usefulapi

Basis Theory MCP server. Read token metadata, applications, audit logs, proxies and usage in the PCI vault.

Claude

Open Settings → Connectors → Add custom connector
Paste this URL:
https://basis-theory.usefulapi.io/mcp
Authenticate with Basis Theory when prompted

Cursor · VS Code · Windsurf · Cline

Add to your MCP config, then reload & authorize:

{
  "mcpServers": {
    "basis-theory": {
      "url": "https://basis-theory.usefulapi.io/mcp"
    }
  }
}

live17 toolsFree 100 tool calls / monthPro $9/mo · $90/yr

Tools 17

Tool	Type	What it does
`basis_theory_list_tokens`	read	List tokens List vault tokens as METADATA — id, type, container, fingerprint, metadata and timestamps. Does not return the underlying card number or PII. Basis Theory: GET /v2/tokens.
`basis_theory_search_tokens`	read	Search tokens Search tokens with Basis Theory's query syntax over metadata, e.g. metadata.customer_id:"cus_1". Returns metadata only. Read-only despite being a POST — the query goes in the body. Basis Theory: POST /v2/tokens/search.
`basis_theory_get_token`	read	Get one token Fetch a single token by id. Returns metadata, container, fingerprint and timestamps. WARNING: if the configured API key carries a reveal permission, the response also contains the token's plaintext data — issue this server a read-only management key instead. Basis Theory: GET /tokens/{id}.
`basis_theory_list_applications`	read	List applications List the applications (API-key holders) in the tenant, with their types and permissions. Basis Theory: GET /applications.
`basis_theory_get_application`	read	Get one application Fetch a single application with its type and permission list. Basis Theory: GET /applications/{id}.
`basis_theory_whoami`	read	Identify the configured key Return the application the configured BT-API-KEY belongs to — the fastest way to check which permissions this server actually has. Basis Theory: GET /applications/key.
`basis_theory_list_logs`	read	List audit logs List audit-log entries — who did what to which entity and when. The tool for answering 'who touched this token?'. Basis Theory: GET /logs.
`basis_theory_list_log_entity_types`	read	List log entity types List the entity types the audit log records — the valid values for entity_type. Basis Theory: GET /logs/entity-types.
`basis_theory_list_proxies`	read	List proxies List the proxies that forward requests to third parties, detokenizing in flight. Basis Theory: GET /proxies.
`basis_theory_get_proxy`	read	Get one proxy Fetch a single proxy with its destination URL and transform configuration. Basis Theory: GET /proxies/{id}.
`basis_theory_list_reactors`	read	List reactors List reactors — the serverless functions that run against detokenized data inside the vault. Basis Theory: GET /reactors.
`basis_theory_get_reactor`	read	Get one reactor Fetch a single reactor with its configuration. Basis Theory: GET /reactors/{id}.
`basis_theory_list_permissions`	read	List permissions List the permissions that can be granted to an application, optionally for one application type. Basis Theory: GET /permissions.
`basis_theory_list_roles`	read	List roles List the roles available for tenant members. Basis Theory: GET /roles.
`basis_theory_get_tenant`	read	Get the tenant Fetch the current tenant — name, id and settings. Basis Theory: GET /tenants/self.
`basis_theory_get_tenant_usage`	read	Get the tenant usage report Fetch the tenant's usage report — token counts by type and container, and monthly API call volume. Basis Theory: GET /tenants/self/reports/usage.
`basis_theory_list_tenant_members`	read	List tenant members List the people with access to the tenant, and their roles. Basis Theory: GET /tenants/self/members.

Pricing

Plan	Price	Limit
Free	$0	100 tool calls / month
Pro	$9/mo · $90/yr	Unlimited

This is a Model Context Protocol endpoint — meant to be connected from an AI client, not opened in a browser. An invalid_token response at the URL is the auth gate working as designed; clients authenticate automatically.