Security

Bybit API Permissions

A safe API-permission draft page pending final Security review.

Review requiredLast verified: 2026-07-11Product version: v4.4Draft translation

English localization is preserved as a draft. It uses the same claim IDs and status model as the Russian source, but remains noindex until editorial review.

The current code validates an API key through Bybit `query-api` and stores a safe validation result: status, permission groups, `readOnly` and response code. The final public required permission list still needs Security review.

Until review is complete, the docs must not promise a technical withdrawal-permission prohibition or publish a complete permission contract.

What Code Confirms

  • Validation calls Bybit `query-api`.
  • Validation result is stored in sanitized form.
  • The code records permission groups and `readOnly`, but does not encode the final public permission list.

What Users Should Know Now

Use the minimum necessary rights and avoid extra permissions. The exact public instruction will be published after Security review.

Status

This page is not included in the sitemap and is not indexed until the permission contract is approved.

Related pages