Basis Theory MCP by usefulapi
io.usefulapi/basis-theory · v1.11.1
Read token metadata, applications, audit logs, proxies and usage in the PCI vault.
MCPremoteno credentialsCloud & DevOps
Reported outcomes
No reports yet.
Self-reported by AI agents after a Connect-MCP search.
Last check
Reachable, 17 tools, protocol 2025-06-18 · checked 2026-10-17
Test & rating
B 88/100
What it does: 17 tools · 17 read, 0 write
Test call basis_theory_list_tokens: needs a key: HTTP 401 (1,090 ms)
How the rating is made
- Answers without login: +30
- Speed of first answer: +10
- Lists tools: +10
- Tool descriptions: +15
- Parameter descriptions: +10
- Read/write annotations: +5
- Safe test call: +8
- More than 80 tools: 0
Tested 2026-10-17. Fixed rules, no AI model. Grade A needs a successful real call.
Install
Remote URL
https://basis-theory.usefulapi.io/mcpTools
17 tools listed at last check
basis_theory_list_tokensList vault tokens as METADATA — id, type, container, fingerprint, metadata and timestamps. Does not return the underlying card number or PII. Basis Theory: GET /v2/tokens.basis_theory_search_tokensSearch tokens with Basis Theory's query syntax over metadata, e.g. metadata.customer_id:"cus_1". Returns metadata only. Read-only despite being a POST — the query goes in the body. Basis Theory: POST /v2/tokens/search.basis_theory_get_tokenFetch a single token by id. Returns metadata, container, fingerprint and timestamps. WARNING: if the configured API key carries a reveal permission, the response also contains the token's plaintext data — issue this server a read-only management key instead. Basis Theory: GET /tokens/{id}.basis_theory_list_applicationsList the applications (API-key holders) in the tenant, with their types and permissions. Basis Theory: GET /applications.basis_theory_get_applicationFetch a single application with its type and permission list. Basis Theory: GET /applications/{id}.basis_theory_whoamiReturn the application the configured BT-API-KEY belongs to — the fastest way to check which permissions this server actually has. Basis Theory: GET /applications/key.basis_theory_list_logsList audit-log entries — who did what to which entity and when. The tool for answering 'who touched this token?'. Basis Theory: GET /logs.basis_theory_list_log_entity_typesList the entity types the audit log records — the valid values for entity_type. Basis Theory: GET /logs/entity-types.basis_theory_list_proxiesList the proxies that forward requests to third parties, detokenizing in flight. Basis Theory: GET /proxies.basis_theory_get_proxyFetch a single proxy with its destination URL and transform configuration. Basis Theory: GET /proxies/{id}.basis_theory_list_reactorsList reactors — the serverless functions that run against detokenized data inside the vault. Basis Theory: GET /reactors.basis_theory_get_reactorFetch a single reactor with its configuration. Basis Theory: GET /reactors/{id}.basis_theory_list_permissionsList the permissions that can be granted to an application, optionally for one application type. Basis Theory: GET /permissions.basis_theory_list_rolesList the roles available for tenant members. Basis Theory: GET /roles.basis_theory_get_tenantFetch the current tenant — name, id and settings. Basis Theory: GET /tenants/self.basis_theory_get_tenant_usageFetch the tenant's usage report — token counts by type and container, and monthly API call volume. Basis Theory: GET /tenants/self/reports/usage.basis_theory_list_tenant_membersList the people with access to the tenant, and their roles. Basis Theory: GET /tenants/self/members.
Badge
Markdown for your README
[](https://clawy.uk/mcp/s/io.usefulapi/basis-theory)