Skip to main content
Glama
bybit-exchange

Bybit MCP Server

Official

listSubAPIKeysV5

List sub-account API keys with pagination, retrieving permissions, IP whitelist, and expiration details. Allows master accounts to manage and audit sub-account API key configurations.

Instructions

Query all API keys of a sub-account with pagination support. Use master account's API key.

Important notes:

  • Only master account can call this endpoint

  • Returns API keys belonging to the specified sub-account

  • Secrets are NEVER returned for security

  • Returns comprehensive metadata including permissions, IPs, expiration time

  • Sub-account must belong to the requesting master account

  • Supports cursor-based pagination (Base64 encoded)

  • Automatically filters out system API keys (Copper, Fireblocks, Tax)

Required Permissions:

  • Master API key with appropriate permissions to query sub-account information

Pagination:

  • Default page size: 20

  • Use Base64-encoded cursor for fetching next page

  • Returns empty cursor when no more API keys

Response includes:

  • List of API keys for the sub-account

  • Each key's permissions breakdown

  • IP whitelist configuration

  • Read-only status

  • Creation and expiration timestamps

  • Expiration status (unlimited, unexpired, coming expired, expired)

  • Days until expiration

  • Key type (personal or third-party)

  • Note/description

Expiration Status:

  • Status 1: Unlimited (no expiration)

  • Status 2: Unexpired (more than 7 days remaining)

  • Status 3: Coming expired (within 7 days)

  • Status 4: Expired

Filtered API Keys:

  • Copper API keys (note contains "Copper")

  • Fireblocks API keys (note contains "Fireblocks")

  • Tax API keys (note contains "Tax")

Use Cases:

  • Master account managing sub-account API keys

  • Auditing sub-account API key configurations

  • Monitoring API key expiration times

  • Reviewing permission assignments

  • Paginate through large numbers of API keys

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
subuidYes
limitNo
cursorNo
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description fully discloses secrets are never returned, automatic filtering of system keys, pagination mechanism, expiration statuses, and required permissions. It covers all key behavioral aspects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with sections and bold headers, front-loading the main purpose. It is slightly lengthy due to detailed expiration tables and filtered keys, but every sentence adds value given no output schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers authentication, security, pagination, response contents, and use cases. It lacks explicit parameter descriptions but compensates with detailed behavioral notes. Overall, it provides sufficient context for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description explains pagination semantics (default limit=20, Base64 cursor) and implies subuid is the sub-account identifier. However, it does not provide explicit, separate descriptions for each parameter, leaving some inference to the user.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool queries all API keys of a sub-account with pagination, using the master account's API key. It provides specific verb and resource, distinguishing it from siblings like queryAPIKey.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly states only master accounts can call this endpoint and lists use cases (managing sub-account API keys, auditing, etc.). However, it does not explicitly mention when not to use it or compare to alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/bybit-exchange/trading-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server