Critical-risk tools in Bybit

Critical severity Bybit MCP Server 52 of 245 tools

52 of the 245 tools in Bybit are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

batch_cancel_order Destructive

batch_cancel_order
cancel_all_orders Destructive

Cancel all open orders for a symbol.
cancel_all_rfq_quotes Destructive

Cancel all open quotes.
cancel_all_rfqs Destructive

Cancel all open RFQs.
cancel_all_spread_orders Destructive

Cancel all spread trading orders.
cancel_new_crypto_loan_fixed_borrow Destructive

Cancel a fixed crypto loan borrow order.
cancel_new_crypto_loan_fixed_supply Destructive

Cancel a fixed crypto loan supply order.
cancel_order Destructive

Cancel a specific order.
cancel_rfq Destructive

Cancel an RFQ.
cancel_rfq_quote Destructive

Cancel a quote.
cancel_spread_order Destructive

Cancel a spread trading order.
cancel_withdrawal Destructive

Cancel a pending withdrawal.
delete_master_api_key Destructive

Delete the current master API key.
delete_sub_api_key Destructive

Delete a sub API key.
delete_sub_uid Destructive

Delete a sub UID.
accept_rfq_non_lp_quote Financial

Accept a non-LP quote for an RFQ.
amend_order Financial

amend_order
batch_place_order Financial

batch_place_order
confirm_convert_quote Financial

Confirm a crypto-to-crypto conversion quote.
confirm_fiat_quote Financial

Confirm a fiat conversion quote.
confirm_small_balance_quote Financial

Confirm a small balance conversion quote.
create_internal_transfer Financial

create_internal_transfer
create_rfq_quote Financial

Create a quote for an RFQ.
create_universal_transfer Financial

create_universal_transfer
crypto_loan_adjust_ltv Financial

Adjust collateral amount (LTV) for a crypto loan.
crypto_loan_borrow Financial

Borrow via crypto loan.
crypto_loan_repay Financial

Repay a crypto loan.
earn_place_order Financial

earn_place_order
execute_rfq_quote Financial

Execute (fill) a quote.
issue_broker_voucher Financial

Issue a broker voucher/award.
manual_borrow Financial

Manually borrow funds in unified margin account.
manual_repay Financial

Manual repay (with auto conversion if needed).
manual_repay_no_convert Financial

Manual repay without asset conversion.
new_crypto_loan_adjust_ltv Financial

Adjust collateral amount for new crypto loan.
new_crypto_loan_fixed_borrow Financial

Create a fixed-term crypto loan borrow order.
new_crypto_loan_fixed_renew Financial

Renew a fixed crypto loan borrow order.
new_crypto_loan_fixed_repay Financial

Fully repay a fixed crypto loan.
new_crypto_loan_fixed_repay_collateral Financial

Repay fixed crypto loan with collateral.
new_crypto_loan_fixed_supply Financial

Create a fixed crypto loan supply (lending) order.
new_crypto_loan_flexible_borrow Financial

Borrow via flexible crypto loan.
new_crypto_loan_flexible_repay Financial

Repay a flexible crypto loan.
new_crypto_loan_flexible_repay_collateral Financial

Repay flexible crypto loan with collateral.
otc_loan_repay Financial

Repay OTC loan.
place_market_order Financial

Place a market order to buy or sell.
purchase_leveraged_token Financial

Purchase a leveraged token.
redeem_leveraged_token Financial

Redeem a leveraged token.
repay_liability Financial

Quick repay liability.
request_convert_quote Financial

request_convert_quote
request_fiat_quote Financial

Request a fiat conversion quote.
request_small_balance_quote Financial

Request a quote for converting small balance coins.
set_trading_stop Financial

set_trading_stop
withdraw Financial

Withdraw funds to an external address.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Bybit

Tools at critical risk

Attacks that target this class

More on Bybit

Enforce policy on every Bybit tool call.