flip_move

Sent when the flip stands more than your chosen number of points from where it was at the session's first reading, or at its last alert.

POSTyour https addressX-FirmTape-Event: flip_move

Plan LIVEPayload version 1Signed HMAC-SHA256Schema flip_move.schema.json

This event serves

Plan: LIVE. LIVE: today's session every second, alerts, ASK, the levels API and the platform integrations, and 5 LAB credits a month. Every finished session is free in REPLAY. Pricing. Turn it on: Account, Level alerts: a webhook address, and the event on the watchlist.

When it is sent

The size is the one you picked on the watchlist, in SPX points, scaled to the symbol's price for the tickers.
The new distance has held for twenty seconds.
The anchor moves to the new flip at each alert.

Payload

Field	Meaning	Unit
version1	Payload version, `1`.
idstring	Event id, `evt_` and 24 hex digits. The same on every try and for every account the event goes to: drop one you have seen.
type"flip_move"	`flip_move`.
symbolstring	SPX, ES, NQ, RTY or a ticker.
levelobject	The level the event is about.
level.kindflip \| call_wall \| put_wall \| net_gamma \| price \| null	`flip`, `call_wall`, `put_wall`, `net_gamma`, or `price` for a price line.
level.valuenumber \| null	Its value at the event.	index points
level.fromnumber \| null	Moves: where it stood before.	index points
pricenumber \| null	The price at the event.	index points
bookvolume \| measured	`volume`: the volume book's levels.
tsstring	When it was found, ISO 8601 in New York time.
daystring	The ET trading day.
levelsobject	The volume book's levels at the event.
levels.flipnumber \| null	Flip.	index points
levels.call_wallnumber \| null	Call wall.	index points
levels.put_wallnumber \| null	Put wall.	index points
levels.put_supportdeprecatednumber \| null	The put wall under its first name. Deprecated: read `put_wall`; removed after 2026-11-30.	index points
textstring	The sentence Telegram and push show.
directionup \| down	Which way the flip moved.
threshold_pointsnumber	The size you picked.
fromstring	ES, NQ, RTY: the index whose book moved by the basis gives the levels.
basisnumber \| null	ES, NQ, RTY: the basis at the event.	index points
levels_asofstring \| null	Symbols on a five-minute book: when that book was built.
alertobject	Alert lines only: the line that fired.
alert.idstring	The line, `al_...`.
alert.kindstring	`price` or `level`.
alert.levelstring \| null	A level line: `flip`, `call_wall` or `put_wall`.
alert.pricenumber \| null	A price line: its price.	index points
alert.modestring	`once` or `repeat`.

Delivery


Answer	Any 2xx within 3 seconds. Redirects are not followed.
Retries	No answer, a 429 or a 5xx: tried again after 1 s and 4 s, three tries in all, the same id each time.
Switched off	After 10 failed events in a row; the account page shows why. Saving the address switches it on again.
Volume	Up to 30 events a minute per account; past that they are dropped and counted on the account page.
Test	`type: "test"`, from Send test
Log	The last delivery (time, status, tries) on the account page.

Verify every request before reading it: Webhooks: verify the signature.

flip_cross · wall_break · regime_change · wall_move · level_near · price_alert · level_line · order · test

Request we send

POST https://your.server/firmtape
Content-Type: application/json
User-Agent: FirmTape-Webhooks/1
X-FirmTape-Event: flip_move
X-FirmTape-Event-Id: evt_3f9a0c6e21d4b7a8e5f10c2d
X-FirmTape-Timestamp: 1760034725
X-FirmTape-Signature: sha256=9b1e...

Body

{
  "version": 1,
  "id": "evt_3f9a0c6e21d4b7a8e5f10c2d",
  "type": "flip_move",
  "symbol": "SPX",
  "price": 6712.25,
  "book": "volume",
  "ts": "2026-10-09T14:32:05-04:00",
  "day": "2026-10-09",
  "levels": {
    "flip": 6715.5,
    "call_wall": 6750,
    "put_wall": 6700,
    "put_support": 6700
  },
  "level": {
    "kind": "flip",
    "value": 6725.5,
    "from": 6715.5
  },
  "direction": "up",
  "threshold_points": 10,
  "text": "SPX flip moved up 10.00, from 6,715.50 to 6,725.50"
}

Verify

NodePython

const crypto = require("node:crypto");
// rawBody: the request body as received, a Buffer or a string, before any JSON parsing
function verify(rawBody, headers, secret) {
  const t = headers["x-firmtape-timestamp"];
  const got = String(headers["x-firmtape-signature"] || "");
  if (!t || Math.abs(Date.now() / 1000 - Number(t)) > 300) return false;
  const want = "sha256=" + crypto.createHmac("sha256", secret).update(`${t}.${rawBody}`).digest("hex");
  return got.length === want.length && crypto.timingSafeEqual(Buffer.from(got), Buffer.from(want));
}

import hmac, hashlib, time

def verify(raw_body: bytes, headers, secret: str) -> bool:
    t = headers.get("X-FirmTape-Timestamp", "")
    got = headers.get("X-FirmTape-Signature", "")
    if not t or abs(time.time() - int(t)) > 300:
        return False
    want = "sha256=" + hmac.new(secret.encode(), t.encode() + b"." + raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(got, want)

Measurements of dealer positioning, never a forecast or a trade call. This page is built from FirmTape's public contract, the same files the OpenAPI document is built from; the tests hold them against the route code. Markdown: /docs/developers/live/events/flip_move.md.

flip_move

When it is sent

Payload

Delivery

Related events