// SCAN REPORT

Payware MCP Server

57 tools. 25 can modify or destroy data without limits.

9 destructive tools with no built-in limits. Policy required.

Last updated: 4 Jul 2026

25 can modify or destroy data

32 read-only

57 tools total

Community server · catalogue entry verified 04/07/2026

How to control Payware MCP Server ↓

TOOL MAP

What Payware MCP Server exposes to your agents

Read (32) Write / Execute (16) Destructive / Financial (9)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Payware MCP Server tools

Financial · Critical payware_operations_create_transaction This tool directly initiates financial transactions on behalf of merchants, committing real monetary obligations. Financial · Critical payware_operations_process_transaction This tool directly finalizes financial transactions on behalf of merchants, committing or declining payment obligations. Destructive · High payware_deep_links_delete_product_link This tool performs an irreversible deletion of a merchant's active deep link configuration. Destructive · High payware_deep_links_delete_transaction_link This tool destroys active transaction deep links without reversibility.

25 of Payware MCP Server's 57 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Payware MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Payware MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "payware_operations_create_transaction": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "payware_deep_links_delete_product_link": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "payware_authentication_generate_rsa_keys": {
    "limits": [
      {
        "counter": "payware_authentication_generate_rsa_keys_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "payware_authentication_validate_jwt": {
    "limits": [
      {
        "counter": "payware_authentication_validate_jwt_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Payware MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON PAYWARE →

Instant setup, no code required.

FULL CATALOGUE

All 57 Payware MCP Server tools

FINANCIAL 2 tools

Financial payware_operations_create_transaction Create a new transaction through payware as an ISV on behalf of a merchant. ISV partners can create transac Financial payware_operations_process_transaction Process (finalize) a transaction as an ISV on behalf of a merchant. Allows confirming or declining a transact

DESTRUCTIVE 7 tools

Destructive payware_deep_links_delete_product_link Delete an active deep link for a product on behalf of a merchant. Once deleted, the deep link URL will no long Destructive payware_deep_links_delete_transaction_link Delete an active deep link for a transaction on behalf of a merchant. Once deleted, the deep link URL will no Destructive payware_operations_cancel_transaction Cancel an active transaction as an ISV on behalf of a merchant. Requires ISV authentication with merchant par Destructive payware_poi_cancel_price Cancel a pending price on a POI, resetting it to IDLE state. ISV Authentication: Uses ISV JWT with merchant Destructive payware_products_delete_audio Delete an audio file from a merchant Destructive payware_products_delete_product Delete a product from a merchant account (ISV operation). This action cannot be undone. Destructive payware_products_delete_schedule Delete a price schedule (ISV operation). This action cannot be undone.

EXECUTE 5 tools

Execute payware_authentication_create_jwt_token Create JWT token for payware API authentication according to official documentation Execute payware_authentication_test_jwt Test JWT token creation process with detailed step-by-step breakdown, showing deterministic JSON serialization Execute payware_authorization_oauth2_obtain_token Obtain an OAuth2 access token for a merchant. ISVs must be authorized by payware registered merchants to ma Execute payware_data_generate_report Generate an asynchronous data report for ISV data analysis and reporting on behalf of merchants. Production on Execute payware_operations_simulate_callback Simulate a transaction callback as an ISV on behalf of a merchant. Triggers a callback to test webhook integr

WRITE 11 tools

Write payware_authentication_generate_rsa_keys Generate RSA key pair for payware API authentication Write payware_authentication_setup_sandbox_auth Setup sandbox authentication configuration for payware API Write payware_authorization_oauth2_token_helper OAuth2 Token Helper - Create or manage tokens with clear output. This tool helps you: 1. Create new OAuth2 Write payware_generate_code_example Generate production-ready payware API integration code examples with authentication, error handling, and envir Write payware_poi_set_price Set a pending price on a POI for customer payment. ISV Authentication: Uses ISV JWT with merchant partner I Write payware_products_create_product Create a new product for inventory management and payment processing on behalf of a merchant (ISV operation). Write payware_products_create_schedule Create a price schedule for a merchant Write payware_products_register_audio Register an audio file (soundbite) for a merchant Write payware_products_update_audio Update audio information (title) or reassign audio to another product (ISV operation) Write payware_products_update_product Update an existing product on behalf of a merchant (ISV operation). Only provide the fields you want to change Write payware_products_update_schedule Update an existing price schedule (ISV operation)

READ 32 tools

Read payware_authentication_validate_jwt Validate and debug JWT token structure, decode payload/headers, verify content hash (SHA-256/MD5) calculation, Read payware_authorization_oauth2_get_token_info Get information about an OAuth2 access token. This endpoint exposes information about access tokens, includ Read payware_data_cancel_export Cancel a running export process. Only exports in QUEUED status can be cancelled. Read payware_data_cancel_report Cancel a running report generation. Only reports in QUEUED status can be cancelled. Read payware_data_download_export Download a READY export file. The export must be in READY status. Returns binary data for the file. Read payware_data_export_report Export a READY report in a specific format (PDF, CSV, Excel, JSON). The report must be in READY status first. Read payware_data_get_export_list Get all export attempts for a specific report request. Returns list of exports in various formats with their s Read payware_data_get_export_status Get the status of a report export request. Use this to monitor export progress. Read payware_data_get_report_requests Get all execution requests for a specific report type. Returns historical execution records with status and pa Read payware_data_get_report_status Get the status of an asynchronous report generation request. Use this to monitor report progress. Read payware_data_list_reports List all available report types with their configurations, descriptions, and visibility settings. Production o Read payware_deep_links_get_product_link Get an active deep link for a product. Returns a clickable URL that redirects to the payware mobile app. De Read payware_deep_links_get_transaction_link Get an active deep link for a transaction. Returns a clickable URL that redirects to the payware mobile app. Read payware_generate_documentation Generate comprehensive documentation for payware API integration with quick start instructions, authentication Read payware_operations_get_transaction_history Get transaction history as an ISV on behalf of a merchant. Retrieves both active and completed transactions w Read payware_operations_get_transaction_status Get status of an ACTIVE transaction by ID (for completed/expired transactions use transaction history tool). Read payware_operations_soundbite_transaction Get transaction information using a Soundbite SDK output file. This allows payment institutions to process tra Read payware_poi_get Get details of a specific POI (Point of Interaction). ISV Authentication: Uses ISV JWT with merchant partne Read payware_poi_get_qrcode Generate a QR code image for a POI that customers can scan. Endpoint: GET /poi/{poiId}/image Authenticatio Read payware_poi_get_status Get current status of a POI including any pending payment. ISV Authentication: Uses ISV JWT with merchant p Read payware_poi_list List all POIs (Points of Interaction) for a merchant. ISV Authentication: Uses ISV JWT with merchant partne Read payware_products_get_audio Get detailed information about a specific audio file (ISV operation) Read payware_products_get_audios Get all registered audio files for a merchant Read payware_products_get_product Get detailed information about a specific product by ID (ISV operation) Read payware_products_get_product_image Generate a QR code or barcode image for a merchant Read payware_products_get_schedule Get detailed information about a specific price schedule (ISV operation) Read payware_products_get_schedules Get all price schedules for a merchant Read payware_products_list_products Get a list of all products for a merchant account (ISV operation) Read payware_utils_format_json_deterministic Format JSON payload with deterministic key sorting for consistent SHA-256 calculation and payware API complian Read payware_utils_format_request Format and validate payware API requests with proper structure and headers Read payware_utils_generate_code_example Generate code examples for different programming languages and scenarios Read payware_utils_server_info Get MCP server version, status, and environment information

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Payware MCP Server

Can an AI agent move money through the Payware MCP Server MCP server? +

Yes. The Payware MCP Server server exposes 2 financial tools including payware_operations_create_transaction, payware_operations_process_transaction. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Payware MCP Server MCP server? +

Yes. The Payware MCP Server server exposes 7 destructive tools including payware_deep_links_delete_product_link, payware_deep_links_delete_transaction_link, payware_operations_cancel_transaction. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Payware MCP Server? +

The Payware MCP Server server has 11 write tools including payware_authentication_generate_rsa_keys, payware_authentication_setup_sandbox_auth, payware_authorization_oauth2_token_helper. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Payware MCP Server.

How many tools does the Payware MCP Server MCP server expose? +

57 tools across 3 categories: Destructive, Read, Write. 32 are read-only. 25 can modify, create, or delete data.

How do I enforce a policy on Payware MCP Server? +

Register the Payware MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Payware MCP Server tool call.

Deterministic rules across all 57 Payware MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON PAYWARE →

Instant setup, no code required.

57 Payware MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.