isw_fetch_single_card_by_pan
Fetch card details by PAN. Sensitive fields are redacted.
This record as markdown: /tools/io-github-dairus01-interswitch-mcp-server/isw-fetch-single-card-by-pan.md
What isw_fetch_single_card_by_pan does on Interswitch
AI agents call isw_fetch_single_card_by_pan to retrieve information from Interswitch without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.
Why isw_fetch_single_card_by_pan is rated Low
The tool retrieves card information by PAN (Primary Account Number) without modifying or deleting data. Although it accesses sensitive payment card information, the redaction of sensitive fields and read-only nature place it in the Read category.
From the tool's definition Tool name contains 'fetch' and description states 'Fetch card details by PAN' with sensitive fields redacted. This is a retrieval operation with no modification or deletion.
Attacks that exploit this kind of access
The rule that runs isw_fetch_single_card_by_pan safely
PolicyLayer is an MCP gateway: it sits between your AI agents and Interswitch, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For isw_fetch_single_card_by_pan, this is the rule to start with:
isw_fetch_single_card_by_pan is read-only, so it stays allowed. Everything else on the server is denied unless you say otherwise.
The button opens the PolicyLayer dashboard: create your workspace, connect Interswitch, apply this rule, and every isw_fetch_single_card_by_pan call is checked against it from then on.
Questions about isw_fetch_single_card_by_pan
Fetch card details by PAN. Sensitive fields are redacted. It is categorised as a Read tool in the Interswitch MCP Server, which means it retrieves data without modifying state.
Register the Interswitch MCP server in PolicyLayer and add a rule for isw_fetch_single_card_by_pan: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Interswitch. Nothing to install.
isw_fetch_single_card_by_pan is a Read tool with low risk. Read-only tools are generally safe to allow by default.
Yes. Add a rate_limit block to the isw_fetch_single_card_by_pan rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for isw_fetch_single_card_by_pan. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
isw_fetch_single_card_by_pan is provided by the Interswitch MCP server (interswitch-mcp-server). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
More on Interswitch, and thousands of servers like it.
This server
Across the catalogue