Skip to main content
Glama
bybit-exchange

Bybit MCP Server

Official

listSubAPIKeysV5

Read-only

List all API keys for a sub-account with pagination using the master account's credentials. Get permissions, IP whitelist, and expiration status without exposing secrets.

Instructions

Query all API keys of a sub-account with pagination support. Use master account's API key.

Important notes:

  • Only master account can call this endpoint

  • Returns API keys belonging to the specified sub-account

  • Secrets are NEVER returned for security

  • Returns comprehensive metadata including permissions, IPs, expiration time

  • Sub-account must belong to the requesting master account

  • Supports cursor-based pagination (Base64 encoded)

  • Automatically filters out system API keys (Copper, Fireblocks, Tax)

Required Permissions:

  • Master API key with appropriate permissions to query sub-account information

Pagination:

  • Default page size: 20

  • Use Base64-encoded cursor for fetching next page

  • Returns empty cursor when no more API keys

Response includes:

  • List of API keys for the sub-account

  • Each key's permissions breakdown

  • IP whitelist configuration

  • Read-only status

  • Creation and expiration timestamps

  • Expiration status (unlimited, unexpired, coming expired, expired)

  • Days until expiration

  • Key type (personal or third-party)

  • Note/description

Expiration Status:

  • Status 1: Unlimited (no expiration)

  • Status 2: Unexpired (more than 7 days remaining)

  • Status 3: Coming expired (within 7 days)

  • Status 4: Expired

Filtered API Keys:

  • Copper API keys (note contains "Copper")

  • Fireblocks API keys (note contains "Fireblocks")

  • Tax API keys (note contains "Tax")

Use Cases:

  • Master account managing sub-account API keys

  • Auditing sub-account API key configurations

  • Monitoring API key expiration times

  • Reviewing permission assignments

  • Paginate through large numbers of API keys

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
limitNo
cursorNo
subuidYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.1.11

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only mark read-only and open-world; the description goes much further by disclosing that secrets are never returned, system API keys are auto-filtered, pagination is cursor-based with Base64, and expiration statuses are mapped to four numeric categories. This is exactly the behavioral context an agent needs beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Text is front-loaded and organized with clear headers and bullets, making key constraints easy to scan. There is some repetition ('Returns API keys...' restates the first sentence; filtered keys are mentioned twice), so it could be tightened without loss.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only paginated list tool with no output schema, the description covers auth, pagination mechanics, response fields, filtered keys, and expiration semantics. An agent has enough information to invoke it correctly and interpret the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema has zero descriptions, so the description must compensate. It explains cursor as Base64-encoded, states the default page size of 20, and implies subuid as the target sub-account. It never explicitly names all three parameters, so it is not a perfect substitution, but coverage is strong.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description opens with a specific verb-resource pair: 'Query all API keys of a sub-account with pagination support', which distinguishes it from the many sibling member/API-key tools. It also names the actor ('master account') and scope ('specified sub-account'), so an agent can select it without parsing schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use the endpoint: only a master account with appropriate permissions querying its own sub-account, and lists concrete use cases such as auditing and expiration monitoring. It does not explicitly name sibling alternatives, so it stops short of full 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools