Skip to main content
WEBHOOK
whale_trades_inserted is the older name of large_trades_inserted: one event under two names, with the same data. An endpoint receives the name it registered. The Webhooks guide covers signatures, retries, and replay.

Authorizations

Authorization
string
header
required

Legacy default or named integration API key, or OAuth 2.1 access token, in the Authorization header as Bearer oxi_sk_live_... or Bearer oxi_at_.... Default keys retain full access; integration keys are limited to their approved read, webhooks, export and usage scopes and expire within 90 days. All credentials share the owner's account limits. Data calls require an active Pro subscription and return live data. A 401 carries WWW-Authenticate: Bearer resource_metadata="https://api.0xinsider.com/.well-known/oauth-protected-resource" (RFC 6750 section 3, RFC 9728).

Headers

x-0xinsider-signature
string
required

v1= followed by the hex HMAC-SHA256 of {timestamp}.{raw body} under the endpoint signing secret. During a staged secret rotation it carries comma-separated v1= candidates: accept the delivery when any one verifies.

x-0xinsider-timestamp
string
required

Unix seconds when this attempt was signed. Reject a delivery whose timestamp is more than 300 seconds from your clock.

x-0xinsider-event-id
string
required

The event id, equal to the body id.

x-0xinsider-event-type
string
required

The event type the endpoint registered, equal to the body type.

idempotency-key
string
required

Stable key of this logical delivery (whdel_...). Every retry repeats it, so deduplicate on it.

x-0xinsider-delivery-id
string
required

Numeric id of this delivery, as a decimal string.

x-0xinsider-delivery-attempt
string
required

The delivery attempt counter, as a decimal string.

Body

application/json
id
string
required

Stable event id, identical across retries of the same logical event.

type
string
required
Allowed value: "whale_trades_inserted"
created_at
string<date-time>
required

When the producer recorded the event; for a trade event, the fill time. Retries resend the same body, so it is not the time of the attempt.

data
object
required

large_trades_inserted data (Pro and Max): new large trades were ingested. It carries a count and no trade; subscribe to large_trade_inserted_v2 for the trade itself. The deprecated spelling whale_trades_inserted delivers the same object.

Response

200

Return any 2xx status to acknowledge the delivery. Any other status, a redirect, a timeout or a connection error is retried on the published retry policy.