Critical-risk tools in Interswitch
21 of the 74 tools in Interswitch are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
isw_block_cardDestructiveBlock a card immediately. Requires confirm: true.
-
isw_deactivate_paycodeDestructiveDeactivate an unused paycode. Requires confirm: true.
-
isw_agency_banking_cashoutFinancialPerform agency banking cashout. High-risk financial operation; requires confirm: true.
-
isw_agency_cashout_xmlFinancialSubmit raw Agency Banking cashout XML. High-risk financial operation; requires confirm: true.
-
isw_airtime_rechargeFinancialTop up a phone number through VAS airtime. Requires confirm: true.
-
isw_bulk_card_productionFinancialSubmit Card 360 bulk card production. Requires confirm: true.
-
isw_bulk_transferFinancialSend money to multiple bank accounts. High-risk financial operation; requires confirm: true. Max 100 transactions.
-
isw_complete_creditFinancialComplete bank credit using inquiryRef and OTP. High-risk financial operation; requires confirm: true.
-
isw_create_bulk_paycodesFinancialCreate multiple cardless withdrawal paycodes. High-risk batch operation; requires confirm: true. Max 100.
-
isw_create_cardFinancialProvision a new Verve card through Card 360. Requires confirm: true.
-
isw_create_paycodeFinancialCreate a cardless withdrawal paycode. Requires confirm: true.
-
isw_create_payment_linkFinancialCreate a shareable payment link. Provide amountNaira or amountKobo explicitly; endpoint receives kobo. Requires confirm: true.
-
isw_get_airtime_epinsFinancialPurchase airtime e-pins. Requires confirm: true.
-
isw_initialize_paymentFinancialInitialize a Quickteller payment. Provide amountNaira or amountKobo explicitly; endpoint receives kobo. Requires confirm: true.
-
isw_initiate_refundFinancialInitiate a refund for a settled transaction. High-risk write operation; requires confirm: true.
-
isw_pay_billFinancialPay a bill through the payment route. Provide amountNaira or amountKobo explicitly; endpoint receives kobo. Requires confirm: true.
-
isw_pay_vas_billFinancialPay a VAS bill. Provide amountNaira or amountKobo explicitly. Requires confirm: true.
-
isw_request_nano_loanFinancialRequest a nano loan. High-risk operation creating debt; requires confirm: true.
-
isw_salary_lendingFinancialRequest a salary loan. High-risk operation creating debt; requires confirm: true.
-
isw_single_transferFinancialSend money to a bank account. High-risk financial operation; requires confirm: true. Provide amountNaira or amountKobo explicitly.
-
isw_value_financingFinancialRequest value financing. High-risk operation creating debt; requires confirm: true.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.