any Origin may call with Authorization, Content-Type, If-None-Match, Idempotency-Key, Mcp-Session-Id, Mcp-Protocol-Version, Last-Event-Id, and X-Query-Validation request headers. X-Query-Validation: strict opts into rejecting unknown query names; the default remains compatible. Remote MCP at /api/v1/mcp is non-credentialed, but still validates Origin against the 0xinsider/localhost allowlist per MCP Streamable HTTP DNS-rebinding guidance. Successful browser CORS preflight responses advertise Access-Control-Max-Age: 86400. Browser JavaScript may read RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, the legacy X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, Retry-After, ETag, X-Request-Id, X-Request-Cost, X-Usage-Accounting, X-Batch-RateLimit-Limit, X-Batch-RateLimit-Remaining, X-Batch-RateLimit-Reset, Mcp-Session-Id, X-Mcp-Error-Code, X-Query-Ignored, and X-Effective-Query response headers. Rate-limit headers describe the budget a request was counted against: the API key's per-minute window on an authenticated call, and the per-IP budget on a public route or on a refused credential (401, 402, 403, 423), so a client looping on a bad or lapsed key still sees how much room it has. Conditional GET: these operations return a weak ETag and answer If-None-Match with 304 Not Modified and an empty body: GET /api/v1/health, GET /api/v1/insider-radar, GET /api/v1/insider-radar/{id}, GET /api/v1/large-positions, GET /api/v1/leaderboard, GET /api/v1/leaderboard/trending, GET /api/v1/market/{condition_id}/candles, GET /api/v1/market/{condition_id}/flow, GET /api/v1/market/{condition_id}/intel, GET /api/v1/market/{condition_id}/snapshot, GET /api/v1/markets/explore, GET /api/v1/markets/sharp-money-flows, GET /api/v1/markets/smart-money-flows, GET /api/v1/pick-of-the-day, GET /api/v1/pick-of-the-day/archive, GET /api/v1/positions, GET /api/v1/sports-edge-observations, GET /api/v1/sports-edge-signals, GET /api/v1/trader/{address}, GET /api/v1/trader/{address}/context, GET /api/v1/trader/{address}/pnl, GET /api/v1/trader/{address}/position-timeline, GET /api/v1/traders/{trader}/position-timeline, GET /api/v1/whale-trades, GET /api/v1/whale-trades/history, GET /api/v1/whale-trades/{id}, GET /api/v1/whale-trades/{id}/counterparties/executions, GET /api/v1/whale-trades/{id}/counterparties/executions/{execution_id}/makers. Credentialed first-party routes such as /api/keys, /api/billing, and auth endpoints remain restricted to configured 0xinsider origins. Protected V1 responses, except the zero-cost /api/v1/usage route, after handler execution carry X-Usage-Accounting: persisted, failed, or unknown. This reports the usage-record write; it does not change the handler result. Do not replay a successful mutation to repair an unknown usage record. Before execution, unavailable accounting capacity returns HTTP 503 with error.reason=request_accounting_unavailable; honor Retry-After. Public API responses add the browser-readable Server-Timing header: Processing time in milliseconds, for example api;dur=12.345. Includes API authentication, quota admission, handler work and response construction. Excludes network transit and streamed body or export-file transfer. The engineering budget is strictly below 250 ms; this header reports observations, not a latency guarantee or a new timeout. version: 1.0.0 contact: name: 0xinsider email: support@0xinsider.com url: https://0xinsider.com servers: - url: https://api.0xinsider.com description: >- Production (live data). Authenticate with a live key (oxi_sk_live_...); requires an active Pro subscription. A sandbox key (oxi_sk_test_...) is answered with 401 invalid_api_key and error.reason sandbox_api_key. - url: https://0xinsider.com/sandbox description: >- Sandbox. No credential required and no production data: every documented operation answers with its documented example or a deterministic sample of its response schema. GET /api/v1/stream is the one exclusion and answers 400 there, because a Server-Sent Events stream is a live connection rather than a body. Add ?sandbox_status= to receive one of the error responses the operation documents (for example 429 with Retry-After). Documented query parameters and JSON request bodies are checked against this document, the two context.md routes answer 200 text/markdown, GET /api/v1/trader/{address}/export/download answers its 302 with a Location the sandbox serves itself rather than an object store, and nothing is stored between requests. A sandbox key (oxi_sk_test_..., issued with no account by POST https://api.0xinsider.com/api/v1/agents/register) is optional: on an operation that requires a credential, a well-formed key is answered with X-Oxi-Sandbox-Key: valid and a malformed one with 401 invalid_api_key. security: - bearerAuth: [] - oauth2: - read tags: - name: Traders description: Traders, batch lookups, timelines, and export readiness. - name: Positions description: Current prediction-market position snapshots from backend-owned mirrors. - name: Large Positions description: Largest current open positions from graded traders (Polymarket-only). - name: Large trades description: Recent and historical large trades. - name: Leaderboard description: Ranked trader discovery and category/strategy leaderboards. - name: Pick of the Day description: >- One sourced sharp-money call a day: the side profitable wallets are backing, with pre-game odds, the holders, and the track record. - name: Games description: >- Sports and esports games: both sides, schedules, provider status and the Polymarket markets linked to each game. - name: Markets description: Market search, discovery, snapshots, and sharp-money flow. - name: Content description: Search across 0xinsider editorial content. - name: Suspicious trades description: Trades whose recorded suspicion score meets the live flag threshold. - name: Insider Radar description: >- Deprecated spelling of Suspicious trades; both operations stay live as aliases. - name: Events description: Durable public event replay streams. - name: Streaming description: Resumable real-time Server-Sent Events stream of live feed envelopes. - name: Webhooks description: Signed builder webhook destinations and delivery controls. - name: Usage description: Developer API budget and usage introspection. - name: Onboarding description: >- Self-serve agent registration: a sandbox key with no account, and the path to live access. - name: System description: Health and operational status checks. - name: MCP description: Remote Model Context Protocol transport. - name: Reports description: Daily, weekly, monthly, and trader export report snapshots. - name: Account description: Identify the account and credential authenticated for a paid API request. externalDocs: description: 0xinsider API docs url: https://docs.0xinsider.com paths: /api/v1/games: get: tags: - Games summary: List covered games description: >- One coherent game view per row: both sides with their provider ids and live scores, the UTC kickoff, the provider's own status, the esports series format, and every linked Polymarket market with its condition id and outcome token ids. Built from the same provider-first live and upcoming projections the site's sports boards use, so a request pays no provider fan-out of its own. Ordered by kickoff, then by event_slug; games whose kickoff the provider has not published sort last. coverage names the sports and leagues this deployment serves and any scope whose source was unavailable for the read, so an empty page is never ambiguous. A sport or status outside the published vocabulary returns an empty page rather than a 400. Carries the board's existing competitor-bound provider moneyline price state by default, with an observation clock and explicit incomplete or invalid state. It does not fetch another provider endpoint. Sharp-money splits and holder identities remain on their own gated routes. operationId: listGames parameters: - name: X-Query-Validation in: header required: false description: >- Opt into strict query-name validation. The default is compatible: unknown names are ignored and reported in X-Query-Ignored. With strict, an unknown name returns 400 bad_request with error.reason unknown_query_parameter before the handler runs, including when its percent escape is incomplete. schema: type: string enum: - strict - name: sport in: query required: false description: >- Canonical sport bucket, case-insensitive, with - and _ read as a space: table-tennis and Table Tennis are the same bucket. Omit for every covered sport. A bucket this deployment does not serve returns an empty page. schema: type: string - name: league in: query required: false description: >- League tag, case-insensitive, as coverage.leagues spells it: nfl, epl, cs2. Omit for every league inside the selected sports. schema: type: string - name: status in: query required: false description: >- Keep only games in this state. A value outside the enum returns an empty page. schema: type: string enum: - scheduled - live - paused - ended - postponed - cancelled - suspended - delayed - unknown - name: starts_after in: query required: false description: >- RFC 3339 instant. Keep only games whose kickoff is at or after it. Games with no published kickoff are excluded whenever either bound is set. schema: type: string format: date-time - name: starts_before in: query required: false description: >- RFC 3339 instant. Keep only games whose kickoff is at or before it. Must be at or after starts_after. schema: type: string format: date-time - name: limit in: query required: false description: Page size. schema: type: integer minimum: 1 maximum: 100 default: 20 - name: cursor in: query required: false description: >- Opaque gms_v1_ cursor from next_cursor. It pins the page position (kickoff and event_slug), not a snapshot: the catalog is live, so a game added or removed between pages moves with it. A cursor this endpoint did not issue returns 400 with error.param=cursor. schema: type: string - name: If-None-Match in: header required: false description: >- Conditional GET using a weak semantic ETag from an earlier response. A matching payload returns 304 with an empty body; request_id, cost and as_of are excluded from the validator, so a rebuilt but unchanged catalog still revalidates. schema: type: string responses: '200': description: A page of covered games with the deployment's published coverage headers: X-Query-Ignored: $ref: '#/components/headers/X-Query-Ignored' X-Effective-Query: $ref: '#/components/headers/X-Effective-Query' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' X-RateLimit-Limit: $ref: '#/components/headers/X-RateLimit-Limit' X-RateLimit-Remaining: $ref: '#/components/headers/X-RateLimit-Remaining' X-RateLimit-Reset: $ref: '#/components/headers/X-RateLimit-Reset' X-Request-Id: $ref: '#/components/headers/X-Request-Id' ETag: $ref: '#/components/headers/ETag' X-Usage-Accounting: $ref: '#/components/headers/X-Usage-Accounting' Server-Timing: $ref: '#/components/headers/Server-Timing' content: application/json: schema: type: object required: - object - data - has_more - as_of - coverage - meta properties: object: type: string const: list data: type: array items: $ref: '#/components/schemas/Game' has_more: type: boolean next_cursor: type: string description: >- Pass as cursor for the next page. Present only when has_more is true. as_of: type: string format: date-time description: >- When this read assembled the catalog. Per-source vintage is on each game's freshness. coverage: $ref: '#/components/schemas/GamesCoverage' meta: $ref: '#/components/schemas/ResponseMeta' example: object: list data: - object: game event_slug: nfl-buf-nyj-2026-09-22 game_id: '70898594' sport: Football league: nfl title: Bills vs. Jets scheduled_at: '2026-09-23T00:15:00Z' status: state: live match_status: in_progress provider_status: InProgress period: Q3 clock: '7:21' live: true ended: false competitors: - name: Buffalo Bills provider_id: '2' logo: >- https://polymarket-upload.s3.us-east-2.amazonaws.com/nfl-buf.png score: '17' record: 2-0 - name: New York Jets provider_id: '20' logo: >- https://polymarket-upload.s3.us-east-2.amazonaws.com/nfl-nyj.png score: '10' record: 0-2 draw_offered: false markets: - id: >- mkt_0x2f1c0c9d5f3b4a7e8d6c5b4a39281706f5e4d3c2b1a09f8e7d6c5b4a39281706 condition_id: >- 0x2f1c0c9d5f3b4a7e8d6c5b4a39281706f5e4d3c2b1a09f8e7d6c5b4a39281706 platform: polymarket slug: nfl-buf-nyj-2026-09-22 sports_market_type: moneyline side: home outcome_yes: Buffalo Bills outcome_no: New York Jets outcome_token_ids: - >- 21742633143463906290569050155826241533067272736897614950488156847949938836455 - >- 48331043336612883890938759509493159234755048973500640148014422747788308965732 freshness: source: live source_status: ok source_availability: available source_freshness: fresh source_observed_at: '2026-09-23T01:12:04Z' source_age_seconds: 3 delayed: false scores_observed_at: '2026-09-23T01:12:03Z' scores_source_at: '2026-09-23T01:12:02Z' coverage: scores: available competitors: provider_ids schedule: available url: https://0xinsider.com/event/nfl-buf-nyj-2026-09-22 has_more: true next_cursor: >- gms_v1_eyJ2IjoxLCJyYW5rIjowLCJhdF9tcyI6MTc4OTA5NDkwMDAwMCwic2x1ZyI6Im5mbC1idWYtbnlqLTIwMjYtMDktMjIifQ as_of: '2026-09-23T01:12:07Z' coverage: sports: - Baseball - Basketball - Boxing - Cricket - Esports - Football - Hockey - MMA - Pickleball - Soccer - Table Tennis - Tennis leagues: - bel1 - brasileirao - bundesliga - cfb - cs2 - dota2 - epl - eredivisie - laliga - leagueoflegends - ligamx - ligaprofesional - ligue1 - mls - nba - nfl - nhl - primeiraliga - scop - seriea - tur - ucl - valorant - wnba sources_unavailable: [] meta: request_id: req_2f8c1a4e9b3d47f0 cached: false cost: 2 '304': description: >- Not Modified. Returned when If-None-Match matches the current payload. headers: X-Query-Ignored: $ref: '#/components/headers/X-Query-Ignored' X-Effective-Query: $ref: '#/components/headers/X-Effective-Query' ETag: $ref: '#/components/headers/ETag' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' X-RateLimit-Limit: $ref: '#/components/headers/X-RateLimit-Limit' X-RateLimit-Remaining: $ref: '#/components/headers/X-RateLimit-Remaining' X-RateLimit-Reset: $ref: '#/components/headers/X-RateLimit-Reset' X-Request-Id: $ref: '#/components/headers/X-Request-Id' X-Usage-Accounting: $ref: '#/components/headers/X-Usage-Accounting' Server-Timing: $ref: '#/components/headers/Server-Timing' x-empty-body: true '400': description: >- Bad request. error.param names the parameter: limit outside 1-100 or not an integer, starts_after or starts_before that is not an RFC 3339 instant, starts_after later than starts_before, or a cursor this endpoint did not issue. An unknown sport or status is not a 400; it returns an empty page. content: application/json: schema: $ref: '#/components/schemas/ApiError' '401': description: Missing or invalid API key content: application/json: schema: $ref: '#/components/schemas/ApiError' '402': description: >- Active Pro subscription required. The key is valid but the account has no active Pro subscription; error.reason is subscription_inactive and error.message names the reactivation URL (https://0xinsider.com/billing). Permanent until a person reactivates: no Retry-After, never retry on a schedule. content: application/json: schema: $ref: '#/components/schemas/ApiError' '403': description: Account access denied content: application/json: schema: $ref: '#/components/schemas/ApiError' '408': description: >- The handler did not answer inside the server's 30-second timeout. error.code is request_timeout. On GET and HEAD the response carries Retry-After and error.retry_at; on a mutation it carries neither, because the request may have completed on the server: check its state before repeating it, and reuse its Idempotency-Key. content: application/json: schema: $ref: '#/components/schemas/ApiError' '423': description: Account is locked content: application/json: schema: $ref: '#/components/schemas/ApiError' '429': description: >- Rate limit exceeded. Three independent budgets. (1) 100 requests/minute per user (sliding window), on every authenticated route. (2) On the BATCH routes only: 2500 batch item units/minute per user, reserved before any item is executed. A batch with N requested items costs N item units, including duplicate and invalid items. 2500 = 100 requests x 25 items per batch, which is the most item work a key can buy through the request limiter at all: a caller may spend their entire 100-request minute on full 25-item batches without the item budget being what stops them. The REQUEST budget is the effective ceiling, and batching is never the more expensive choice. The item budget can still deny at a sliding-window boundary (both counters carry the previous window forward with a floor, and the item counter runs 25x the request counter), so honor a 429 from either. Over-quota batches return 429 with Retry-After plus RateLimit-Limit, RateLimit-Remaining, and RateLimit-Reset before any item work is done. (3) The monthly quota: Pro includes 250,000 authenticated requests per UTC calendar month, whatever the billing cadence. Over 250,000: with pay as you go on, requests keep answering and the excess bills at USD 0.20 per 1,000 on a monthly invoice, up to 1,000,000 requests a month; without it, from October 1, 2026, the next request answers 429 rate_limited with error.reason monthly_quota_exceeded and a Retry-After to the month's reset, and from the same day a pay-as-you-go account answers the same past 1,000,000. A refused request is not counted. Every authenticated response carries X-Monthly-Quota-Limit, X-Monthly-Quota-Remaining, and X-Monthly-Quota-Reset (unix seconds, the first of next month). (4) The per-address budget: 1200 requests/minute per IP, shared by every caller behind one address and counted before authentication, on every route. A 429 from it carries error.reason ip_rate_limited and describes that bucket in RateLimit-*; a throttled address (sustained over-limit traffic) carries error.reason ip_throttled with a Retry-After of minutes to days, and a request before it does not shorten the cooldown. Every 429 is the standard error envelope with meta.request_id equal to X-Request-Id. headers: Retry-After: description: Seconds until rate limit resets. schema: type: integer RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' X-RateLimit-Limit: schema: type: integer X-RateLimit-Remaining: schema: type: integer X-RateLimit-Reset: schema: type: integer X-Request-Id: schema: type: string content: application/json: schema: $ref: '#/components/schemas/ApiError' '503': description: >- Temporarily unavailable. error.reason=read_model_warming means the sports board supply did not answer this read; Retry-After is 5 seconds and the next read normally succeeds. The authenticated rate limiter being unavailable answers the same status with its own per-process cooldown. content: application/json: schema: $ref: '#/components/schemas/ApiError' x-codeSamples: - lang: curl label: cURL source: |- curl -sS \ -H "Authorization: Bearer $OXINSIDER_API_KEY" \ 'https://api.0xinsider.com/api/v1/games?sport=Soccer&status=live&limit=20' components: headers: X-Query-Ignored: description: >- Comma-separated, percent-encoded query names the operation did not publish and therefore ignored in compatible mode. Names are sorted and de-duplicated. schema: type: string X-Effective-Query: description: >- Normalized, percent-encoded query string containing only the recognized names and values applied by the operation. Query names and values use form-urlencoded decoding, where + is a space. Repeated names are retained and sorted by name. schema: type: string RateLimit-Limit: description: >- Request limit of the budget this request was counted against, for its current window: the API key's per-minute sliding window on an authenticated call; the per-IP budget on a public route and on a refused credential (401, 402, 403, 423), which never reaches the per-key limiter. Standard RateLimit header spelling. schema: type: integer example: 100 RateLimit-Remaining: description: >- Requests remaining in that budget's current window after this response. Standard RateLimit header spelling. schema: type: integer example: 84 RateLimit-Reset: description: >- Seconds until that budget's current window resets. Standard RateLimit header spelling. schema: type: integer example: 42 X-RateLimit-Limit: description: >- Request limit of the budget this request was counted against, for its current window: the API key's per-minute sliding window on an authenticated call; the per-IP budget on a public route and on a refused credential (401, 402, 403, 423). schema: type: integer example: 100 X-RateLimit-Remaining: description: Requests remaining in that budget's current window after this response. schema: type: integer example: 84 X-RateLimit-Reset: description: Unix timestamp when that budget's current window resets. schema: type: integer example: 1710772860 X-Request-Id: description: >- Server-generated request identifier for support and tracing. On every /api/v1 response, including 304, 408, CORS preflights and every error, and always equal to meta.request_id in the body. It is the key of the request's usage accounting row and of every log line the request emitted, so quote either form to support. A client-supplied X-Request-Id request header is ignored: the value is never adopted or echoed. schema: type: string example: req_550e8400 ETag: description: >- Weak semantic validator for conditional GET. Request-specific response metadata is excluded; send as If-None-Match to receive 304 when the stable payload is unchanged. schema: type: string example: W/"8f14e45fceea167a5a36dedd4bea2543" X-Usage-Accounting: description: >- Usage-record persistence for a protected V1 handler response. persisted: confirmed row; failed: write failed; unknown: completion could not be confirmed. Independent of handler success; do not replay successful mutations to repair accounting. Absent before accounting admission and on public routes. The zero-cost /api/v1/usage route also omits it. schema: type: string enum: - persisted - failed - unknown Server-Timing: description: >- Processing time in milliseconds, for example api;dur=12.345. Includes API authentication, quota admission, handler work and response construction. Excludes network transit and streamed body or export-file transfer. The engineering budget is strictly below 250 ms; this header reports observations, not a latency guarantee or a new timeout. schema: type: string example: api;dur=12.345 schemas: Game: type: object description: >- One sports or esports game: both sides, its schedule, provider status, linked Polymarket markets and their available provider moneyline price states. Assembled from the same provider-first live and upcoming projections the site's boards use, with no request-time provider fan-out. required: - object - event_slug - status - competitors - draw_offered - markets - freshness - coverage - url properties: object: type: string const: game event_slug: type: string description: >- The game's identity, for example mlb-mil-cin-2026-06-22. The same key the live_sports_updated webhook pulse carries and the same key /api/v1/games/{event_slug} takes. game_id: type: string description: >- The provider's Gamma gameId, as a string. Omitted when the canonical owner has no single value for this slug: the provider stamps one gameId across an event's derivative siblings, so an ambiguous read is reported as unknown rather than guessed. sport: type: string description: >- The canonical sport bucket, for example Soccer or Table Tennis. Omitted when neither the board scope nor the provider category names one. league: type: string description: >- The league tag, for example nfl or epl. Omitted for a sport served as one whole bucket with no league scope. title: type: string description: The provider's event title. Omitted when the provider sent none. scheduled_at: type: string format: date-time description: >- Kickoff in UTC, as the provider supplied it. Omitted when the provider published none; coverage.schedule then reads unavailable. status: $ref: '#/components/schemas/GameStatus' competitors: type: array items: $ref: '#/components/schemas/GameCompetitor' description: >- Both sides, in the provider's own order. For a team league the provider lists the home side first. Empty when the provider identified neither side. series_format: type: string description: >- The esports series length, for example Bo3. Omitted for everything else. draw_offered: type: boolean description: >- Whether one of this game's markets pays on a draw. Read this instead of assuming a two-outcome moneyline. markets: type: array items: $ref: '#/components/schemas/GameMarket' description: Every market this read linked to the game, ordered by condition_id. freshness: $ref: '#/components/schemas/GameFreshness' coverage: $ref: '#/components/schemas/GameCoverage' url: type: string description: The game's page on 0xinsider. GamesCoverage: type: object description: >- What this deployment covers, published with every page so a client never has to guess whether an empty list means no games or no coverage. required: - sports - leagues - sources_unavailable properties: sports: type: array items: type: string description: Canonical sport buckets served, sorted. leagues: type: array items: type: string description: League tags served, sorted. sources_unavailable: type: array items: type: string description: >- Scopes whose source half was unavailable for this read, as :. Empty means every scope answered. ResponseMeta: type: object required: - request_id - cached - cost properties: request_id: type: string description: >- Unique request ID (req_ prefix). The same value as the X-Request-Id response header, the request's usage accounting row and its log lines. cached: type: boolean cache_age_s: type: integer description: >- Cache age in seconds. Omitted when the response was not cached, and also when it was cached but its age cannot be established (an entry stored before its cache carried a computed instant). Never a placeholder: an unknown age is reported as no value rather than as the cache TTL. cost: type: integer description: >- Advisory request weight (relative compute cost). 1 for simple reads; higher for heavier endpoints. Not a credit/price. ranking_generation: type: integer description: >- Committed PostgreSQL-owned leaderboard generation for the returned rows and cursor. Present on GET /api/v1/leaderboard; omitted on endpoints that do not read this ranking. ranking_as_of: type: string format: date-time description: >- Authoritative RFC3339 timestamp from cache_generations.updated_at for ranking_generation. It is read in the same repeatable-read snapshot as the leaderboard rows and is not request time, cache write time, or row insertion order. directional_source: type: string enum: - live - degraded description: >- Which path produced the team-directional read on this response. Only present on endpoints that compute one (today: GET /api/v1/sports-edge-signals). "live" means the read RAN. "degraded" means it FAILED, so nothing was measured and the ranking fell back to raw conviction. The flag describes the READ, not its consequence: a read that ran and found nothing groupable also leaves the directional fields null, and that is honestly "live" -- the per-signal nulls already say "nothing to enrich here", so this snapshot-level flag carries only what they cannot, namely whether the read ran at all. A degraded response is cached on the shorter degraded TTL so it self-heals. Reported SEPARATELY from ranking_source because the two degradations are independent -- a sharp-money DB miss weakens the ranking DATA, a directional failure removes a ranking WEIGHT -- and a consumer down-weighting a degraded response needs to know which input it lost. Omitted on endpoints that compute no directional read. ranking_source: type: string enum: - live - db_only description: >- Which ranking-data path produced this response. Only present on endpoints that can degrade a ranking (today: GET /api/v1/sports-edge-signals). "live" is the normal path (the current holder pile from the provider batch); "db_only" is the degraded fallback (a truthful but weaker trader_markets ranking) served when the live sharp-money ranking batch is unavailable (a sharp-money DB read failure, not a Polymarket outage) and cached on a shorter TTL, so a consumer can down-weight or skip it. Omitted on endpoints that never degrade. category_skill_source: type: string enum: - live - partial - degraded - unavailable description: >- Whole filtered snapshot category-evidence status before pagination. Operational live always remains partial source coverage. category_skill_model_version: type: string category_skill_taxonomy_version: type: string category_skill_platform: type: string const: polymarket category_skill_scope: type: string const: observed_goldsky_primary_taker_fill category_skill_source_coverage: type: string enum: - partial_whale_threshold_fills - graded_wallet_fills category_skill_observation_started_at: type: string format: date-time category_skill_model_operationally_degraded: type: boolean description: >- Whole-model operational readiness captured with the category model snapshot. Present on category-enriched responses even when the filtered signal list is empty. When true, category_skill_source is degraded and sports-edge-signals uses the shorter degraded cache TTL. category_skill_status_counts: type: object required: - live - insufficient - stale - unknown - degraded properties: live: type: integer minimum: 0 insufficient: type: integer minimum: 0 stale: type: integer minimum: 0 unknown: type: integer minimum: 0 degraded: type: integer minimum: 0 category_skill_base_payload_hash: type: string pattern: ^[0-9a-f]{64}$ description: >- SHA-256 of the funded signal membership/order/rank/cursor vector immediately before category-skill enrichment. Sports-edge-signals only. category_skill_enriched_base_payload_hash: type: string pattern: ^[0-9a-f]{64}$ description: >- Independent SHA-256 recomputation over the same base fields immediately after category-skill enrichment. Equality with category_skill_base_payload_hash proves shadow enrichment did not change funded inputs. Sports-edge-signals only. ApiError: type: object required: - object - error - meta properties: object: type: string const: error error: type: object required: - code - message properties: code: type: string description: >- FROZEN: an existing value never changes meaning. request_timeout (408, #16146) was added the way insufficient_scope was: the handler did not answer inside the server's 30-second timeout. Retry-After and retry_at ride on it only for a safe method (GET, HEAD); a timed-out mutation may have completed, so check its state and reuse its Idempotency-Key. enum: - bad_request - invalid_api_key - subscription_required - forbidden - insufficient_scope - not_found - account_locked - rate_limited - rate_limit_unavailable - internal_error - request_timeout message: type: string doc_url: type: string param: type: string retry_at: type: string format: date-time description: >- The recommended next request instant (RFC3339), always in the future. Present on every retryable error: `pick_not_released`, `rate_limited`, `rate_limit_unavailable`, and `read_model_warming`. Omitted otherwise. The absolute twin of `Retry-After`; prefer the header for the sleep duration. For `pick_not_released`, the earliest of the next scheduled release, the next automatic selector attempt, the operating-window start, or about 60 seconds. See that response. freshness: $ref: '#/components/schemas/FreshnessFailure' reason: type: string enum: - cursor_expired - unknown_endpoint - pick_not_released - trader_not_tracked - read_model_warming - database_unavailable - request_accounting_unavailable - idempotency_in_progress - webhook_delivery_in_progress - webhook_secret_rotation_not_prepared - webhook_secret_rotation_overlap_active - sandbox_api_key - api_key_in_query - subscription_inactive - monthly_quota_exceeded - invalid_query - unknown_query_parameter - invalid_path - invalid_body - unsupported_media_type - payload_too_large - method_not_allowed - ip_rate_limited - ip_throttled - export_expired - freshness_ceiling_unsatisfied description: >- ADDITIVE (#7209). The specific, actionable cause behind `code`, when there is one more specific than the code itself. `code` keeps its published values, so existing clients are unaffected; new clients branch on `reason`. Omitted when the code already says everything we know. pick_not_released: no Pick of the Day is published for the current product day; schedule one request against retry_at instead of polling. unknown_endpoint: the PATH is not a route on this API -- read GET /api/v1, do not retry. trader_not_tracked: the wallet is real and the URL is right, but the trader is outside the HOT/WARM sync tiers -- stop asking for this wallet. cursor_expired: pagination went stale mid-walk -- re-request the first page and continue. read_model_warming: the requested endpoint cannot serve its read model yet; exact causes are endpoint-specific and can include a cold or contended refresh or a dependency that prevented refresh. database_unavailable: the API's database or its connection pool is temporarily unreachable (a connection-class failure, not a query fault); code stays rate_limit_unavailable, nothing is rate-limited, retry after Retry-After / retry_at. idempotency_in_progress: retain the exact Idempotency-Key and request body, then retry shortly. webhook_delivery_in_progress: retry the URL or signing-secret configuration change after the destination's active request completes. request_accounting_unavailable: accounting capacity is unavailable before the handler executes; retry after Retry-After / retry_at. sandbox_api_key: the credential is a sandbox key (oxi_sk_test_) from POST /api/v1/agents/register, which only the sandbox server accepts -- call the sandbox base URL with it, or get a live key or OAuth access token; do not retry it here. api_key_in_query: the key was sent as a ?token= query parameter, which no route reads because URLs land in logs and history; the key itself was not checked -- resend it as Authorization: Bearer. subscription_inactive: the key is valid but the account's Pro subscription has lapsed (402 subscription_required); permanent until a person reactivates at https://0xinsider.com/billing, which the message names -- stop retrying on a schedule and surface the link. The key owner is emailed once per lapse. monthly_quota_exceeded: the account has used the requests Pro includes for the UTC calendar month (429 rate_limited); retry_at and Retry-After name the first of next month, the only retry that can succeed, and the message names https://0xinsider.com/developers, where pay as you go for requests over the quota is turned on. The X-Monthly-Quota-Limit, X-Monthly-Quota-Remaining and X-Monthly-Quota-Reset headers on every authenticated response say how close the account is. invalid_query, invalid_path, invalid_body (400 bad_request, #16146): a query parameter, a path segment or the JSON body did not parse or does not fit the route's schema, so no handler ran; param names the field when the parser named one (a query key, a path segment, a JSON path such as traders[0], or body); fix the request, never retry it as sent. unsupported_media_type (415 bad_request, param content-type): send the body with Content-Type: application/json. payload_too_large (413 bad_request, param body): the body is over 1048576 bytes. method_not_allowed (405 bad_request): the path is a route but not with this method; the Allow header names the methods it serves. ip_rate_limited (429 rate_limited, #16380): the per-address budget every caller behind one IP shares, counted before authentication, is spent; not the key's own window, and the RateLimit-* headers describe that bucket. ip_throttled (429 rate_limited): the address is in a cooldown after sustained over-limit traffic; Retry-After is minutes to days, and a request before it does not shorten the cooldown. meta: $ref: '#/components/schemas/ResponseMeta' GameStatus: type: object description: >- Where the game is in its own life, as the provider reports it. A postponement, a cancellation and a suspension each keep their own state, so a client can tell a game that will be played later from one that never will be. required: - state - ended properties: state: type: string enum: - scheduled - live - paused - ended - postponed - cancelled - suspended - delayed - unknown description: >- scheduled: kickoff is ahead or the provider still calls it scheduled. live: the provider reports it in play. paused: halftime or a provider-reported break. ended: the provider reported a final, an award or a forfeit. postponed, cancelled, suspended, delayed: the provider's own verdict, kept distinct. unknown: no provider state reached this read. A kickoff in the past is never read as live on its own. match_status: type: string enum: - scheduled - in_progress - halftime - penalty_shootout - delayed - suspended - final - final_overtime - final_shootout - awarded - forfeit - not_necessary - postponed - cancelled - unknown description: >- The provider status folded onto one vocabulary across leagues. unknown means the provider sent a value this API has no meaning for; provider_status keeps that value verbatim. Omitted when no live-score frame carries a status. provider_status: type: string description: >- The provider's status string, verbatim. Omitted when the provider sent none. period: type: string description: >- The provider's period label, for example Q3, End Q2 or T5. Omitted when the provider sent none. clock: type: string description: >- The game clock as the provider spells it, never reformatted. Omitted when the provider sent none. live: type: boolean description: >- The provider's own in-play flag. Omitted when no live-score frame exists, which is not the same as false. ended: type: boolean description: Whether the game is over. Always present. GameCompetitor: type: object description: One side of the game. required: - name properties: name: type: string description: The competitor's name as the provider gives it. provider_id: type: string description: >- The provider's league-scoped competitor id, as a string. Omitted when the provider has not identified this side; coverage.competitors then reads labels. logo: type: string description: Provider crest or logo URL. Omitted when there is none. score: type: string description: >- The provider's score for this side, verbatim. A string because the provider sends one: a set score, a map score and a run total are not all integers. Omitted when no live-score frame carries a score. record: type: string description: >- The provider's season record for this side, for example 12-4. Omitted when the provider sent none. GameMarket: type: object description: One Polymarket market linked to this game. required: - id - condition_id - platform properties: id: type: string description: The mkt_-prefixed market id every other V1 response uses. condition_id: type: string description: The raw provider condition id. platform: type: string description: Always polymarket. slug: type: string description: The provider's market slug. Omitted when the provider sent none. sports_market_type: type: string description: >- The provider's own market type, for example moneyline or spread. Omitted when the provider sent none. Not an enum: the provider owns this vocabulary and adds to it. side: type: string enum: - home - away - draw - other description: >- Which side of the game this market's YES leg pays. draw is a real value: a 1X2 market's third leg is not a competitor. Omitted when the provider ids do not classify the leg, which is not the same as other. outcome_yes: type: string description: >- The provider's label for the YES outcome. Omitted when the provider sent none. outcome_no: type: string description: >- The provider's label for the NO outcome. Omitted when the provider sent none. outcome_token_ids: type: array items: type: string description: >- Polymarket CLOB token ids in the provider's own outcome-index order. Omitted when the provider has published none for this market. prices: $ref: '#/components/schemas/GameMarketPrices' description: >- Default provider moneyline state. Omitted when this market has no classified moneyline projection; incomplete and invalid projections remain explicit. GameFreshness: type: object description: >- How current this game's facts are. Independent per source: the board half that produced the game, and the live-score frame that produced its scores. required: - source - source_status - source_availability - source_freshness - delayed properties: source: type: string enum: - live - upcoming description: Which board half produced this game. source_status: type: string enum: - ok - unavailable description: Whether that half returned a truthful source body for this read. source_availability: type: string enum: - available - unavailable - not_applicable description: >- Whether that half had a source body at all. not_applicable means the sport has no configured source for that half. source_freshness: type: string enum: - fresh - stale - unknown - not_applicable description: >- Freshness of the cached source body, never inferred from the response clock or the row count. source_observed_at: type: string format: date-time description: >- The source body's data vintage. Omitted when the read has no vintage anchor, which is not age zero. source_age_seconds: type: integer description: >- Age of source_observed_at in seconds, capped at 600. Omitted past the cap or with no anchor. delayed: type: boolean description: >- Whether a reader should be told these rows are behind. This applies the half's own servable-age bar (15 s live, 120 s upcoming), which is not the same as source_freshness: a live board whose scores are seconds old reads stale for about half of every publish cycle and is not delayed. scores_observed_at: type: string format: date-time description: >- When this game's live-score frame was observed. Omitted when there is no frame. scores_source_at: type: string format: date-time description: The provider's own frame clock. Omitted when the frame carries none. GameCoverage: type: object description: >- What this game's read actually supplied, so a client branches on coverage instead of on a missing key. required: - scores - competitors - schedule properties: scores: type: string enum: - available - unavailable description: available when a live-score frame supplied this game's scores. competitors: type: string enum: - provider_ids - labels - unavailable description: >- provider_ids when every side carries a provider id, labels when only the provider's names identify them, unavailable when neither exists. Do not join on names when this reads labels. schedule: type: string enum: - available - unavailable description: available when the provider supplied a kickoff. FreshnessFailure: type: object required: - max_age_s - data_quality_status properties: max_age_s: type: integer format: int64 minimum: 0 description: The caller's requested whole-response freshness ceiling in seconds. actual_age_s: type: integer format: int64 minimum: 0 description: >- Age in seconds of the oldest stored data_quality.as_of clock, when one is available. as_of: type: string format: date-time description: >- The oldest stored data-quality clock used to calculate actual_age_s, when one is available. data_quality_status: type: string enum: - fresh - partial - unknown - untracked - unavailable description: >- The trader body's whole-response data-quality status. Only fresh can satisfy max_age_s. GameMarketPrices: type: object description: >- Provider-owned moneyline state with the observation clock that can be compared with game freshness. required: - provider - observed_at - observation_source properties: provider: $ref: '#/components/schemas/GameMarketProviderPrices' observed_at: type: - string - 'null' format: date-time description: >- Board cache vintage for Gamma or the older CLOB leg clock. Null when no reliable clock is available; never a Gamma-authored timestamp. observation_source: type: string enum: - board_snapshot - clob_display description: >- The clock used for observed_at. board_snapshot is this service’s cache observation, not a provider source timestamp. GameMarketProviderPrices: oneOf: - $ref: '#/components/schemas/GameMarketPricePaired' - $ref: '#/components/schemas/GameMarketPriceIncomplete' - $ref: '#/components/schemas/GameMarketPriceInvalid' discriminator: propertyName: state mapping: paired: $ref: '#/components/schemas/GameMarketPricePaired' incomplete: $ref: '#/components/schemas/GameMarketPriceIncomplete' invalid: $ref: '#/components/schemas/GameMarketPriceInvalid' GameMarketPricePaired: type: object description: A validated provider moneyline pair bound to the two competitors. required: - state - competitor_a - competitor_b - competitor_a_is_yes - binding_provenance properties: state: type: string const: paired competitor_a: $ref: '#/components/schemas/GameMarketPriceCompetitor' competitor_b: $ref: '#/components/schemas/GameMarketPriceCompetitor' competitor_a_is_yes: type: boolean description: Whether competitor A is the provider YES leg. binding_provenance: $ref: '#/components/schemas/GameMarketPriceBindingProvenance' GameMarketPriceIncomplete: type: object description: The provider moneyline pair is incomplete; no numeric pair is invented. required: - state - reason properties: state: type: string const: incomplete reason: type: string enum: - outcome_prices_missing - outcome_price_leg_missing - zero_price_sentinel - display_price_pair_unavailable - outcome_identity_unavailable - final_score_unavailable competitor_a_is_yes: type: boolean description: Whether competitor A is the provider YES leg. competitor_a_provider_id: type: integer format: int64 description: The provider competitor id when identity is available. competitor_b_provider_id: type: integer format: int64 description: The provider competitor id when identity is available. binding_provenance: $ref: '#/components/schemas/GameMarketPriceBindingProvenance' GameMarketPriceInvalid: type: object description: The provider moneyline pair is invalid; no numeric pair is invented. required: - state - reason properties: state: type: string const: invalid reason: type: string enum: - team_cardinality - outcome_cardinality - price_cardinality - non_finite_price - out_of_range_price - non_complementary_prices - ambiguous_identity - final_identity_mismatch competitor_a_is_yes: type: boolean description: Whether competitor A is the provider YES leg. competitor_a_provider_id: type: integer format: int64 description: The provider competitor id when identity is available. competitor_b_provider_id: type: integer format: int64 description: The provider competitor id when identity is available. binding_provenance: $ref: '#/components/schemas/GameMarketPriceBindingProvenance' GameMarketPriceCompetitor: type: object description: >- One competitor-bound provider moneyline price. No YES/NO inference is required. required: - label - price - price_provenance properties: provider_id: type: integer format: int64 description: The provider competitor id when identity is available. label: type: string description: The provider competitor label. price: type: number minimum: 0 maximum: 1 description: Unrounded provider price in [0, 1]. price_provenance: type: string enum: - gamma_outcome_prices - clob_display description: Which provider price observation supplies this leg. GameMarketPriceBindingProvenance: type: string enum: - provider_ids - exact_labels - containment_labels - elimination description: How the existing sports-board writer bound prices to competitors. securitySchemes: bearerAuth: type: http scheme: bearer description: >- Legacy default or named integration API key, or OAuth 2.1 access token, in the Authorization header as `Bearer oxi_sk_live_...` or `Bearer oxi_at_...`. Default keys retain full access; integration keys are limited to their approved read, webhooks, export and usage scopes and expire within 90 days. All credentials share the owner's account limits. Data calls require an active Pro subscription and return live data. A 401 carries WWW-Authenticate: Bearer resource_metadata="https://api.0xinsider.com/.well-known/oauth-protected-resource" (RFC 6750 section 3, RFC 9728). oauth2: type: oauth2 description: >- OAuth 2.1 authorization code flow with PKCE S256 for apps and MCP clients acting for a user. Public clients only (no client secret): register with RFC 7591 at https://api.0xinsider.com/oauth/register or present an https client ID metadata document URL as client_id. Authorization server metadata: https://api.0xinsider.com/.well-known/oauth-authorization-server. The access token (oxi_at_..., one hour) is sent as `Authorization: Bearer`; refresh tokens rotate on every use. A route outside the token's scopes answers 403 insufficient_scope. Walkthrough: https://0xinsider.com/auth.md. flows: authorizationCode: authorizationUrl: https://0xinsider.com/oauth/authorize tokenUrl: https://api.0xinsider.com/oauth/token refreshUrl: https://api.0xinsider.com/oauth/token scopes: read: >- Read markets, traders, large trades, positions, reports, search, the event stream and every MCP tool webhooks: Create, list, verify, rotate and delete webhook endpoints export: Start, poll and download trader exports usage: Read the caller's API usage counters ````