Critical-risk tools in Bybit MCP Server
58 of the 326 tools in Bybit MCP Server are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
batchCancelOrdersDestructiveCancel multiple orders in a single API call.\n\n- Max 20 orders per request for futures/options, 10 for spot\n- Each order requires either
-
cancelAllOrdersDestructiveCancel all open orders matching the specified criteria.\n\n- For linear/inverse: must provide at least
-
cancelAllQuotesDestructiveCancel all active quotes for the authenticated account.\nReturns an array of results with the cancellation status of each quote.\n\n**Rate Limit:** 50 requests per second.\n\nAg...
-
cancelAllRfqsDestructiveCancel all active RFQs for the authenticated account.\nReturns an array of cancellation results, one per RFQ.\nWhen an inquirer cancels, all corresponding quotes become invalid....
-
cancelAllSpreadOrdersDestructiveCancel all open spread trading orders, optionally filtered by symbol.\n\n**Usage Scenarios:**\n- Cancel all open spread orders across all symbols by setting
-
cancelOrderDestructiveCancel a single open order by
-
cancelRfqDestructiveCancel an active RFQ. You must pass either
-
cancelSpreadOrderDestructiveCancel a single spread trading order by its order ID or custom order link ID.\n\n**Usage Scenarios:**\n- Cancel an open limit order that has not yet been fully filled.\n- Use ei...
-
removeAdDestructiveCancel/remove a P2P advertisement.
-
removeLiquidityFinancialWithdraw funds from a Liquidity Mining pool position.\n\n-
-
wsBatchCancelOrdersDestructiveBatch cancel multiple existing unfilled or partially filled orders in a single WebSocket request on Bybit V5 unified account.\n\nIMPORTANT: This tool places/modifies real orders...
-
wsCancelOrderDestructiveCancel an existing unfilled or partially filled order via WebSocket on Bybit V5 unified account.\n\nIMPORTANT: This tool places/modifies real orders via WebSocket. Confirm symbo...
-
confirmQuoteFinancialConfirm the quote and execute the conversion trade.\n\n**Important:**\n- Must confirm within the quote validity period\n- Trade execution is asynchronous and will not complete i...
-
executePurchaseFinancialPlace a buy order to purchase on-chain tokens with payment tokens.\nReturns an
-
executeQuoteFinancialExecute (accept) a quote to initiate the multi-leg trade.\nThis endpoint is **asynchronous** - the order is sent to the matching engine.\nTo confirm execution, check the Get Tra...
-
executeRedeemFinancialPlace a sell order to redeem on-chain tokens for payment tokens.\nReturns an
-
quickRepaymentFinancialExecute quick repayment for specified coin
-
accountBorrowFinancialManual borrow for Unified account.\n\n**Rules:**\n- Borrowing via OpenAPI endpoint supports **variable rate borrowing only**\n- This endpoint is for manual borrowing operations ...
-
accountRepayFinancialManually repay the liabilities of Unified account.\n\n**Rules:**\n- If neither
-
claimLiquidityInterestFinancialClaim all available interest for the specified product in one click.\n\n- Pass
-
distributeAwardFinancialDistribute a voucher to a specified user.\n\n**Rate Limit:** 100 req/s\n\n**Notes:**\n- Spot airdrop amount supports up to 16 decimal places\n- Other voucher types support up to...
-
placeAdvanceEarnOrderFinancialPlace a Dual Assets staking order. Requires **Earn** permission on the API key.\n\n**Rate Limit:** 5 req/s (UID)\n\n**Notes:**\n- The order is processed **asynchronously**. A su...
-
placeEarnOrderFinancialPlace a Stake or Redeem order.\n\n**Notes:**\n- During peak market lending demand, principal redemption may be delayed; expected to be processed within 48 hours\n- Redemption re...
-
placeFixedTermOrderFinancialPlace a staking order for a fixed term product.\n\n**Notes:**\n-
-
placeTokenOrderFinancialPlace a Mint (minting) or Redeem (redemption) order for BYUSDT Token.\n\n**Mint**: Transfer USDT from FlexibleSaving account to get BYUSDT\n**Redeem**: Redeem BYUSDT to get USDT...
-
redeemFixedTermFinancialEarly redemption for a fixed term position.\n\n**Notes:**\n- FundPool products with
-
reinvestLiquidityFinancialReinvest accumulated interest back into an existing Liquidity Mining position.\n\n**Rate Limit:** 5 req/s (UID)
-
renewFixedBorrowFinancialRenew (extend) an existing fixed-rate borrow contract.\n\n**Rules:**\n- The contract must have prepayment amount available (
-
SmallAssetQuoteFinancialApply for batch conversion quote for a small asset list. Returns quote ID and per-coin conversion details.\n- API key permission: Convert\n- Rate limit: 5/s\n- Only supports Uni...
-
accountFixedBorrowFinancialCreate a fixed-rate borrow order for Unified account.\n\n**Rules:**\n- Supports fixed terms: 7, 14, 30, 90, 180 days\n- Order strategy:
-
accountNoConvertRepayFinancialManual repay without asset conversion (lossless repay). The system will only use the spot available balance of the debt currency to repay.\n\n**Rules:**\n- If only
-
addLiquidityFinancialInject funds into a Liquidity Mining pool.\n\n-
-
addMarginFinancialAdd additional collateral (margin) to a leveraged Liquidity Mining position to avoid liquidation.\n\n**Rate Limit:** 5 req/s (UID)\n\nAgent hint: IMPORTANT: This adds real colla...
-
applyQuoteFinancialApply for a conversion quote. The system will return:\n- Quote ID (quoteTxId)\n- Real-time exchange rate\n- Quote expiration time\n- Conversion amounts\n\n**Quote Rules:**\n- Qu...
-
batchCreateOrdersFinancialPlace multiple orders in a single API call.\n\n- Max 20 orders per request for futures/options, 10 for spot\n- Each order is validated independently; partial success is possible...
-
closeComboBotDestructiveCloses (stops) a running futures combo trading bot. The bot will cancel\nall pending orders and close all positions across the portfolio.\n\nThe bot_id can be obtained from the ...
-
closeFGridBotDestructiveCloses (stops) a running futures grid trading bot. The bot will cancel\nall pending grid orders and close positions.\n\nThe bot_id can be obtained from the createFGridBot respon...
-
closeFMartBotDestructiveCloses (stops) a running futures Martingale trading bot. The bot will\ncancel all pending orders and close the position.\n\nThe bot_id can be obtained from the createFMartBot re...
-
ConvertExecuteFinancialConfirm and execute a conversion based on quote ID. The exchange is async;\ncheck the final status by calling the query result API.\nMake sure you confirm the quote before it ex...
-
createChaseOrderStrategyFinancialCreates a Chase Order strategy that continuously monitors market price and\nautomatically adjusts order price to improve fill probability.\n\n**When to use:**\n- You need fast e...
-
createDCABotFinancialCreates a DCA bot that automatically invests at regular intervals.\nSpecify investment frequency (in seconds), quote coin, trading pairs\nwith individual amounts, and optional m...
-
createFGridBotFinancialCreates a single futures grid trading bot. The bot will automatically\nplace grid orders within the specified price range.\n\nRequired parameters include symbol, grid_mode, pric...
-
createFMartBotFinancialCreates a futures Martingale trading bot. The bot opens an initial position\nand adds to it when price drops (long mode) or rises (short mode) by the\nconfigured price_float_per...
-
createGridBotFinancialCreates a spot grid bot with the specified trading pair, price range,\ngrid count, and investment amount. Optionally supports entry price,\nstop-loss/take-profit, trailing stop,...
-
createIcebergStrategyFinancialCreates an Iceberg strategy that splits a large order into multiple smaller child orders,\ndisplaying only one at a time to hide trading intent.\n\n**When to use:**\n- You have ...
-
createOrderFinancialPlace a new order on the Bybit exchange.\n\n- **Spot:** supports normal orders, TP/SL orders, and conditional (stop) orders via
-
createSpreadOrderFinancialCreate a new spread trading order.\n\n**Usage Scenarios:**\n- Open a new spread position by placing a limit or market order on a spread combination symbol.\n- Use
-
postCryptoLoanFixedBorrowFinancialCreate a fixed-term borrow order with specified loan currency, amount, rate, term, and collateral.\n\n**Features:**\n- Private endpoint (authentication required)\n- Fixed-term l...
-
postCryptoLoanFixedFullyRepayFinancialRepay entire loan principal and interest.\n\n**Rate limit:** 1 request per UID
-
postCryptoLoanFixedRenewFinancialRenew an existing loan by creating a new loan to repay the old one.\n\n**Features:**\n- Extend loan term before expiration\n- Add additional collateral if needed\n- Rate limit: ...
-
postCryptoLoanFixedRepayCollateralFinancialRepay loan by converting collateral to loan currency.\n\n**Rate limit:** 1 request per UID
-
postCryptoLoanFlexibleBorrowFinancialBorrow crypto with flexible hourly interest rates.\n\n**Features:**\n- Private endpoint (authentication required)\n- Hourly floating interest rate\n- Repay anytime without penal...
-
postCryptoLoanFlexibleRepayFinancialRepay flexible loan with loan currency.\n\n**Features:**\n- Repay anytime without penalty\n- Partial or full repayment supported\n- Interest calculated up to repayment time\n- R...
-
postCryptoLoanFlexibleRepayCollateralFinancialRepay loan by converting collateral to loan currency.\n\n**Features:**\n- Use pledged collateral to repay loan\n- Auto-convert collateral at market rate\n- Convenient when lacki...
-
QuoteApplyFinancialApply for a conversion quote via OpenAPI, get conversion rate and quote ID.\n- OpenAPI interface, requires API Key authentication\n- ACL permission: RESOURCE_GROUP_EXCHANGE_HIST...
-
SmallAssetConvertFinancialConfirm and execute small asset conversion using the quoteId returned by the get-quote interface.\nThe exchange is async; check final status via the Get Exchange History endpoin...
-
wsBatchCreateOrdersFinancialBatch place multiple orders in a single WebSocket request on Bybit V5 unified account.\n\nIMPORTANT: This tool places/modifies real orders via WebSocket. Confirm symbol, side, q...
-
wsCreateOrderFinancialPlace a new order via WebSocket on Bybit V5 unified account.\n\nIMPORTANT: This tool places/modifies real orders via WebSocket. Confirm symbol, side, quantity, and price with th...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.