Servers Playground How we check Add a server Log in

Basis Theory MCP by usefulapi

Working · 2.3 s

io.usefulapi/basis-theoryv1.20.0 Domain verified

Read token metadata, applications, audit logs, proxies and usage in the PCI vault.

Security

Source Website Registry entry

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://basis-theory.usefulapi.io/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

basis_theory_get_application Read-only

Fetch a single application with its type and permission list. Basis Theory: GET /applications/{id}.

application_idstring, required

The application's id.

Basis Theory MCP by usefulapi MCP server | mcptry

Tools (17)

basis_theory_get_application

Fetch a single application with its type and permission list. Basis Theory: GET /applications/{id}.

read-only

Argument	Type	Description
application_id*	string	The application's id.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "application_id"
  ],
  "properties": {
    "application_id": {
      "type": "string",
      "description": "The application's id."
    }
  }
}

basis_theory_get_proxy

Fetch a single proxy with its destination URL and transform configuration. Basis Theory: GET /proxies/{id}.

read-only

Argument	Type	Description
proxy_id*	string	The proxy's id.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "proxy_id"
  ],
  "properties": {
    "proxy_id": {
      "type": "string",
      "description": "The proxy's id."
    }
  }
}

basis_theory_get_reactor

Fetch a single reactor with its configuration. Basis Theory: GET /reactors/{id}.

read-only

Argument	Type	Description
reactor_id*	string	The reactor's id.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "reactor_id"
  ],
  "properties": {
    "reactor_id": {
      "type": "string",
      "description": "The reactor's id."
    }
  }
}

basis_theory_get_tenant

Fetch the current tenant — name, id and settings. Basis Theory: GET /tenants/self.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {}
}

basis_theory_get_tenant_usage

Fetch the tenant's usage report — token counts by type and container, and monthly API call volume. Basis Theory: GET /tenants/self/reports/usage.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {}
}

basis_theory_get_token

Fetch a single token by id. Returns metadata, container, fingerprint and timestamps. WARNING: if the configured API key carries a reveal permission, the response also contains the token's plaintext data — issue this server a read-only management key instead. Basis Theory: GET /tokens/{id}.

read-only

Argument	Type	Description
token_id*	string	The token's id.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "token_id"
  ],
  "properties": {
    "token_id": {
      "type": "string",
      "description": "The token's id."
    }
  }
}

basis_theory_list_applications

List the applications (API-key holders) in the tenant, with their types and permissions. Basis Theory: GET /applications.

read-only

Argument	Type	Description
page	integer	1-based page number (offset pagination).
size	integer	Page size, 1-100.
type	string	Only applications of this type, e.g. private, public, management, expiring.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "page": {
      "type": "integer",
      "maximum": 9007199254740991,
      "minimum": 1,
      "description": "1-based page number (offset pagination)."
    },
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    },
    "type": {
      "type": "string",
      "description": "Only applications of this type, e.g. private, public, management, expiring."
    }
  }
}

basis_theory_list_log_entity_types

List the entity types the audit log records — the valid values for entity_type. Basis Theory: GET /logs/entity-types.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {}
}

basis_theory_list_logs

List audit-log entries — who did what to which entity and when. The tool for answering 'who touched this token?'. Basis Theory: GET /logs.

read-only

Argument	Type	Description
page	integer	1-based page number (offset pagination).
size	integer	Page size, 1-100.
end_date	string	ISO-8601 upper bound.
entity_id	string	Only entries for this entity id.
start_date	string	ISO-8601 lower bound.
entity_type	string	Only entries for this entity type, e.g. token, application, proxy.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "page": {
      "type": "integer",
      "maximum": 9007199254740991,
      "minimum": 1,
      "description": "1-based page number (offset pagination)."
    },
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    },
    "end_date": {
      "type": "string",
      "description": "ISO-8601 upper bound."
    },
    "entity_id": {
      "type": "string",
      "description": "Only entries for this entity id."
    },
    "start_date": {
      "type": "string",
      "description": "ISO-8601 lower bound."
    },
    "entity_type": {
      "type": "string",
      "description": "Only entries for this entity type, e.g. token, application, proxy."
    }
  }
}

basis_theory_list_permissions

List the permissions that can be granted to an application, optionally for one application type. Basis Theory: GET /permissions.

read-only

Argument	Type	Description
application_type	string	Only permissions valid for this application type.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "application_type": {
      "type": "string",
      "description": "Only permissions valid for this application type."
    }
  }
}

basis_theory_list_proxies

List the proxies that forward requests to third parties, detokenizing in flight. Basis Theory: GET /proxies.

read-only

Argument	Type	Description
name	string	Filter by proxy name.
page	integer	1-based page number (offset pagination).
size	integer	Page size, 1-100.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "name": {
      "type": "string",
      "description": "Filter by proxy name."
    },
    "page": {
      "type": "integer",
      "maximum": 9007199254740991,
      "minimum": 1,
      "description": "1-based page number (offset pagination)."
    },
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    }
  }
}

basis_theory_list_reactors

List reactors — the serverless functions that run against detokenized data inside the vault. Basis Theory: GET /reactors.

read-only

Argument	Type	Description
name	string	Filter by reactor name.
page	integer	1-based page number (offset pagination).
size	integer	Page size, 1-100.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "name": {
      "type": "string",
      "description": "Filter by reactor name."
    },
    "page": {
      "type": "integer",
      "maximum": 9007199254740991,
      "minimum": 1,
      "description": "1-based page number (offset pagination)."
    },
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    }
  }
}

basis_theory_list_roles

List the roles available for tenant members. Basis Theory: GET /roles.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {}
}

basis_theory_list_tenant_members

List the people with access to the tenant, and their roles. Basis Theory: GET /tenants/self/members.

read-only

Argument	Type	Description
page	integer	1-based page number (offset pagination).
size	integer	Page size, 1-100.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "page": {
      "type": "integer",
      "maximum": 9007199254740991,
      "minimum": 1,
      "description": "1-based page number (offset pagination)."
    },
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    }
  }
}

basis_theory_list_tokens

List vault tokens as METADATA — id, type, container, fingerprint, metadata and timestamps. Does not return the underlying card number or PII. Basis Theory: GET /v2/tokens.

read-only

Argument	Type	Description
size	integer	Page size, 1-100.
type	string	Only tokens of this type, e.g. card, bank, token.
start	string	Cursor from the previous page's pagination.next. Omit for the first page.
container	string	Only tokens in this container path, e.g. /pci/high/.
fingerprint	string	Only tokens sharing this fingerprint — how you find duplicates of the same card.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    },
    "type": {
      "type": "string",
      "description": "Only tokens of this type, e.g. card, bank, token."
    },
    "start": {
      "type": "string",
      "description": "Cursor from the previous page's pagination.next. Omit for the first page."
    },
    "container": {
      "type": "string",
      "description": "Only tokens in this container path, e.g. /pci/high/."
    },
    "fingerprint": {
      "type": "string",
      "description": "Only tokens sharing this fingerprint — how you find duplicates of the same card."
    }
  }
}

basis_theory_search_tokens

Search tokens with Basis Theory's query syntax over metadata, e.g. metadata.customer_id:"cus_1". Returns metadata only. Read-only despite being a POST — the query goes in the body. Basis Theory: POST /v2/tokens/search.

read-only

Argument	Type	Description
size	integer	Page size, 1-100.
query*	string	Query string, e.g. type:card AND metadata.customer_id:"cus_1".
start	string	Cursor from the previous page's pagination.next. Omit for the first page.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "query"
  ],
  "properties": {
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    },
    "query": {
      "type": "string",
      "description": "Query string, e.g. type:card AND metadata.customer_id:\"cus_1\"."
    },
    "start": {
      "type": "string",
      "description": "Cursor from the previous page's pagination.next. Omit for the first page."
    }
  }
}

basis_theory_whoami

Return the application the configured BT-API-KEY belongs to — the fastest way to check which permissions this server actually has. Basis Theory: GET /applications/key.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {}
}