isw_fetch_customer_card_details

What isw_fetch_customer_card_details does on Interswitch

AI agents call isw_fetch_customer_card_details to retrieve information from Interswitch without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why isw_fetch_customer_card_details is rated Low

This tool retrieves card information tied to a customer account. While it is a Read operation (no data is modified), the severity is elevated to medium because card details are sensitive financial information that could be misused if exposed to an unauthorized agent—an attacker could enumerate or harvest card metadata. However, the tool itself does not move money, execute commands, or delete data.

From the tool's definition Tool name contains 'fetch' and description states 'Fetch customer card details by account' — a retrieval operation with no modification.

The rule that runs isw_fetch_customer_card_details safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Interswitch, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For isw_fetch_customer_card_details, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "isw_fetch_customer_card_details": {}
  }
}

Questions about isw_fetch_customer_card_details