create_sub_uid

What create_sub_uid does on Bybit

AI agents use create_sub_uid to create or update resources in Bybit, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Bybit environment.

Why create_sub_uid is rated Medium

This tool creates a new sub-user ID, which is a reversible write operation that modifies account structure. It does not delete data (so not Destructive), does not move money directly (so not Financial), and does not execute arbitrary code (so not Execute). However, the ability to create sub-accounts could enable privilege escalation or unauthorized account sprawl if misused by an AI agent, warranting medium severity.

From the tool's definition Tool name 'create_sub_uid' indicates creation of a subordinate user identifier. Description states 'Create a sub UID,' confirming a write operation that creates new account-level resources.

The rule that runs create_sub_uid safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Bybit, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For create_sub_uid, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_sub_uid": {
      "limits": [
        {
          "counter": "create_sub_uid_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about create_sub_uid