# Bybit > Bybit is a centralised crypto exchange for spot, perpetual and futures contracts, options and earn products, reached through its V5 REST and WebSocket API, a FIX order-entry gateway and an official stdio MCP server published from its GitHub organisation. - Canonical: https://www.anchorterminal.com/tools/bybit - Pricing: https://www.anchorterminal.com/tools/bybit#pricing - Reviews: https://www.anchorterminal.com/tools/bybit#reviews - Markdown: https://www.anchorterminal.com/tools/bybit.md (~8,650 tokens) - Slim: https://www.anchorterminal.com/tools/bybit.min.md (~2,480 tokens, same facts, less prose, for token-sensitive contexts) - JSON: https://www.anchorterminal.com/tools/bybit.json (this page as data, same URL with Accept: application/json) - Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt) - API: https://www.anchorterminal.com/api/v1/index.json - MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key) - DNS: dig +short TXT bybit.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.. and .vs.. under the zone, and the same under grade.letme.dev) - Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data) - Updated: 2026-11-04 ## Overview **Grade C · 57.3/100 · rank #745 of 1349 · #11 in Crypto exchanges · not agent-ready · confidence medium** ## Assessment Bybit publishes per-endpoint rate limits, a demo environment, scoped keys with a read-only flag and IP binding, and an official stdio MCP server whose 398 tools carry read-only and destructive annotations. There is no status page, no OpenAPI file, no SLA, the MCP server has no toolsets, and the global terms and privacy pages are drawn by script. ## Facts | Field | Value | | --- | --- | | Vendor | Bybit (https://www.bybit.com) | | Kind | HTTP API | | Category | Crypto exchanges (https://www.anchorterminal.com/categories/crypto-exchanges) | | Transport | stdio | | Auth | API key · API key minted on the API management page after a browser sign-up and identity verification, signed per request with HMAC-SHA256 (system-generated secret) or RSA-SHA256 (self-generated key pair) in the X-BAPI-API-KEY, X-BAPI-TIMESTAMP, X-BAPI-SIGN and X-BAPI-RECV-WINDOW headers. Permissions are granted per group (ContractTrade, Spot, Wallet with a separate Withdraw value, Options, Derivatives, Exchange, Earn, Affiliate, BlockTrade) with a readOnly flag, and keys can be bound to IP addresses. A key with no IP binding expires 90 days after creation and can be extended on the management page with email and 2FA codes. Keys for testnet come from testnet.bybit.com and keys for demo trading from the production account in demo mode (https://bybit-exchange.github.io/docs/v5/user/apikey-info and https://bybit-exchange.github.io/docs/faq, checked 2026-11-03). | | Pricing | Pay per use (0.1% fee) · The API and the MCP server cost nothing; trades carry Bybit's fees. At VIP 0 the spot fee is 0.1 per cent maker and taker, perpetual and futures contracts 0.02 per cent maker and 0.055 per cent taker, options 0.02 per cent maker and 0.03 per cent taker, with lower tiers by 30-day volume or asset balance and a note that rates vary by region. Fiat pairs, the Adventure Zone, xStocks and pre-market perpetuals have their own tables (https://www.bybit.com/en/help-center/article/Trading-Fee-Structure, last updated 2 September 2026, read 2026-11-03). | | x402 | No · No x402, MPP or L402 in the V5 docs, the MCP server's README or source, or the fee schedule (checked 2026-11-03). Trading fees are taken from the account balance. | | Licence | unknown | | Tools exposed | 398 | | Packages | npm: `bybit-official-trading-server`; pypi: `pybit` | | Source | https://github.com/bybit-exchange/trading-mcp | | Docs | https://bybit-exchange.github.io/docs/v5/intro | | llms.txt | not found | | Last release | 2026-10-30 | | GitHub stars | 43 (as of 2026-11-03) | | Surface listed | The V5 REST and WebSocket API at api.bybit.com, read from bybit-exchange.github.io/docs, the bybit-exchange GitHub organisation, npm, the MCP registry and the pages on bybit.com that render without script, on 3 November 2026. No account was made, no key minted and no MCP session opened | | MCP server | An official server. github.com/bybit-exchange/trading-mcp, npm `bybit-official-trading-server` 2.1.26 (30 October 2026), stdio only, no hosted URL. 398 tools generated from the V5 API in 43 categories (market 23 with no key, account 25, trade 12, position 12, asset 35, websocket 27 and others), each with readOnlyHint, destructiveHint and openWorldHint. Authenticates with BYBIT_API_KEY plus BYBIT_API_SECRET (HMAC) or BYBIT_API_PRIVATE_KEY_PATH (RSA); BYBIT_TESTNET switches hosts. Not in the official MCP registry; the registry's only `bybit` entry is the third-party io.github.mcp-dir/bybit-mcp | | Key permissions | Groups ContractTrade (Order, Position), Spot (SpotTrade), Wallet (AccountTransfer, SubMemberTransfer, SubMemberTransferList, Withdraw), Options, Derivatives, Exchange (convert history), Earn, Affiliate and BlockTrade, a readOnly flag, an IP list, and expiredAt for keys with no IP bound (90 days per the FAQ). Keys are HMAC (system secret) or RSA (self-generated, needed for FIX) | | Rate limits | Per UID per second by endpoint (create and cancel order 10 to 20, order and execution reads 50, wallet balance 50, withdraw create 5, sub-API creation 1), batch endpoints counted per order with partial acceptance, headers X-Bapi-Limit, X-Bapi-Limit-Status and X-Bapi-Limit-Reset-Timestamp, retCode 10006 on breach. IP limit 600 requests per 5 seconds, breach answers HTTP 403 and the docs ask for all sessions to stop for 10 minutes. WebSocket 500 connections per 5 minutes per IP | | Testnet and demo | Testnet api-testnet.bybit.com with keys from testnet.bybit.com and funds from the asset page. Demo trading api-demo.bybit.com and wss://stream-demo.bybit.com (private streams only) with keys from the production account in demo mode, demo funds by POST /v5/account/demo-apply-money up to 100,000 USDT per request, orders kept 7 days, default rate limits | | Fees | VIP 0 spot 0.1 per cent maker and taker; perpetual and futures 0.02 per cent maker, 0.055 per cent taker; options 0.02 and 0.03 per cent. Fiat pairs 0.15 maker and 0.2 taker, Adventure Zone and xStocks 0.2 per cent. Fee schedule last updated 2 September 2026, with a note that rates vary by region | | FIX and WebSocket | FIX 4.4 spot order entry at fix-oe.bybit.com:9000 (testnet fix-oe-testnet.bybit.com), TLS, RSA keys with the FIX API option, whitelisted UIDs only, 20 connections per UID per machine, no gap fill or session resume, shares the REST rate-limit pool. WebSocket public streams at stream.bybit.com with 1,000 market-data connections per IP per product, private streams and WebSocket trade | | Countries | The terms PDF served from bybit.com excludes the United States, the Chinese Mainland, Hong Kong, Singapore, Canada, France, the United Kingdom, Dubai, North Korea, Cuba, Iran, Uzbekistan, Russian-controlled regions of Ukraine, Sevastopol, Sudan and Syria. Regional hosts exist for Kazakhstan (api.bybit.kz), Brazil, Argentina, Hong Kong, Turkey and the EU per the changelog; the global terms page itself renders by script and was not read | | Terms on automated trading | Clause 15.1 lets a user place orders through the site, the API or any interface Bybit supports; clause 4.1 gives no guarantee that the API is available; clause 6.3(k) bans robots and scrapers that reproduce the platform's content; clause 17.8 says orders may pass automated compliance checks and manual review. No clause names trading bots | | Other agent surfaces | github.com/bybit-exchange/skills (natural-language trading skills, MIT, pushed 30 October 2026), trading-cli, and official SDKs pybit (Python), bybit.go.api, bybit-java-api, bybit.net.api, with new JS, PHP and Ruby repositories created July 2026 | | Legal entity | The terms PDF served from bybit.com names Bybit Virtual Asset Platform Operator L.L.C. S.P.C, incorporated in Abu Dhabi and licensed by the CMA, under the laws of England and Wales with SIAC arbitration. Other Bybit documents name Bybit Technology Limited (the P2P terms) and press releases are datelined Dubai; the global entity could not be confirmed | | Capabilities | exchange.market-data, exchange.spot-trading, exchange.derivatives, exchange.balances, exchange.transfers, exchange.staking, market.crypto | | Tags | hosted, closed-source, api-key, usage-priced, sandbox, no-status-page, mcp, official, python, typescript, go, java, dotnet | | JSON | https://www.anchorterminal.com/api/v1/tools/bybit.json | ## Score breakdown (methodology v0.7, October 2026 research run) Assessed 2026-11-03 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. "This run" is each category's share of the 100 points. | Category | Weight | This run | Score (0–100) | Points | | --- | --- | --- | --- | --- | | Reliability | 16% | 20 | 45 | 9.0 | | Performance | 10% | pending | pending | n/a | | Schema & documentation | 13% | 16.2 | 73 | 11.9 | | Agent ergonomics | 13% | 16.2 | 66 | 10.7 | | Security & auth | 14% | 17.5 | 60 | 10.5 | | Payments & pricing | 10% | 12.5 | 40 | 5.0 | | Task success | 10% | pending | pending | n/a | | Maintenance & community | 7% | 8.8 | 66 | 5.8 | | Transparency & trust (editorial 27, provenance 75) | 7% | 8.8 | 51 | 4.5 | | Negative events | up to −15 | up to −15 | none recorded | 0 | | **Total** | | | | **57.3 → C** | ### Why each score - Reliability 45 (checked 2026-11-03): Graded with the hosted lines on the V5 API at api.bybit.com. No status page found (status.bybit.com does not resolve, the docs link none), so 0 for the page and 5 for no readable history. Rate limits are published per endpoint and per UID with numbers, plus a 600 per 5 second IP limit (15). Every response carries X-Bapi-Limit, X-Bapi-Limit-Status and X-Bapi-Limit-Reset-Timestamp, retCode 10006 and HTTP 403 are documented with a wait rule, and orders take a unique orderLinkId that amend and cancel accept (15). No SLA (0). V5 is the current production API, not a beta (10). 45. - Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes. - Schema & documentation 73 (checked 2026-11-03): No OpenAPI or other machine-readable contract for the REST API; the MCP server's 398 tools have zod schemas turned into JSON Schema, so the contract exists for the MCP surface only (12 of 25). No llms.txt; the docs are a public Docusaurus repository (bybit-exchange/docs) whose MDX source an agent can read (5 of 10). The MCP tool descriptions state purpose, rules and an agent hint per tool, and the API reference gives one page per endpoint (15 of 20). Parameters are typed with enums such as category and orderType and required flags (12 of 15). Request and response examples on each endpoint page and an error code page of about 750 codes with text (14 of 15). A dated changelog with 24 entries in the last 90 days, versioned V3 to V5 (15). 73. - Agent ergonomics 66 (checked 2026-11-03): Read for the API with the MCP server beside it. The MCP server has 398 tools in one list with no toolset, module or read-only switch (5 of 25, nothing added back). V5 reads take limit and cursor and category filters (15 of 20). retCode and retMsg on every response with a code list an agent can branch on, though create-order answers before the order is final and the docs say to confirm over WebSocket (14 of 20). orderLinkId makes order retries safe and every MCP tool carries readOnlyHint and destructiveHint (17 of 20). Five required fields on an order, official SDKs in Python, Go, Java and .NET (15). 66. - Security & auth 60 (checked 2026-11-03): API keys scoped by product group with a readOnly flag, a separate Withdraw value, IP binding, a 90-day expiry for unbound keys, HMAC or RSA signing, and revocation on the management page; no OAuth (24 of 30). A read-only key and a withdrawal-free key are first-class, but the MCP server has no read-only mode and relies on the client's approval prompt for writes (14 of 20). Tools return the exchange's own data, not third-party text (10). The API key info endpoint shows permissions, IPs and expiry, and an IP change log exists for institutional accounts, but no per-call audit log was found (7 of 15). No security.txt on bybit.com or the docs host, no disclosure policy or bug bounty found on a page we could read, proof-of-reserves articles in the help centre (5 of 20). 60. - Payments & pricing 40 (checked 2026-11-03): No machine payment protocol (0). The fee schedule is public without login, with VIP 0 maker and taker rates per product and the tier criteria (20). Reading market data needs no key and the demo environment costs nothing, no card is asked for at sign-up (20). A person must register, pass identity verification and mint the key in a browser (0). 40. - Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored. - Maintenance & community 66 (checked 2026-11-03): Read as a hosted service with an open-source MCP server. The MCP package shipped 2.1.26 on 30 October 2026 and the V5 changelog's latest entry is 29 October (30). 31 npm versions since 16 April 2026, 11 of them in the last 90 days, and 24 changelog entries in the same window (20). The trading-mcp repository has 4 open issues and 18 forks; whether issues get answers was not checked, and the API has no public forum we could read (10 of 25). Not in the official MCP registry (0). The package has four dependencies, no install scripts, a publish workflow and no test workflow (6 of 10). 66. - Transparency & trust 51 (checked 2026-11-03): The editorial half. A closed hosted service. The terms read are the UAE entity's PDF served from bybit.com, clear on API use and availability, but the global terms page renders by script and was not read; the MCP server is MIT (12 of 30). The privacy policy was not read, so data handling is unscored (5 of 30). The changelog dates removals and response changes but gives no notice period or deprecation policy (10 of 20). No subprocessor list or data location statement was read (0 of 20). 27. Fix list, everything this grade says the listing lacks, the biggest gain first (18 items). What it covers is at https://www.anchorterminal.com/fixes/bybit.md (JSON https://www.anchorterminal.com/fixes/bybit.json). The whole list for a coding agent comes from `POST https://www.anchorterminal.com/api/v1/fix-list` with `{"listing": "bybit", "plan": "read"}`, free while the beta runs ### What we couldn't check - unchecked: the global terms of service, privacy policy and about pages on bybit.com, which render by script; the entity, data handling and subprocessors are unscored for that reason. The terms read are the UAE-regulated entity's PDF. - unchecked: whether Bybit runs a status page anywhere other than status.bybit.com, and whether a bug bounty or disclosure policy exists; both scored absent. - unchecked: responsiveness on the trading-mcp repository's issues and the Telegram API group. The README's tool count (398) matches the source; the GitHub description says 382 and was not updated. - firstReleased is 2019-10-09, the creation date of the oldest repository in the bybit-exchange organisation (api-connectors). Bybit's press boilerplate says it was founded in 2018 without a day, and the V5 API has no first-hand launch date on its pages. - Kind http-api, because the docs lead with the V5 REST and WebSocket API and the MCP server is one package among the SDKs, stdio only, so it sits in packages rather than making the listing mcp. - Our own products. It doesn't do LocalGhost's or letme's job; it is one exchange's trading API. Graded the normal way. ### Sources - robots.txt (www.bybit.com, read with curl after WebFetch timed out three times; bybit-exchange.github.io has none): (seen 2026-11-03) - V5 API introduction, products, hosts and SDK list: (seen 2026-11-03) - V5 rate limits: (seen 2026-11-03) - API key info endpoint (permission groups, readOnly, ips, expiredAt): (seen 2026-11-03) - Demo trading: (seen 2026-11-03) - FAQ (90-day expiry of unbound keys, testnet keys, domains): (seen 2026-11-03) - FIX API guide: (seen 2026-11-03) - Create order (orderLinkId, asynchronous confirmation): (seen 2026-11-03) - Error codes: (seen 2026-11-03) - V5 changelog: (seen 2026-11-03) - Trading fee structure (help centre, read with curl): (seen 2026-11-03) - General terms and conditions PDF served from bybit.com (UAE entity, 23 January 2026): (seen 2026-11-03) - trading-mcp README, source (tool files, annotations, stdio transport) and git history, shallow clone: (seen 2026-11-03) - npm registry, bybit-official-trading-server (versions, maintainers, dependencies, scripts): (seen 2026-11-03) - bybit-exchange GitHub organisation repositories: (seen 2026-11-03) - official MCP registry search: (seen 2026-11-03) - RDAP for bybit.com: (seen 2026-11-03) - security.txt (404): (seen 2026-11-03) ## Score history Every move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/bybit/history.json - 2026-11-03: graded 57.3 C (methodology 0.7) ## Who's behind it (provenance 75/100, checked 2026-11-03) | Check | Finding | Points | | --- | --- | --- | | Legal entity named | Bybit Virtual Asset Platform Operator L.L.C. S.P.C | 20/20 | | Domain age | bybit.com, registered 1999-08-05 (27 years) | 15/15 | | Endpoint on the vendor's domain | bybit.com | 15/15 | | Terms of service | published, but our reader couldn't read it | 7/10 | | Privacy policy | published, but our reader couldn't read it | 7/10 | | Status page | not found | 0/10 | | Changelog | published | 10/10 | | security.txt | not found | 0/10 | | People named | 1 named with their role, none with a public profile | 7/10 | | Support route | help pages, a community | 5/5 | www.bybit.com answers WebFetch with a timeout; its robots.txt (read with curl) allows the help centre, legal and static paths and disallows query-string URLs and x-api endpoints. The terms and privacy pages render by script, so the terms read are the PDF at /common-static/compliance/legal/BYBIT/b2e1c94c53ee5e12e165919de919337e.pdf (Bybit Virtual Asset Platform Operator L.L.C. S.P.C, last updated 23 January 2026, English and Welsh law, SIAC arbitration). The privacy policy was not read. RDAP gives bybit.com a registration date of 5 August 1999 (CSC Corporate Domains), earlier than the company, so the domain was bought. https://www.bybit.com/.well-known/security.txt answers 404. bybit-exchange.github.io has no robots.txt and no security.txt. No status page found; status.bybit.com does not resolve, the docs link none, and a search found only third-party monitors. The V5 changelog is dated by day; the MCP server's versions are on npm. The P2P service terms on bybit.com name Bybit Technology Limited as the company. ### Terms and privacy, as read A reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice. **Terms of service** (https://www.bybit.com/en/terms-service), read 2026-11-03. Our reader couldn't read it (no answer (stream error: stream ID 3; INTERNAL_ERROR; received from peer)). **Privacy policy** (https://www.bybit.com/en/privacy-policy), read 2026-11-03. Our reader couldn't read it (no answer (stream error: stream ID 5; INTERNAL_ERROR; received from peer)). ## Humans behind the project (researched 2026-11-03 from public pages, not part of the grade) ### Key people - Ben Zhou, Co-founder and CEO, Bybit - Note: Bybit's about, press and legal pages on bybit.com render by script and could not be read, so the role comes from Bybit's own press release of 16 January 2026 distributed through PR Newswire, which names Ben Zhou as co-founder and CEO and says the company was founded in 2018. Other co-founders are not named on any page we read, so the roster may be incomplete; a March 2026 release names a departing co-CEO, Helen Liu, which was not read first-hand. The terms PDF served from bybit.com names Bybit Virtual Asset Platform Operator L.L.C. S.P.C (Abu Dhabi) and the P2P terms name Bybit Technology Limited; no page read states who owns the group. Investors were looked for in one web search and in the terms and press release; the results describe Bybit as an investor through Bybit Ventures and name no round raised by Bybit from a source we may cite, so none are recorded. - Bybit: LinkedIn https://www.linkedin.com/company/bybitexchange/ X https://x.com/Bybit_Official GitHub https://github.com/bybit-exchange ### Getting support - Discord: https://discord.gg/bybit - Help: https://www.bybit.com/en/help-center/ - Help: https://bybit-exchange.github.io/docs/faq - Community (Bybit announcements on Telegram): https://t.me/s/Bybit_Announcements - Community (r/Bybit): https://www.reddit.com/r/Bybit/ - Community (trading-mcp issues): https://github.com/bybit-exchange/trading-mcp/issues - General contact: media@bybit.com - Sources: https://tools.prnewswire.com/en-us/live/20813/release/20260116EN64300, https://www.bybit.com/common-static/compliance/legal/BYBIT/b2e1c94c53ee5e12e165919de919337e.pdf, https://bybit-exchange.github.io/docs/v5/intro, https://github.com/bybit-exchange/trading-mcp, https://api.github.com/orgs/bybit-exchange/repos?per_page=100&sort=updated ## Live (updated 2026-11-04 15:54 UTC) - security.txt: none - Always current: https://www.anchorterminal.com/api/v1/live/bybit.json ## Probe metrics Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score. ## Prices | Item | Price | Unit | Note | | --- | --- | --- | --- | | Spot trade, VIP 0 maker or taker | 0.1% | percentage fee | crypto-crypto pairs | | Perpetual or futures trade, VIP 0 taker | 0.06% | percentage fee | maker 0.02 per cent | | Options trade, VIP 0 taker | 0.03% | percentage fee | maker 0.02 per cent | Across all listings: https://www.anchorterminal.com/prices/index.md ## Strengths - Official MCP server from Bybit's GitHub organisation with 398 generated tools, each annotated readOnlyHint, destructiveHint and openWorldHint, and market data tools that need no key - Rate limits published per endpoint and per UID with limit, remaining and reset headers on every response, and a documented 403 ban rule for the IP limit - API keys scoped by product group with a read-only flag, a separate Withdraw permission, IP binding and a 90-day expiry for unbound keys - Demo trading at api-demo.bybit.com with self-served demo funds, plus a testnet with its own keys - VIP 0 fees published without login, 0.1 per cent spot and 0.02 per cent maker and 0.055 per cent taker on contracts ## Weaknesses - No status page, incident history or SLA was found; the terms say the API is not guaranteed to be available - No OpenAPI or llms.txt for the V5 API, and the MCP server exposes all 398 tools with no toolset, module or read-only switch - Not in the official MCP registry; the hosted `bybit` entry there is a third party's server, not Bybit's - The global terms, privacy policy and about pages on bybit.com render by script and were not read; the terms read are the UAE-regulated entity's PDF - Changelog entries change response shapes and remove fields without a notice period, such as the Asset Overview restructure of 18 August 2026 ## Before you call it (notes for agents) 1. Create a key with only the permission groups the task needs, set readOnly for research keys, leave Withdraw off and bind an IP, or the key expires after 90 days 2. Send a unique orderLinkId on every order and reuse it when amending or cancelling, since create-order is asynchronous and confirmed over WebSocket 3. Read X-Bapi-Limit-Status before bursts and wait until X-Bapi-Limit-Reset-Timestamp on retCode 10006; on HTTP 403 stop all sessions for at least 10 minutes 4. Test on api-demo.bybit.com with a demo key from the production account, not on testnet demo mode, which the docs call meaningless 5. Run the MCP server with BYBIT_TESTNET=true first, and only in a client that shows a per-call approval, because the server has no read-only mode of its own ## Connect Install: ```bash npm install -g bybit-official-trading-server ``` First request: ```bash curl https://api.bybit.com/v5/market/tickers?category=spot&symbol=BTCUSDT ``` Claude Code: ```bash claude mcp add bybit -- npx -y bybit-official-trading-server@latest ``` MCP client configuration: ```json { "mcpServers": { "bybit": { "args": [ "-y", "bybit-official-trading-server@latest" ], "command": "npx", "env": { "BYBIT_API_KEY": "YOUR_API_KEY", "BYBIT_API_SECRET": "YOUR_API_SECRET", "BYBIT_TESTNET": "true" } } } } ``` Through letme: https://letme.dev/bybit. letme answers with the pick and how to call it direct. How it works: https://www.anchorterminal.com/letme/index.md ## Similar tools Ranked by shared capabilities, then score. Same-category tools with no shared capability key are listed last. | Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown | | --- | --- | --- | --- | --- | --- | --- | | Gemini Exchange API | BB | 74.6 | 70 | exchange.market-data, exchange.spot-trading, exchange.derivatives, exchange.balances, exchange.transfers, exchange.staking, market.crypto | no | https://www.anchorterminal.com/tools/gemini-exchange.md | | Kraken API | BB | 71 | 159 | exchange.spot-trading, exchange.market-data, exchange.derivatives, exchange.balances, exchange.transfers, exchange.staking, market.crypto | no | https://www.anchorterminal.com/tools/kraken.md | | OKX API | B | 64.3 | 413 | exchange.spot-trading, exchange.market-data, exchange.derivatives, exchange.balances, exchange.transfers, exchange.staking, market.crypto | no | https://www.anchorterminal.com/tools/okx.md | | Binance API | B | 63.2 | 448 | exchange.spot-trading, exchange.market-data, exchange.derivatives, exchange.balances, exchange.transfers, exchange.staking, market.crypto | no | https://www.anchorterminal.com/tools/binance.md | | Bitfinex API | C | 58.4 | 687 | exchange.market-data, exchange.spot-trading, exchange.derivatives, exchange.balances, exchange.transfers, exchange.staking, market.crypto | no | https://www.anchorterminal.com/tools/bitfinex.md | | Gate | C | 56.4 | 786 | exchange.market-data, exchange.spot-trading, exchange.derivatives, exchange.balances, exchange.transfers, exchange.staking, market.crypto | no | https://www.anchorterminal.com/tools/gate-io.md | ## Panel reviews (0) Reviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): . Desk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md ## Notable - Official MCP server `bybit-official-trading-server` (npm, MIT, stdio only) from github.com/bybit-exchange/trading-mcp, 398 generated tools in 43 categories with readOnlyHint, destructiveHint and openWorldHint on every tool, 2.1.26 published 30 October 2026, maintainers bybit_api_official_account and paul.yang.by (source: ) - Not in the official MCP registry under a Bybit namespace; the only `bybit` entry on 3 November 2026 is the third-party io.github.mcp-dir/bybit-mcp hosted at api.mcp.ai (source: ) - V5 rate limits are published per endpoint per UID (for example 10 to 20 orders a second on create and cancel, 50 a second on order and position reads) with X-Bapi-Limit, X-Bapi-Limit-Status and X-Bapi-Limit-Reset-Timestamp headers, retCode 10006 on breach, and an IP limit of 600 requests per 5 seconds that answers 403 and asks for a 10 minute pause (source: ) - Testnet at api-testnet.bybit.com with keys from testnet.bybit.com, and a separate demo trading environment at api-demo.bybit.com with demo funds applied through POST /v5/account/demo-apply-money (source: ) - FIX 4.4 order entry for spot at fix-oe.bybit.com and fix-oe-testnet.bybit.com, port 9000, TLS only, RSA keys only, whitelisted UIDs or institutional IDs arranged through a relationship manager (source: ) - The terms served from bybit.com (Bybit Virtual Asset Platform Operator L.L.C. S.P.C, last updated 23 January 2026) exclude the United States, the Chinese Mainland, Hong Kong, Singapore, Canada, France, the United Kingdom, Dubai, North Korea, Cuba, Iran, Uzbekistan, Russian-controlled regions of Ukraine, Sevastopol, Sudan and Syria, let users place orders through the API and give no guarantee the API is available (source: ) - V5 changelog has 24 dated entries between 6 August and 29 October 2026, including response-shape changes shipped without a notice period (source: ) - #11 of 21 in Best crypto exchange APIs and MCP servers for AI agents: https://www.anchorterminal.com/best/crypto-exchanges/index.md - All 210 exchanges comparisons: https://www.anchorterminal.com/compare/crypto-exchanges/index.md ## Compare - [Bitfinex API vs Bybit](https://www.anchorterminal.com/compare/bitfinex-vs-bybit.md): C 58.4 vs C 57.3 - [Bitget vs Bybit](https://www.anchorterminal.com/compare/bitget-vs-bybit.md): D 53.9 vs C 57.3 - [Bithumb Open API vs Bybit](https://www.anchorterminal.com/compare/bithumb-vs-bybit.md): D 50.6 vs C 57.3 - [Bitstamp API vs Bybit](https://www.anchorterminal.com/compare/bitstamp-vs-bybit.md): D 50.4 vs C 57.3 - [Bybit vs Coinbase Advanced Trade API](https://www.anchorterminal.com/compare/bybit-vs-coinbase-advanced-trade.md): C 57.3 vs C 61.7 - [Bybit vs Coinbase MCP server (Coinbase for Agents)](https://www.anchorterminal.com/compare/bybit-vs-coinbase-mcp.md): C 57.3 vs C 60 - [Bybit vs Crypto.com Exchange API](https://www.anchorterminal.com/compare/bybit-vs-crypto-com-exchange.md): C 57.3 vs D 46.8 - [Bybit vs Deribit](https://www.anchorterminal.com/compare/bybit-vs-deribit.md): C 57.3 vs C 59 - [Bybit vs dYdX](https://www.anchorterminal.com/compare/bybit-vs-dydx.md): C 57.3 vs B 69.5 - [Bybit vs Gate](https://www.anchorterminal.com/compare/bybit-vs-gate-io.md): C 57.3 vs C 56.4 - [Bybit vs Gemini Exchange API](https://www.anchorterminal.com/compare/bybit-vs-gemini-exchange.md): C 57.3 vs BB 74.6 - [Bybit vs HTX trading API](https://www.anchorterminal.com/compare/bybit-vs-htx.md): C 57.3 vs E 43.3 - [Bybit vs Hyperliquid](https://www.anchorterminal.com/compare/bybit-vs-hyperliquid.md): C 57.3 vs D 50 - [Bybit vs Kraken API](https://www.anchorterminal.com/compare/bybit-vs-kraken.md): C 57.3 vs BB 71 - [Bybit vs KuCoin](https://www.anchorterminal.com/compare/bybit-vs-kucoin.md): C 57.3 vs D 53.9 - [Bybit vs MEXC API](https://www.anchorterminal.com/compare/bybit-vs-mexc.md): C 57.3 vs C 56.3 - [Bybit vs OKX API](https://www.anchorterminal.com/compare/bybit-vs-okx.md): C 57.3 vs B 64.3 - [Bybit vs Uniswap Trading API](https://www.anchorterminal.com/compare/bybit-vs-uniswap.md): C 57.3 vs B 63.3 - [Bybit vs Upbit Open API](https://www.anchorterminal.com/compare/bybit-vs-upbit.md): C 57.3 vs C 54.7 - [Binance API vs Bybit](https://www.anchorterminal.com/compare/binance-vs-bybit.md): B 63.2 vs C 57.3 ## Verify this listing For the vendor. The badge or a plain link to this page verifies the listing, from a page on bybit.com or one of its subdomains, or the README at the root of github.com/bybit-exchange/trading-mcp. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{"slug": "bybit", "url": "…"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify HTML badge: ```html Bybit on Anchor Terminal ``` Markdown badge, for a README: ```markdown [![Bybit on Anchor Terminal](https://www.anchorterminal.com/badges/bybit.svg)](https://www.anchorterminal.com/tools/bybit) ``` Plain link: ```html Bybit on Anchor Terminal ``` ## Share this listing For the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Bybit is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score. - Dark: https://www.anchorterminal.com/assets/share/bybit-dark.png - Light: https://www.anchorterminal.com/assets/share/bybit-light.png --- Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp