> ## Documentation Index
> Fetch the complete documentation index at: https://docs.0xinsider.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Trader P&L

> Get a wallet's daily profit and loss history, period statistics, and drawdowns.

Use this endpoint to chart a wallet's profit and loss over time or compare its last 7, 30, and 90 days. It returns daily values, monthly and yearly totals, and drawdowns from earlier peaks.

For headline P\&L and the current grade, use [Trader](/api-reference/endpoint/get-trader).

## Parameters

| Parameter | Description |
| - | - |
| `address` | The wallet to look up: a `0x...` address, a Polymarket username, or a `trd_` id. |

## Key response fields

| Field | Meaning |
| - | - |
| `entries[]` | One point per day, oldest first. Each carries `date` and `daily_change`, plus `cumulative_profit`, `total_pnl`, `markets_traded`, and `total_volume`, each absent when the day has no value for it. |
| `stats` | The same set of figures over four windows: `all`, `d90`, `d30`, and `d7`. Each holds `current`, `change`, `change_pct`, `best_day`, `worst_day`, `win_days`, `loss_days`, `avg_day`, and `rebase_anchor`. |
| `monthly[]` | One entry per month, with `year`, `month`, `pnl`, and `markets_traded`. |
| `year_totals[]` | One entry per year, with `year` and `pnl`, oldest year first. |
| `drawdown[]` | How far below the wallet's previous peak it sat on each day: `date`, `cumulative_profit`, and `drawdown`. |
| `freshness_at` | When 0xinsider last rebuilt this wallet's daily series. It is `null` when the series has never been rebuilt for the wallet. |

## Example

```bash theme={null}
curl -H "Authorization: Bearer $OXINSIDER_API_KEY" \
  "https://api.0xinsider.com/api/v1/trader/swisstony/pnl"
```

## What it does not return

* Numbers recalculated at request time. The series is rebuilt when a sync finishes, so it can lag the newest fills. `freshness_at` says when it was last rebuilt.
* An invented curve. A wallet 0xinsider knows but that has no daily P\&L gets a `200` with empty arrays.
* A `200` for a wallet that does not resolve. That returns `404`.
* A split between realized and unrealized profit. `entries[]` is cumulative P\&L only. For the split, read `pnl.realized` and `pnl.unrealized` on [Trader](/api-reference/endpoint/get-trader).

## Caching

Save the response's `ETag` and send it in `If-None-Match` on your next request. If the series has not changed, the server returns `304 Not Modified` with no body.


## OpenAPI

````yaml GET /api/v1/trader/{address}/pnl
openapi: 3.1.0
info:
  x-generated-rate-limit-policy-from: web/src/lib/rate-limit-facts.ts via web/scripts/generate-api-policy.ts
  title: 0xinsider API
  description: >-
    Follow provider-exposed large-trade activity from Polymarket. Polymarket
    wallet-attributed trades can add grades, P&L, strategy, and diagnostic-score
    context when sufficient source data exists. Fields can be null or
    unavailable. Normal API requests use a 30-second server timeout that returns
    HTTP 408 Request Timeout with the standard error envelope (error.code
    request_timeout) when exceeded. Every /api/v1 failure answers that envelope,
    including a body that is not JSON or does not fit the request schema (400
    invalid_body), a query or path value that does not parse (400 invalid_query,
    invalid_path), a missing Content-Type: application/json (415
    unsupported_media_type), a body over 1048576 bytes (413 payload_too_large)
    and a method the path does not serve (405 method_not_allowed), each with
    error.param naming the field where one is known and meta.request_id equal to
    X-Request-Id. Unknown query names are ignored by default and reported in
    X-Query-Ignored, while X-Effective-Query lists the normalized names and
    values applied using form-urlencoded decoding, where + is a space; strict
    mode returns 400 bad_request with error.reason unknown_query_parameter
    before the handler runs, including for an unknown name with an incomplete
    percent escape. Every list operation clamps an out-of-range limit into its
    published minimum..maximum instead of refusing it (limit=0 reads one row,
    limit=500 reads the maximum), and X-Effective-Query reports the clamped
    value; only a limit that is not an integer is refused, with 400
    invalid_query. Public REST /api/v1/* endpoints, excluding /api/v1/mcp, use
    Bearer-token based non-credentialed browser CORS: any Origin may call with
    Authorization, Content-Type, If-None-Match, Idempotency-Key, Mcp-Session-Id,
    Mcp-Protocol-Version, Last-Event-Id, and X-Query-Validation request headers.
    X-Query-Validation: strict opts into rejecting unknown query names; the
    default remains compatible. Remote MCP at /api/v1/mcp is non-credentialed,
    but still validates Origin against the 0xinsider/localhost allowlist per MCP
    Streamable HTTP DNS-rebinding guidance. Successful browser CORS preflight
    responses advertise Access-Control-Max-Age: 86400. Browser JavaScript may
    read RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, the legacy
    X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, Retry-After,
    ETag, X-Request-Id, X-Request-Cost, X-Usage-Accounting,
    X-Batch-RateLimit-Limit, X-Batch-RateLimit-Remaining,
    X-Batch-RateLimit-Reset, Mcp-Session-Id, X-Mcp-Error-Code, X-Query-Ignored,
    and X-Effective-Query response headers. Rate-limit headers describe the
    budget a request was counted against: the API key's per-minute window on an
    authenticated call, and the per-IP budget on a public route or on a refused
    credential (401, 402, 403, 423), so a client looping on a bad or lapsed key
    still sees how much room it has. Conditional GET: these operations return a
    weak ETag and answer If-None-Match with 304 Not Modified and an empty body:
    GET /api/v1/health, GET /api/v1/insider-radar, GET
    /api/v1/insider-radar/{id}, GET /api/v1/large-positions, GET
    /api/v1/leaderboard, GET /api/v1/leaderboard/trending, GET
    /api/v1/market/{condition_id}/candles, GET
    /api/v1/market/{condition_id}/flow, GET /api/v1/market/{condition_id}/intel,
    GET /api/v1/market/{condition_id}/snapshot, GET /api/v1/markets/explore, GET
    /api/v1/markets/sharp-money-flows, GET /api/v1/markets/smart-money-flows,
    GET /api/v1/pick-of-the-day, GET /api/v1/pick-of-the-day/archive, GET
    /api/v1/positions, GET /api/v1/sports-edge-observations, GET
    /api/v1/sports-edge-signals, GET /api/v1/trader/{address}, GET
    /api/v1/trader/{address}/context, GET /api/v1/trader/{address}/pnl, GET
    /api/v1/trader/{address}/position-timeline, GET
    /api/v1/traders/{trader}/position-timeline, GET /api/v1/large-trades, GET
    /api/v1/large-trades/history, GET /api/v1/large-trades/{id}, GET
    /api/v1/whale-trades, GET /api/v1/whale-trades/history, GET
    /api/v1/whale-trades/{id}, GET
    /api/v1/whale-trades/{id}/counterparties/executions, GET
    /api/v1/whale-trades/{id}/counterparties/executions/{execution_id}/makers.
    Credentialed first-party routes such as /api/keys, /api/billing, and auth
    endpoints remain restricted to configured 0xinsider origins. Protected V1
    responses, except the zero-cost /api/v1/usage route, after handler execution
    carry X-Usage-Accounting: persisted, failed, or unknown. This reports the
    usage-record write; it does not change the handler result. Do not replay a
    successful mutation to repair an unknown usage record. Before execution,
    unavailable accounting capacity returns HTTP 503 with
    error.reason=request_accounting_unavailable; honor Retry-After. Public API
    responses add the browser-readable Server-Timing header: Processing time in
    milliseconds, for example api;dur=12.345. Includes API authentication, quota
    admission, handler work and response construction. Excludes network transit
    and streamed body or export-file transfer. The engineering budget is
    strictly below 250 ms; this header reports observations, not a latency
    guarantee or a new timeout. Requests through https://0xinsider.com/api/*
    append Server-Timing: web_api;dur=<milliseconds> and X-Web-Request-Id for
    that web origin handler. The web clock includes upstream waiting and
    existing body construction, so do not add it to api;dur. It excludes
    platform routing, cold module initialization, CDN hits and later stream/file
    transfer. On a cache hit these headers describe the earlier origin fill, not
    the current request; static Markdown API routes have no fresh web clock.
  version: 1.0.0
  contact:
    name: 0xinsider
    email: support@0xinsider.com
    url: https://0xinsider.com
servers:
  - url: https://api.0xinsider.com
    description: >-
      Production (live data). Authenticate with a live key (oxi_sk_live_...);
      requires an active Pro subscription. A sandbox key (oxi_sk_test_...) is
      answered with 401 invalid_api_key and error.reason sandbox_api_key.
  - url: https://0xinsider.com/sandbox
    description: >-
      Sandbox. No credential required and no production data: every documented
      operation answers with its documented example or a deterministic sample of
      its response schema. GET /api/v1/stream is the one exclusion and answers
      400 there, because a Server-Sent Events stream is a live connection rather
      than a body. Add ?sandbox_status=<code> to receive one of the error
      responses the operation documents (for example 429 with Retry-After).
      Documented query parameters and JSON request bodies are checked against
      this document, the two context.md routes answer 200 text/markdown, GET
      /api/v1/trader/{address}/export/download answers its 302 with a Location
      the sandbox serves itself rather than an object store, and nothing is
      stored between requests. A sandbox key (oxi_sk_test_..., issued with no
      account by POST https://api.0xinsider.com/api/v1/agents/register) is
      optional: on an operation that requires a credential, a well-formed key is
      answered with X-Oxi-Sandbox-Key: valid and a malformed one with 401
      invalid_api_key.
security:
  - bearerAuth: []
  - oauth2:
      - read
tags:
  - name: Traders
    description: Traders, batch lookups, timelines, and export readiness.
  - name: Positions
    description: Current prediction-market position snapshots from backend-owned mirrors.
  - name: Large Positions
    description: Largest current open positions from graded traders (Polymarket-only).
  - name: Large trades
    description: Recent and historical large trades.
  - name: Leaderboard
    description: Ranked trader discovery and category/strategy leaderboards.
  - name: Pick of the Day
    description: >-
      One sourced sharp-money call a day: the side profitable wallets are
      backing, with pre-game odds, the holders, and the track record.
  - name: Games
    description: >-
      Sports and esports games: both sides, schedules, provider status and the
      Polymarket markets linked to each game.
  - name: Markets
    description: Market search, discovery, snapshots, and sharp-money flow.
  - name: Content
    description: Search across 0xinsider editorial content.
  - name: Suspicious trades
    description: Trades whose recorded suspicion score meets the live flag threshold.
  - name: Insider Radar
    description: >-
      Deprecated spelling of Suspicious trades; both operations stay live as
      aliases.
  - name: Events
    description: Durable public event replay streams.
  - name: Streaming
    description: Resumable real-time Server-Sent Events stream of live feed envelopes.
  - name: Webhooks
    description: Signed builder webhook destinations and delivery controls.
  - name: Usage
    description: Developer API budget and usage introspection.
  - name: Onboarding
    description: >-
      Self-serve agent registration: a sandbox key with no account, and the path
      to live access.
  - name: System
    description: Health and operational status checks.
  - name: MCP
    description: Remote Model Context Protocol transport.
  - name: Reports
    description: Daily, weekly, monthly, and trader export report snapshots.
  - name: Account
    description: Identify the account and credential authenticated for a paid API request.
externalDocs:
  description: 0xinsider API docs
  url: https://docs.0xinsider.com
paths:
  /api/v1/trader/{address}/pnl:
    get:
      tags:
        - Traders
      summary: Get trader P&L time series
      description: >-
        Returns a trader's daily P&L time series and pre-derived stats from the
        precomputed daily_pnl read model: entries (daily cumulative P&L), period
        stats (all/90d/30d/7d), monthly aggregation, per-year totals, and the
        drawdown series. Reads the refreshed read model, not a per-request
        equity replay. A resolved trader with no daily P&L returns an empty
        structured object (HTTP 200); an unknown address returns 404. Optional
        from/to and sections bound what comes back: from/to clip the two daily
        series (entries, drawdown) to an inclusive UTC date window, and sections
        names which of the five sections the body carries. A request that sends
        none of the three receives the whole object exactly as before, down to
        the ETag. A body built with any of them carries data.view, which names
        the bounds, the sections applied, the size of the full series and the
        last daily point before the window; a section the request excluded is
        absent from data, not null or empty. stats, monthly and year_totals keep
        their full-period definitions whatever the window says, so an economic
        value never changes meaning because a chart asked for seven days.
      operationId: getTraderPnl
      parameters:
        - name: X-Query-Validation
          in: header
          required: false
          description: >-
            Opt into strict query-name validation. The default is compatible:
            unknown names are ignored and reported in X-Query-Ignored. With
            strict, an unknown name returns 400 bad_request with error.reason
            unknown_query_parameter before the handler runs, including when its
            percent escape is incomplete.
          schema:
            type: string
            enum:
              - strict
        - name: address
          in: path
          required: true
          description: Wallet address (0x...), username, or trd_-prefixed trader id.
          schema:
            type: string
        - name: from
          in: query
          required: false
          description: >-
            Inclusive UTC calendar-date lower bound in YYYY-MM-DD form for the
            daily series (entries and drawdown). Omit for the whole stored
            history. A value that is not a calendar date, or a from later than
            to, returns 400 bad_request with error.param from. Does not change
            stats, monthly or year_totals, which stay defined over the full
            history.
          schema:
            type: string
            pattern: ^\d{4}-\d{2}-\d{2}$
        - name: to
          in: query
          required: false
          description: >-
            Inclusive UTC calendar-date upper bound in YYYY-MM-DD form for the
            daily series (entries and drawdown). Omit for the whole stored
            history. A value that is not a calendar date returns 400 bad_request
            with error.param to. Does not change stats, monthly or year_totals.
          schema:
            type: string
            pattern: ^\d{4}-\d{2}-\d{2}$
        - name: sections
          in: query
          required: false
          description: >-
            Which sections of the object to return. Repeatable and
            comma-separated: entries, stats, monthly, year_totals, drawdown.
            Omit it, or send it empty, for all five. A section left out is
            absent from data. An unrecognized name returns 400 bad_request with
            error.param sections rather than being ignored, so a typo cannot
            look like a successful request that silently dropped the section you
            came for.
          schema:
            type: array
            items:
              type: string
              enum:
                - entries
                - stats
                - monthly
                - year_totals
                - drawdown
          style: form
          explode: true
        - name: sections[]
          in: query
          required: false
          description: >-
            Backward-compatible bracket alias for sections, for clients that
            emit array keys. Repeatable and comma-separated: entries, stats,
            monthly, year_totals, drawdown.
          schema:
            type: array
            items:
              type: string
              enum:
                - entries
                - stats
                - monthly
                - year_totals
                - drawdown
          style: form
          explode: true
      responses:
        '200':
          description: Trader P&L object
          headers:
            X-Query-Ignored:
              $ref: '#/components/headers/X-Query-Ignored'
            X-Effective-Query:
              $ref: '#/components/headers/X-Effective-Query'
            ETag:
              $ref: '#/components/headers/ETag'
            RateLimit-Limit:
              $ref: '#/components/headers/RateLimit-Limit'
            RateLimit-Remaining:
              $ref: '#/components/headers/RateLimit-Remaining'
            RateLimit-Reset:
              $ref: '#/components/headers/RateLimit-Reset'
            X-RateLimit-Limit:
              $ref: '#/components/headers/X-RateLimit-Limit'
            X-RateLimit-Remaining:
              $ref: '#/components/headers/X-RateLimit-Remaining'
            X-RateLimit-Reset:
              $ref: '#/components/headers/X-RateLimit-Reset'
            X-Request-Id:
              $ref: '#/components/headers/X-Request-Id'
            X-Usage-Accounting:
              $ref: '#/components/headers/X-Usage-Accounting'
            Server-Timing:
              $ref: '#/components/headers/Server-Timing'
          content:
            application/json:
              schema:
                type: object
                required:
                  - object
                  - data
                  - meta
                properties:
                  object:
                    type: string
                    const: trader_pnl
                  data:
                    $ref: '#/components/schemas/TraderPnl'
                  meta:
                    $ref: '#/components/schemas/ResponseMeta'
              example:
                object: trader_pnl
                data:
                  id: trd_0xabc123
                  freshness_at: '2026-05-12T18:04:11Z'
                  entries:
                    - date: '2026-05-12'
                      markets_traded: 3
                      total_volume: 10000
                      cumulative_profit: 50000
                      total_pnl: 50000
                      daily_change: 250
                  stats:
                    all:
                      current: 50000
                      change: 50000
                      change_pct: 0
                      best_day: 5000
                      worst_day: -2000
                      win_days: 30
                      loss_days: 10
                      avg_day: 250
                      rebase_anchor: 0
                    d90:
                      current: 12000
                      change: 12000
                      change_pct: 31.5
                      best_day: 5000
                      worst_day: -2000
                      win_days: 18
                      loss_days: 6
                      avg_day: 500
                      rebase_anchor: 38000
                    d30:
                      current: 4000
                      change: 4000
                      change_pct: 8.7
                      best_day: 2500
                      worst_day: -800
                      win_days: 9
                      loss_days: 3
                      avg_day: 333
                      rebase_anchor: 46000
                    d7:
                      current: 900
                      change: 900
                      change_pct: 1.8
                      best_day: 600
                      worst_day: -150
                      win_days: 4
                      loss_days: 1
                      avg_day: 180
                      rebase_anchor: 49100
                  monthly:
                    - year: 2026
                      month: 5
                      pnl: 12000
                      markets_traded: 18
                  year_totals:
                    - year: 2026
                      pnl: 50000
                  drawdown:
                    - date: '2026-05-12'
                      cumulative_profit: 50000
                      drawdown: -1500
                meta:
                  request_id: req_example
                  cached: false
                  cost: 1
        '304':
          description: >-
            Not Modified. Returned when If-None-Match matches the current
            payload.
          headers:
            X-Query-Ignored:
              $ref: '#/components/headers/X-Query-Ignored'
            X-Effective-Query:
              $ref: '#/components/headers/X-Effective-Query'
            ETag:
              description: Validator for the unchanged payload.
              schema:
                type: string
            RateLimit-Limit:
              $ref: '#/components/headers/RateLimit-Limit'
            RateLimit-Remaining:
              $ref: '#/components/headers/RateLimit-Remaining'
            RateLimit-Reset:
              $ref: '#/components/headers/RateLimit-Reset'
            X-RateLimit-Limit:
              $ref: '#/components/headers/X-RateLimit-Limit'
            X-RateLimit-Remaining:
              $ref: '#/components/headers/X-RateLimit-Remaining'
            X-RateLimit-Reset:
              $ref: '#/components/headers/X-RateLimit-Reset'
            X-Request-Id:
              $ref: '#/components/headers/X-Request-Id'
            X-Usage-Accounting:
              $ref: '#/components/headers/X-Usage-Accounting'
            Server-Timing:
              $ref: '#/components/headers/Server-Timing'
          x-empty-body: true
        '400':
          description: Invalid request parameter
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '401':
          description: Missing or invalid API key
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '402':
          description: >-
            Active Pro subscription required. The key is valid but the account
            has no active Pro subscription; error.reason is
            subscription_inactive and error.message names the reactivation URL
            (https://0xinsider.com/billing). Permanent until a person
            reactivates: no Retry-After, never retry on a schedule.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '403':
          description: Account access denied
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '404':
          description: Resource not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '408':
          description: >-
            The handler did not answer inside the server's 30-second timeout.
            error.code is request_timeout. On GET and HEAD the response carries
            Retry-After and error.retry_at; on a mutation it carries neither,
            because the request may have completed on the server: check its
            state before repeating it, and reuse its Idempotency-Key.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '423':
          description: Account is locked
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '429':
          description: >-
            Rate limit exceeded. Three independent budgets. (1) 100
            requests/minute per user (sliding window), on every authenticated
            route. (2) On the BATCH routes only: 2500 batch item units/minute
            per user, reserved before any item is executed. A batch with N
            requested items costs N item units, including duplicate and invalid
            items. 2500 = 100 requests x 25 items per batch, which is the most
            item work a key can buy through the request limiter at all: a caller
            may spend their entire 100-request minute on full 25-item batches
            without the item budget being what stops them. The REQUEST budget is
            the effective ceiling, and batching is never the more expensive
            choice. The item budget can still deny at a sliding-window boundary
            (both counters carry the previous window forward with a floor, and
            the item counter runs 25x the request counter), so honor a 429 from
            either. Over-quota batches return 429 with Retry-After plus
            RateLimit-Limit, RateLimit-Remaining, and RateLimit-Reset before any
            item work is done. (3) The monthly quota: Pro includes 500,000 and
            Max includes 2,000,000 authenticated requests per UTC calendar
            month. Over the plan's included requests: with pay as you go on, the
            excess bills at USD 0.20 per 1,000 on a monthly invoice, up to four
            times the included allowance (2,000,000 requests for Pro); without
            it, from October 1, 2026, the next request answers 429 rate_limited
            with error.reason monthly_quota_exceeded and a Retry-After to the
            month's reset. Pay-as-you-go accounts receive the same refusal at
            their ceiling. A refused request is not counted. Every authenticated
            response carries X-Monthly-Quota-Limit, X-Monthly-Quota-Remaining,
            and X-Monthly-Quota-Reset (unix seconds, the first of next month).
            (4) The per-address budget: 1200 requests/minute per IP, shared by
            every caller behind one address and counted before authentication,
            on every route. A 429 from it carries error.reason ip_rate_limited
            and describes that bucket in RateLimit-*; a throttled address
            (sustained over-limit traffic) carries error.reason ip_throttled
            with a Retry-After of minutes to days, and a request before it does
            not shorten the cooldown. Every 429 is the standard error envelope
            with meta.request_id equal to X-Request-Id.
          headers:
            Retry-After:
              description: Seconds until rate limit resets.
              schema:
                type: integer
            RateLimit-Limit:
              $ref: '#/components/headers/RateLimit-Limit'
            RateLimit-Remaining:
              $ref: '#/components/headers/RateLimit-Remaining'
            RateLimit-Reset:
              $ref: '#/components/headers/RateLimit-Reset'
            X-RateLimit-Limit:
              schema:
                type: integer
            X-RateLimit-Remaining:
              schema:
                type: integer
            X-RateLimit-Reset:
              schema:
                type: integer
            X-Request-Id:
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '500':
          description: Unexpected server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
        '503':
          description: >-
            Redis-backed authenticated rate limiter unavailable; retry after the
            per-process outage cooldown
          headers:
            Retry-After:
              description: >-
                Seconds until the middleware will probe the Redis-backed rate
                limiter again.
              schema:
                type: integer
            X-Request-Id:
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiError'
      x-codeSamples:
        - lang: curl
          label: cURL
          source: |-
            curl -sS \
              -H "Authorization: Bearer $OXINSIDER_API_KEY" \
              'https://api.0xinsider.com/api/v1/trader/0xabc123/pnl'
components:
  headers:
    X-Query-Ignored:
      description: >-
        Comma-separated, percent-encoded query names the operation did not
        publish and therefore ignored in compatible mode. Names are sorted and
        de-duplicated.
      schema:
        type: string
    X-Effective-Query:
      description: >-
        Normalized, percent-encoded query string containing only the recognized
        names and values applied by the operation. Query names and values use
        form-urlencoded decoding, where + is a space. Repeated names are
        retained and sorted by name. A limit outside the operation's published
        minimum..maximum is reported as the clamped value the page used, so the
        header states the page size served rather than the one requested.
      schema:
        type: string
    ETag:
      description: >-
        Weak semantic validator for conditional GET. Request-specific response
        metadata is excluded; send as If-None-Match to receive 304 when the
        stable payload is unchanged.
      schema:
        type: string
        example: W/"8f14e45fceea167a5a36dedd4bea2543"
    RateLimit-Limit:
      description: >-
        Request limit of the budget this request was counted against, for its
        current window: the API key's per-minute sliding window on an
        authenticated call; the per-IP budget on a public route and on a refused
        credential (401, 402, 403, 423), which never reaches the per-key
        limiter. Standard RateLimit header spelling.
      schema:
        type: integer
        example: 100
    RateLimit-Remaining:
      description: >-
        Requests remaining in that budget's current window after this response.
        Standard RateLimit header spelling.
      schema:
        type: integer
        example: 84
    RateLimit-Reset:
      description: >-
        Seconds until that budget's current window resets. Standard RateLimit
        header spelling.
      schema:
        type: integer
        example: 42
    X-RateLimit-Limit:
      description: >-
        Request limit of the budget this request was counted against, for its
        current window: the API key's per-minute sliding window on an
        authenticated call; the per-IP budget on a public route and on a refused
        credential (401, 402, 403, 423).
      schema:
        type: integer
        example: 100
    X-RateLimit-Remaining:
      description: Requests remaining in that budget's current window after this response.
      schema:
        type: integer
        example: 84
    X-RateLimit-Reset:
      description: Unix timestamp when that budget's current window resets.
      schema:
        type: integer
        example: 1710772860
    X-Request-Id:
      description: >-
        Server-generated request identifier for support and tracing. On every
        /api/v1 response, including 304, 408, CORS preflights and every error,
        and always equal to meta.request_id in the body. It is the key of the
        request's usage accounting row and of every log line the request
        emitted, so quote either form to support. A client-supplied X-Request-Id
        request header is ignored: the value is never adopted or echoed.
      schema:
        type: string
        example: req_550e8400
    X-Usage-Accounting:
      description: >-
        Usage-record persistence for a protected V1 handler response. persisted:
        confirmed row; failed: write failed; unknown: completion could not be
        confirmed. Independent of handler success; do not replay successful
        mutations to repair accounting. Absent before accounting admission and
        on public routes. The zero-cost /api/v1/usage route also omits it.
      schema:
        type: string
        enum:
          - persisted
          - failed
          - unknown
    Server-Timing:
      description: >-
        Processing time in milliseconds, for example api;dur=12.345. Includes
        API authentication, quota admission, handler work and response
        construction. Excludes network transit and streamed body or export-file
        transfer. The engineering budget is strictly below 250 ms; this header
        reports observations, not a latency guarantee or a new timeout.
      schema:
        type: string
      example: api;dur=12.345
  schemas:
    TraderPnl:
      type: object
      description: >-
        A trader's daily P&L object. `id` is always present. The five sections
        -- `entries`, `stats`, `monthly`, `year_totals`, `drawdown` -- are
        present unless the request's `sections` parameter excluded them, so a
        request that sends no `sections` always carries all five. An excluded
        section is absent from the object, never null and never an empty array.
      required:
        - id
        - freshness_at
      properties:
        id:
          type: string
          description: Prefixed trader ID (`trd_...`).
        view:
          type: object
          description: >-
            Representation parameters applied to this body. Present only when
            the request sent `from`, `to` or `sections`; omitted otherwise,
            which is what keeps a no-parameter response identical to the one
            this route served before the parameters existed.
          required:
            - from
            - to
            - sections
            - entries_total
            - entries_in_window
            - anchor
          additionalProperties: false
          properties:
            from:
              type: string
              format: date
              nullable: true
              description: >-
                Inclusive UTC lower bound applied to the daily series; null when
                the request left the series unbounded below.
            to:
              type: string
              format: date
              nullable: true
              description: >-
                Inclusive UTC upper bound applied to the daily series; null when
                the request left the series unbounded above.
            sections:
              type: array
              description: >-
                Sections this body carries, in the order the object publishes
                them, whatever order the query listed.
              items:
                type: string
                enum:
                  - entries
                  - stats
                  - monthly
                  - year_totals
                  - drawdown
            entries_total:
              type: integer
              description: >-
                Points in the full stored daily series, before the window.
                Compare with entries_in_window to tell a clipped chart from a
                wallet that really has that many days.
            entries_in_window:
              type: integer
              description: >-
                Points of the daily series inside the window. Equal to
                entries_total when no bound narrowed it, and reported whether or
                not entries was among the requested sections.
            anchor:
              type: object
              nullable: true
              description: >-
                The last daily point strictly before `from`: the cumulative
                baseline the window was cut away from. null when the request set
                no lower bound, or when the window starts at or before the first
                stored point and the slice already begins at the start of the
                history. Cumulative values in `entries` and `drawdown` are never
                rebased to the window, so this is the figure to subtract for a
                window-relative change.
              required:
                - date
                - cumulative_profit
                - total_pnl
                - drawdown
              additionalProperties: false
              properties:
                date:
                  type: string
                  format: date
                cumulative_profit:
                  type: number
                  nullable: true
                  description: >-
                    Cumulative profit carried into the window; null when the
                    stored point has none, the same nullability
                    entries[].cumulative_profit has.
                total_pnl:
                  type: number
                  nullable: true
                  description: >-
                    Cumulative total P&L carried into the window; null on the
                    same terms.
                drawdown:
                  type: number
                  nullable: true
                  description: >-
                    Underwater value at the anchor date; null when that date has
                    no drawdown point, which happens exactly when its
                    cumulative_profit is null. The running peak behind the
                    window is cumulative_profit minus drawdown (drawdown is zero
                    or negative).
        freshness_at:
          type: string
          format: date-time
          nullable: true
          description: >-
            RFC3339 served-freshness clock for this trader's PnL history =
            traders.daily_pnl_recomputed_at, when the daily_pnl read model this
            response is served from was last rebuilt; null when it has never
            been recomputed for the trader. Always present, so read it as a
            value that can be null rather than a key that can be missing.
        entries:
          type: array
          description: >-
            Daily cumulative-P&L series (oldest-first). Present unless the
            request's `sections` excluded it, and clipped to `from`/`to` when
            either is set. cumulative_profit and total_pnl stay cumulative from
            the start of the stored history, so a clipped slice keeps the same
            economic meaning; view.anchor carries the point before the window.
          items:
            type: object
            required:
              - date
              - daily_change
            properties:
              date:
                type: string
                format: date
              markets_traded:
                type: integer
              total_volume:
                type: number
              cumulative_profit:
                type: number
              total_pnl:
                type: number
              daily_change:
                type: number
        stats:
          type: object
          description: >-
            Pre-derived period stats. Present unless the request's `sections`
            excluded it. Always the published all/90d/30d/7d windows over the
            full stored history; `from`/`to` never recompute them over the
            request's range.
          required:
            - all
            - d90
            - d30
            - d7
          properties:
            all:
              type: object
              required:
                - current
                - change
                - change_pct
                - best_day
                - worst_day
                - win_days
                - loss_days
                - avg_day
                - rebase_anchor
              properties:
                current:
                  type: number
                change:
                  type: number
                change_pct:
                  type: number
                best_day:
                  type: number
                best_day_date:
                  type: string
                  format: date
                worst_day:
                  type: number
                worst_day_date:
                  type: string
                  format: date
                win_days:
                  type: integer
                loss_days:
                  type: integer
                avg_day:
                  type: number
                rebase_anchor:
                  type: number
            d90:
              type: object
              required:
                - current
                - change
                - change_pct
                - best_day
                - worst_day
                - win_days
                - loss_days
                - avg_day
                - rebase_anchor
              properties:
                current:
                  type: number
                change:
                  type: number
                change_pct:
                  type: number
                best_day:
                  type: number
                best_day_date:
                  type: string
                  format: date
                worst_day:
                  type: number
                worst_day_date:
                  type: string
                  format: date
                win_days:
                  type: integer
                loss_days:
                  type: integer
                avg_day:
                  type: number
                rebase_anchor:
                  type: number
            d30:
              type: object
              required:
                - current
                - change
                - change_pct
                - best_day
                - worst_day
                - win_days
                - loss_days
                - avg_day
                - rebase_anchor
              properties:
                current:
                  type: number
                change:
                  type: number
                change_pct:
                  type: number
                best_day:
                  type: number
                best_day_date:
                  type: string
                  format: date
                worst_day:
                  type: number
                worst_day_date:
                  type: string
                  format: date
                win_days:
                  type: integer
                loss_days:
                  type: integer
                avg_day:
                  type: number
                rebase_anchor:
                  type: number
            d7:
              type: object
              required:
                - current
                - change
                - change_pct
                - best_day
                - worst_day
                - win_days
                - loss_days
                - avg_day
                - rebase_anchor
              properties:
                current:
                  type: number
                change:
                  type: number
                change_pct:
                  type: number
                best_day:
                  type: number
                best_day_date:
                  type: string
                  format: date
                worst_day:
                  type: number
                worst_day_date:
                  type: string
                  format: date
                win_days:
                  type: integer
                loss_days:
                  type: integer
                avg_day:
                  type: number
                rebase_anchor:
                  type: number
        monthly:
          type: array
          description: >-
            Per-month P&L aggregation. Present unless the request's `sections`
            excluded it. Whole months over the full stored history, never
            clipped to `from`/`to`, so a month is never a partial month.
          items:
            type: object
            required:
              - year
              - month
              - pnl
              - markets_traded
            properties:
              year:
                type: integer
              month:
                type: integer
              pnl:
                type: number
              markets_traded:
                type: integer
        year_totals:
          type: array
          description: >-
            Per-year P&L totals (ascending by year). Present unless the
            request's `sections` excluded it. Whole years over the full stored
            history, never clipped to `from`/`to`.
          items:
            type: object
            required:
              - year
              - pnl
            properties:
              year:
                type: integer
              pnl:
                type: number
        drawdown:
          type: array
          description: >-
            Underwater (drawdown) series. Present unless the request's
            `sections` excluded it, and clipped to `from`/`to` when either is
            set. The running peak behind each point is the full-history peak, so
            a clipped slice is not rebased; view.anchor.drawdown carries the
            value at the point before the window.
          items:
            type: object
            required:
              - date
              - cumulative_profit
              - drawdown
            properties:
              date:
                type: string
                format: date
              cumulative_profit:
                type: number
              drawdown:
                type: number
    ResponseMeta:
      type: object
      required:
        - request_id
        - cached
        - cost
      properties:
        request_id:
          type: string
          description: >-
            Unique request ID (req_ prefix). The same value as the X-Request-Id
            response header, the request's usage accounting row and its log
            lines.
        cached:
          type: boolean
        cache_age_s:
          type: integer
          description: >-
            Cache age in seconds. Omitted when the response was not cached, and
            also when it was cached but its age cannot be established (an entry
            stored before its cache carried a computed instant). Never a
            placeholder: an unknown age is reported as no value rather than as
            the cache TTL.
        cost:
          type: integer
          description: >-
            Advisory request weight (relative compute cost). 1 for simple reads;
            higher for heavier endpoints. Not a credit/price.
        ranking_generation:
          type: integer
          description: >-
            Committed PostgreSQL-owned leaderboard generation for the returned
            rows and cursor. Present on GET /api/v1/leaderboard; omitted on
            endpoints that do not read this ranking.
        ranking_as_of:
          type: string
          format: date-time
          description: >-
            Authoritative RFC3339 timestamp from cache_generations.updated_at
            for ranking_generation. It is read in the same repeatable-read
            snapshot as the leaderboard rows and is not request time, cache
            write time, or row insertion order.
        directional_source:
          type: string
          enum:
            - live
            - degraded
          description: >-
            Which path produced the team-directional read on this response. Only
            present on endpoints that compute one (today: GET
            /api/v1/sports-edge-signals). "live" means the read RAN. "degraded"
            means it FAILED, so nothing was measured and the ranking fell back
            to raw conviction. The flag describes the READ, not its consequence:
            a read that ran and found nothing groupable also leaves the
            directional fields null, and that is honestly "live" -- the
            per-signal nulls already say "nothing to enrich here", so this
            snapshot-level flag carries only what they cannot, namely whether
            the read ran at all. A degraded response is cached on the shorter
            degraded TTL so it self-heals. Reported SEPARATELY from
            ranking_source because the two degradations are independent -- a
            sharp-money DB miss weakens the ranking DATA, a directional failure
            removes a ranking WEIGHT -- and a consumer down-weighting a degraded
            response needs to know which input it lost. Omitted on endpoints
            that compute no directional read.
        ranking_source:
          type: string
          enum:
            - live
            - db_only
          description: >-
            Which ranking-data path produced this response. Only present on
            endpoints that can degrade a ranking (today: GET
            /api/v1/sports-edge-signals). "live" is the normal path (the current
            holder pile from the provider batch); "db_only" is the degraded
            fallback (a truthful but weaker trader_markets ranking) served when
            the live sharp-money ranking batch is unavailable (a sharp-money DB
            read failure, not a Polymarket outage) and cached on a shorter TTL,
            so a consumer can down-weight or skip it. Omitted on endpoints that
            never degrade.
        category_skill_source:
          type: string
          enum:
            - live
            - partial
            - degraded
            - unavailable
          description: >-
            Whole filtered snapshot category-evidence status before pagination.
            Operational live always remains partial source coverage.
        category_skill_model_version:
          type: string
        category_skill_taxonomy_version:
          type: string
        category_skill_platform:
          type: string
          const: polymarket
        category_skill_scope:
          type: string
          const: observed_goldsky_primary_taker_fill
        category_skill_source_coverage:
          type: string
          enum:
            - partial_whale_threshold_fills
            - graded_wallet_fills
        category_skill_observation_started_at:
          type: string
          format: date-time
        category_skill_model_operationally_degraded:
          type: boolean
          description: >-
            Whole-model operational readiness captured with the category model
            snapshot. Present on category-enriched responses even when the
            filtered signal list is empty. When true, category_skill_source is
            degraded and sports-edge-signals uses the shorter degraded cache
            TTL.
        category_skill_status_counts:
          type: object
          required:
            - live
            - insufficient
            - stale
            - unknown
            - degraded
          properties:
            live:
              type: integer
              minimum: 0
            insufficient:
              type: integer
              minimum: 0
            stale:
              type: integer
              minimum: 0
            unknown:
              type: integer
              minimum: 0
            degraded:
              type: integer
              minimum: 0
        category_skill_base_payload_hash:
          type: string
          pattern: ^[0-9a-f]{64}$
          description: >-
            SHA-256 of the funded signal membership/order/rank/cursor vector
            immediately before category-skill enrichment. Sports-edge-signals
            only.
        category_skill_enriched_base_payload_hash:
          type: string
          pattern: ^[0-9a-f]{64}$
          description: >-
            Independent SHA-256 recomputation over the same base fields
            immediately after category-skill enrichment. Equality with
            category_skill_base_payload_hash proves shadow enrichment did not
            change funded inputs. Sports-edge-signals only.
    ApiError:
      type: object
      required:
        - object
        - error
        - meta
      properties:
        object:
          type: string
          const: error
        error:
          type: object
          required:
            - code
            - message
          properties:
            code:
              type: string
              description: >-
                FROZEN: an existing value never changes meaning. request_timeout
                (408, #16146) was added the way insufficient_scope was: the
                handler did not answer inside the server's 30-second timeout.
                Retry-After and retry_at ride on it only for a safe method (GET,
                HEAD); a timed-out mutation may have completed, so check its
                state and reuse its Idempotency-Key.
              enum:
                - bad_request
                - invalid_api_key
                - subscription_required
                - forbidden
                - insufficient_scope
                - not_found
                - account_locked
                - rate_limited
                - rate_limit_unavailable
                - internal_error
                - request_timeout
            message:
              type: string
            doc_url:
              type: string
            param:
              type: string
            retry_at:
              type: string
              format: date-time
              description: >-
                The recommended next request instant (RFC3339), always in the
                future. Present on every retryable error: `pick_not_released`,
                `rate_limited`, `rate_limit_unavailable`, and
                `read_model_warming`. Omitted otherwise. The absolute twin of
                `Retry-After`; prefer the header for the sleep duration. For
                `pick_not_released`, the earliest of the next scheduled release,
                the next automatic selector attempt, the operating-window start,
                or about 60 seconds. See that response.
            freshness:
              $ref: '#/components/schemas/FreshnessFailure'
            reason:
              type: string
              enum:
                - cursor_expired
                - unknown_endpoint
                - pick_not_released
                - trader_not_tracked
                - read_model_warming
                - database_unavailable
                - request_accounting_unavailable
                - idempotency_in_progress
                - webhook_delivery_in_progress
                - webhook_secret_rotation_not_prepared
                - webhook_secret_rotation_overlap_active
                - sandbox_api_key
                - api_key_in_query
                - subscription_inactive
                - monthly_quota_exceeded
                - invalid_query
                - unknown_query_parameter
                - invalid_path
                - invalid_body
                - unsupported_media_type
                - payload_too_large
                - method_not_allowed
                - ip_rate_limited
                - ip_throttled
                - export_expired
                - freshness_ceiling_unsatisfied
              description: >-
                ADDITIVE (#7209). The specific, actionable cause behind `code`,
                when there is one more specific than the code itself. `code`
                keeps its published values, so existing clients are unaffected;
                new clients branch on `reason`. Omitted when the code already
                says everything we know. pick_not_released: no Pick of the Day
                is published for the current product day; schedule one request
                against retry_at instead of polling. unknown_endpoint: the PATH
                is not a route on this API -- read GET /api/v1, do not retry.
                trader_not_tracked: the wallet is real and the URL is right, but
                the trader is outside the HOT/WARM sync tiers -- stop asking for
                this wallet. cursor_expired: pagination went stale mid-walk --
                re-request the first page and continue. read_model_warming: the
                requested endpoint cannot serve its read model yet; exact causes
                are endpoint-specific and can include a cold or contended
                refresh or a dependency that prevented refresh.
                database_unavailable: the API's database or its connection pool
                is temporarily unreachable (a connection-class failure, not a
                query fault); code stays rate_limit_unavailable, nothing is
                rate-limited, retry after Retry-After / retry_at.
                idempotency_in_progress: retain the exact Idempotency-Key and
                request body, then retry shortly. webhook_delivery_in_progress:
                retry the URL or signing-secret configuration change after the
                destination's active request completes.
                request_accounting_unavailable: accounting capacity is
                unavailable before the handler executes; retry after Retry-After
                / retry_at. sandbox_api_key: the credential is a sandbox key
                (oxi_sk_test_) from POST /api/v1/agents/register, which only the
                sandbox server accepts -- call the sandbox base URL with it, or
                get a live key or OAuth access token; do not retry it here.
                api_key_in_query: the key was sent as a ?token= query parameter,
                which no route reads because URLs land in logs and history; the
                key itself was not checked -- resend it as Authorization:
                Bearer. subscription_inactive: the key is valid but the
                account's Pro subscription has lapsed (402
                subscription_required); permanent until a person reactivates at
                https://0xinsider.com/billing, which the message names -- stop
                retrying on a schedule and surface the link. The key owner is
                emailed once per lapse. monthly_quota_exceeded: the account has
                used the requests its plan includes for the UTC calendar month
                (429 rate_limited); retry_at and Retry-After name the first of
                next month, the only retry that can succeed, and the message
                names https://0xinsider.com/developers, where pay as you go for
                requests over the quota is turned on. The X-Monthly-Quota-Limit,
                X-Monthly-Quota-Remaining and X-Monthly-Quota-Reset headers on
                every authenticated response say how close the account is.
                invalid_query, invalid_path, invalid_body (400 bad_request,
                #16146): a query parameter, a path segment or the JSON body did
                not parse or does not fit the route's schema, so no handler ran;
                param names the field when the parser named one (a query key, a
                path segment, a JSON path such as traders[0], or body); fix the
                request, never retry it as sent. unsupported_media_type (415
                bad_request, param content-type): send the body with
                Content-Type: application/json. payload_too_large (413
                bad_request, param body): the body is over 1048576 bytes.
                method_not_allowed (405 bad_request): the path is a route but
                not with this method; the Allow header names the methods it
                serves. ip_rate_limited (429 rate_limited, #16380): the
                per-address budget every caller behind one IP shares, counted
                before authentication, is spent; not the key's own window, and
                the RateLimit-* headers describe that bucket. ip_throttled (429
                rate_limited): the address is in a cooldown after sustained
                over-limit traffic; Retry-After is minutes to days, and a
                request before it does not shorten the cooldown.
        meta:
          $ref: '#/components/schemas/ResponseMeta'
    FreshnessFailure:
      type: object
      required:
        - max_age_s
        - data_quality_status
      properties:
        max_age_s:
          type: integer
          format: int64
          minimum: 0
          description: The caller's requested whole-response freshness ceiling in seconds.
        actual_age_s:
          type: integer
          format: int64
          minimum: 0
          description: >-
            Age in seconds of the oldest stored data_quality.as_of clock, when
            one is available.
        as_of:
          type: string
          format: date-time
          description: >-
            The oldest stored data-quality clock used to calculate actual_age_s,
            when one is available.
        data_quality_status:
          type: string
          enum:
            - fresh
            - partial
            - unknown
            - untracked
            - unavailable
          description: >-
            The trader body's whole-response data-quality status. Only fresh can
            satisfy max_age_s.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: >-
        Legacy default or named integration API key, or OAuth 2.1 access token,
        in the Authorization header as `Bearer oxi_sk_live_...` or `Bearer
        oxi_at_...`. Default keys retain full access; integration keys are
        limited to their approved read, webhooks, export and usage scopes and
        expire within 90 days. All credentials share the owner's account limits.
        Data calls require an active Pro subscription and return live data. A
        401 carries WWW-Authenticate: Bearer
        resource_metadata="https://api.0xinsider.com/.well-known/oauth-protected-resource"
        (RFC 6750 section 3, RFC 9728).
    oauth2:
      type: oauth2
      description: >-
        OAuth 2.1 authorization code flow with PKCE S256 for apps and MCP
        clients acting for a user. Public clients only (no client secret):
        register with RFC 7591 at https://api.0xinsider.com/oauth/register or
        present an https client ID metadata document URL as client_id.
        Authorization server metadata:
        https://api.0xinsider.com/.well-known/oauth-authorization-server. The
        access token (oxi_at_..., one hour) is sent as `Authorization: Bearer`;
        refresh tokens rotate on every use. A route outside the token's scopes
        answers 403 insufficient_scope. Walkthrough:
        https://0xinsider.com/auth.md.
      flows:
        authorizationCode:
          authorizationUrl: https://0xinsider.com/oauth/authorize
          tokenUrl: https://api.0xinsider.com/oauth/token
          refreshUrl: https://api.0xinsider.com/oauth/token
          scopes:
            read: >-
              Read markets, traders, large trades, positions, reports, search,
              the event stream and every MCP tool
            webhooks: Create, list, verify, rotate and delete webhook endpoints
            export: Start, poll and download trader exports
            usage: Read the caller's API usage counters

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.