# wall_move

> Sent when the call wall or the put wall stands on a new strike and holds it.

Source: https://firmtape.com/docs/developers/live/events/wall_move

Sent when the call wall or the put wall stands on a new strike and holds it.

`POST your https address` · `X-FirmTape-Event: wall_move`

Plan LIVE · Payload version 1 · Signed HMAC-SHA256 · Schema wall_move.schema.json

**This event serves:** [LIVE: Level alerts on a watchlist](https://firmtape.com/docs/live#level-alerts), [LIVE: Webhooks](https://firmtape.com/docs/live#webhooks). **Plan:** [LIVE](https://firmtape.com/features/live). LIVE: today's session every second, alerts, ASK, the levels API and the platform integrations, and 5 LAB credits a month. Every finished session is free in REPLAY. Turn it on: Account, Level alerts: a webhook address, and the event on the watchlist.

## When it is sent

- The new strike has held for twenty seconds.
- ES, NQ and RTY: measured on the index levels, so a step of the basis is not a move.
- A wall that returns to a strike it alerted on within fifteen minutes is quiet.

## Payload

| Field | Meaning | Unit |
| --- | --- | --- |
| `version` (1) | Payload version, `1`. |  |
| `id` (string) | Event id, `evt_` and 24 hex digits. The same on every try and for every account the event goes to: drop one you have seen. |  |
| `type` ("wall_move") | `wall_move`. |  |
| `symbol` (string) | SPX, ES, NQ, RTY or a ticker. |  |
| `level` (object) | The level the event is about. |  |
| `level.kind` (flip \| call_wall \| put_wall \| net_gamma \| price \| null) | `flip`, `call_wall`, `put_wall`, `net_gamma`, or `price` for a price line. |  |
| `level.value` (number \| null) | Its value at the event. | index points |
| `level.from` (number \| null) | Moves: where it stood before. | index points |
| `price` (number \| null) | The price at the event. Null on a `premarket` event (see `phase`). | index points |
| `book` (volume \| measured) | `volume`: the volume book's levels. |  |
| `ts` (string) | When it was found, ISO 8601 in New York time. |  |
| `day` (string) | The ET trading day. |  |
| `levels` (object) | The volume book's levels at the event. |  |
| `levels.flip` (number \| null) | Flip. | index points |
| `levels.call_wall` (number \| null) | Call wall. | index points |
| `levels.put_wall` (number \| null) | Put wall. | index points |
| `levels.put_support` (number \| null) deprecated | The put wall under its first name. Deprecated: read `put_wall`; removed after 2026-11-30. | index points |
| `text` (string) | The sentence Telegram and push show. |  |
| `direction` (up \| down) | Which way the wall moved. |  |
| `threshold_points` (number) | Sized events (`flip_move`, `level_near`): the size the account picked, SPX points. | index points |
| `from` (string) | ES, NQ, RTY: the index whose book moved by the basis gives the levels. |  |
| `basis` (number \| null) | ES, NQ, RTY: the basis at the event. | index points |
| `levels_asof` (string \| null) | Symbols on a five-minute book: when that book was built. |  |
| `phase` (premarket) | Present only when a price line fired before the bell, from 04:00 ET to the open on a trading day: `premarket`. The line was crossed on the premarket's minute prices; `price` is then null, and `levels` are the previous session's closing levels. Absent on every event in the session. |  |
| `alert` (object) | Alert lines only: the line that fired. |  |
| `alert.id` (string) | The line, `al_...`. |  |
| `alert.kind` (string) | `price` or `level`. |  |
| `alert.level` (string \| null) | A level line: `flip`, `call_wall` or `put_wall`. |  |
| `alert.price` (number \| null) | A price line: its price. | index points |
| `alert.mode` (string) | `once` or `repeat`. |  |

## Delivery

- **Answer**: Any 2xx within 3 seconds. Redirects are not followed.
- **Retries**: No answer, a 429 or a 5xx: tried again after 1 s and 4 s, three tries in all, the same id each time.
- **Switched off**: After 10 failed events in a row; the account page shows why. Saving the address switches it on again.
- **Volume**: Up to 30 events a minute per account; past that they are dropped and counted on the account page.
- **Test**: `type: "test"`, from **Send test**
- **Log**: The last delivery (time, status, tries) on the account page.

## Request we send

```
POST https://your.server/firmtape
Content-Type: application/json
User-Agent: FirmTape-Webhooks/1
X-FirmTape-Event: wall_move
X-FirmTape-Event-Id: evt_3f9a0c6e21d4b7a8e5f10c2d
X-FirmTape-Timestamp: 1760034725
X-FirmTape-Signature: sha256=9b1e...
```

## Body

```json
{
  "version": 1,
  "id": "evt_3f9a0c6e21d4b7a8e5f10c2d",
  "type": "wall_move",
  "symbol": "SPX",
  "price": 6712.25,
  "book": "volume",
  "ts": "2026-10-09T14:32:05-04:00",
  "day": "2026-10-09",
  "levels": {
    "flip": 6715.5,
    "call_wall": 6750,
    "put_wall": 6700,
    "put_support": 6700
  },
  "level": {
    "kind": "call_wall",
    "value": 6760,
    "from": 6750
  },
  "direction": "up",
  "text": "SPX call wall moved from 6,750.00 to 6,760.00"
}
```

## Verify

```js
const crypto = require("node:crypto");
// rawBody: the request body as received, a Buffer or a string, before any JSON parsing
function verify(rawBody, headers, secret) {
  const t = headers["x-firmtape-timestamp"];
  const got = String(headers["x-firmtape-signature"] || "");
  if (!t || Math.abs(Date.now() / 1000 - Number(t)) > 300) return false;
  const want = "sha256=" + crypto.createHmac("sha256", secret).update(`${t}.${rawBody}`).digest("hex");
  return got.length === want.length && crypto.timingSafeEqual(Buffer.from(got), Buffer.from(want));
}
```

```python
import hmac, hashlib, time

def verify(raw_body: bytes, headers, secret: str) -> bool:
    t = headers.get("X-FirmTape-Timestamp", "")
    got = headers.get("X-FirmTape-Signature", "")
    if not t or abs(time.time() - int(t)) > 300:
        return False
    want = "sha256=" + hmac.new(secret.encode(), t.encode() + b"." + raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(got, want)
```