Basis Theory MCP by usefulapi

io.usefulapi/basis-theory

Read token metadata, applications, audit logs, proxies and usage in the PCI vault.

Yes, your AI can use this right now.Answered a live MCP handshake in 173 ms with no sign-in needed and exposes 17 tools.

Connect it

Settings → Connectors → Add custom connector
URL: https://basis-theory.usefulapi.io/mcp

17 tools, verified live

Pulled straight from the server with tools/list on 2026-10-17.
basis_theory_list_tokensread-only

List vault tokens as METADATA — id, type, container, fingerprint, metadata and timestamps. Does not return the underlying card number or PII. Basis Theory: GET /v2/tokens.

basis_theory_search_tokensread-only

Search tokens with Basis Theory's query syntax over metadata, e.g. metadata.customer_id:"cus_1". Returns metadata only. Read-only despite being a POST — the query goes in the body. Basis Theory: POST /v2/tokens/search.

basis_theory_get_tokenread-only

Fetch a single token by id. Returns metadata, container, fingerprint and timestamps. WARNING: if the configured API key carries a reveal permission, the response also contains the token's plaintext data — issue this server a read-only management key instead. Basis Theory: GET /tokens/{id}.

basis_theory_list_applicationsread-only

List the applications (API-key holders) in the tenant, with their types and permissions. Basis Theory: GET /applications.

basis_theory_get_applicationread-only

Fetch a single application with its type and permission list. Basis Theory: GET /applications/{id}.

basis_theory_whoamiread-only

Return the application the configured BT-API-KEY belongs to — the fastest way to check which permissions this server actually has. Basis Theory: GET /applications/key.

basis_theory_list_logsread-only

List audit-log entries — who did what to which entity and when. The tool for answering 'who touched this token?'. Basis Theory: GET /logs.

basis_theory_list_log_entity_typesread-only

List the entity types the audit log records — the valid values for entity_type. Basis Theory: GET /logs/entity-types.

basis_theory_list_proxiesread-only

List the proxies that forward requests to third parties, detokenizing in flight. Basis Theory: GET /proxies.

basis_theory_get_proxyread-only

Fetch a single proxy with its destination URL and transform configuration. Basis Theory: GET /proxies/{id}.

basis_theory_list_reactorsread-only

List reactors — the serverless functions that run against detokenized data inside the vault. Basis Theory: GET /reactors.

basis_theory_get_reactorread-only

Fetch a single reactor with its configuration. Basis Theory: GET /reactors/{id}.

basis_theory_list_permissionsread-only

List the permissions that can be granted to an application, optionally for one application type. Basis Theory: GET /permissions.

basis_theory_list_rolesread-only

List the roles available for tenant members. Basis Theory: GET /roles.

basis_theory_get_tenantread-only

Fetch the current tenant — name, id and settings. Basis Theory: GET /tenants/self.

basis_theory_get_tenant_usageread-only

Fetch the tenant's usage report — token counts by type and container, and monthly API call volume. Basis Theory: GET /tenants/self/reports/usage.

basis_theory_list_tenant_membersread-only

List the people with access to the tenant, and their roles. Basis Theory: GET /tenants/self/members.

Alternatives in Security

Compare →
Try “Notion”, “Stripe”, “create invoice”, “browser”