isw_validate_customer

What isw_validate_customer does on Interswitch

AI agents call isw_validate_customer to retrieve information from Interswitch without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why isw_validate_customer is rated Low

Validation is a read-only query operation that retrieves or confirms the existence and status of customer information. It performs no write, destructive, or financial operations. The low severity reflects minimal blast radius if misused—an attacker could enumerate valid customer identifiers but cannot modify data, execute commands, or commit financial transactions.

From the tool's definition Tool name 'validate_customer' and description 'Validate a customer account, meter, or phone number for a biller' indicates a lookup/verification operation with no data modification or financial transaction.

The rule that runs isw_validate_customer safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Interswitch, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For isw_validate_customer, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "isw_validate_customer": {}
  }
}

Questions about isw_validate_customer