Basis Theory MCP by usefulapi

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

• Connection: Runs in the cloud
• Transport: Streamable HTTP
• Category: Other

Install

Pick the AI app you use, then copy the settings.

You need

• Runs in the cloudNothing to install; it connects over the internet

Which app do you use?

https://basis-theory.usefulapi.io/mcp

claude mcp add --transport http basis-theory https://basis-theory.usefulapi.io/mcp

{
  "mcpServers": {
    "basis-theory": {
      "url": "https://basis-theory.usefulapi.io/mcp"
    }
  }
}

{
  "servers": {
    "basis-theory": {
      "type": "http",
      "url": "https://basis-theory.usefulapi.io/mcp"
    }
  }
}

https://basis-theory.usefulapi.io/mcp

Your choice stays on this device in a cookie; no account needed.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Tool names and descriptions exactly as the server reported them on Nov 6, 2026. The maker wrote them, not us; we show them as plain text.

• basis_theory_list_tokens

  List vault tokens as METADATA — id, type, container, fingerprint, metadata and timestamps. Does not return the underlying card number or PII. Basis Theory: GET /v2/tokens.

• basis_theory_search_tokens

  Search tokens with Basis Theory's query syntax over metadata, e.g. metadata.customer_id:"cus_1". Returns metadata only. Read-only despite being a POST — the query goes in the body. Basis Theory: POST /v2/tokens/search.

• basis_theory_get_token

  Fetch a single token by id. Returns metadata, container, fingerprint and timestamps. WARNING: if the configured API key carries a reveal permission, the response also contains the token's plaintext data — issue this server a read-only management key instead. Basis Theory: GET /to

• basis_theory_list_applications

  List the applications (API-key holders) in the tenant, with their types and permissions. Basis Theory: GET /applications.

• basis_theory_get_application

  Fetch a single application with its type and permission list. Basis Theory: GET /applications/{id}.

• basis_theory_whoami

  Return the application the configured BT-API-KEY belongs to — the fastest way to check which permissions this server actually has. Basis Theory: GET /applications/key.

• basis_theory_list_logs

  List audit-log entries — who did what to which entity and when. The tool for answering 'who touched this token?'. Basis Theory: GET /logs.

• basis_theory_list_log_entity_types

  List the entity types the audit log records — the valid values for entity_type. Basis Theory: GET /logs/entity-types.

• basis_theory_list_proxies

  List the proxies that forward requests to third parties, detokenizing in flight. Basis Theory: GET /proxies.

• basis_theory_get_proxy

  Fetch a single proxy with its destination URL and transform configuration. Basis Theory: GET /proxies/{id}.

• basis_theory_list_reactors

  List reactors — the serverless functions that run against detokenized data inside the vault. Basis Theory: GET /reactors.

• basis_theory_get_reactor

  Fetch a single reactor with its configuration. Basis Theory: GET /reactors/{id}.

• basis_theory_list_permissions

  List the permissions that can be granted to an application, optionally for one application type. Basis Theory: GET /permissions.

• basis_theory_list_roles

  List the roles available for tenant members. Basis Theory: GET /roles.

• basis_theory_get_tenant

  Fetch the current tenant — name, id and settings. Basis Theory: GET /tenants/self.

• basis_theory_get_tenant_usage

  Fetch the tenant's usage report — token counts by type and container, and monthly API call volume. Basis Theory: GET /tenants/self/reports/usage.

• basis_theory_list_tenant_members

  List the people with access to the tenant, and their roles. Basis Theory: GET /tenants/self/members.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026

• ✓ Pass

  Maker matches the repo

  The registry name was verified against the domain usefulapi.io (the registry checks domain ownership)

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• ✓ Pass

  Endpoint responds

  Responded in 10 ms (HTTP 200)

• – Not applicable

  Sign-in with OAuth

  No sign-in needed

• ✓ Pass

  No hidden instructions in tool descriptions

  Read 17 tool descriptions and found no hidden instructions to the AI

Compared with others in Otheri

• More stars than 0% of the other 32435 servers in this category
• Published to the registry more recently than 96% of the other 32435 servers in this category
• Basic checks equal to or better than 100% of the other 32435 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

README from the maker

{