get_affiliate_user_info

What get_affiliate_user_info does on Bybit

AI agents call get_affiliate_user_info to retrieve information from Bybit without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_affiliate_user_info is rated Low

This tool retrieves affiliate user information without side effects. It performs a read-only query operation on account/affiliate data. Even in the context of a trading exchange, querying user information poses minimal risk—there is no data modification, financial transaction, or code execution involved. Severity is low because misuse would only expose or retrieve existing affiliate account metadata.

From the tool's definition Tool name is 'get_affiliate_user_info' with description 'Get affiliate user info.' The verb 'get' and the passive description indicate retrieval of existing data with no modification, deletion, or execution.

The rule that runs get_affiliate_user_info safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Bybit, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_affiliate_user_info, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_affiliate_user_info": {}
  }
}

Questions about get_affiliate_user_info