---
title: "Polymarket pre-event flow scan: large positions, wallet-newness, coordinated timing."
method: POST
path: "/v2/suspicious_timing_scan"
tags: ["market-integrity"]
---

# Polymarket pre-event flow scan: large positions, wallet-newness, coordinated timing.

`POST /v2/suspicious_timing_scan`

Suspicious-timing risk scan for Polymarket markets. Multi-signal scan: large pre-event positions, ratio of wallets new to this market, coordinated timing clusters, one-sided positioning, sensitive-keyword categories (military, regime change, intel, monetary policy). Returns 0-100 score, severity, triggered signals with evidence, top 5 positioners with new-wallet flags. Calibrated against publicly reported cases. Statistical signal only — not legal determination.

## Request body

- object
  - `slug` string — Polymarket market slug
  - `market_id` string — Or Polymarket conditionId
  - `window_hours` integer — Pre-event window in hours (default 72)
  - `min_position_usd` number — Min notional to flag (default $1000)

## Response `200`

Success (synthetic example)

## Other responses

- `400` — Bad Request — invalid or missing parameters.
- `402` — Payment Required (x402): response carries payment requirements; retry with the X-PAYMENT header (USDC on Base).

---

[API](https://skmtc.net/tooloracle/apis/tooloracle-mcp-platform.md) · [All operations](https://skmtc.net/tooloracle/apis/tooloracle-mcp-platform/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tooloracle/tooloracle-mcp-platform/versions/0f85b83186f5/schema)