MCP Radar
MCP Server

basis-theory

io.usefulapi/basis-theory
Payments & Fintech Security Public & reachable MCP 2026-07-28

What this MCP does

Reads metadata and audit information for tokenized payment or sensitive data in a Basis Theory vault, including applications, proxies, reactors and usage.

Capabilities

Tools

17 tools
basis_theory_get_application
Get one application
Fetch a single application with its type and permission list. Basis Theory: GET /applications/{id}.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['application_id'], 'properties': {'application_id': {'type': 'string', 'description': "The application's id."}}}
basis_theory_get_proxy
Get one proxy
Fetch a single proxy with its destination URL and transform configuration. Basis Theory: GET /proxies/{id}.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['proxy_id'], 'properties': {'proxy_id': {'type': 'string', 'description': "The proxy's id."}}}
basis_theory_get_reactor
Get one reactor
Fetch a single reactor with its configuration. Basis Theory: GET /reactors/{id}.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['reactor_id'], 'properties': {'reactor_id': {'type': 'string', 'description': "The reactor's id."}}}
basis_theory_get_tenant
Get the tenant
Fetch the current tenant — name, id and settings. Basis Theory: GET /tenants/self.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {}}
basis_theory_get_tenant_usage
Get the tenant usage report
Fetch the tenant's usage report — token counts by type and container, and monthly API call volume. Basis Theory: GET /tenants/self/reports/usage.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {}}
basis_theory_get_token
Get one token
Fetch a single token by id. Returns metadata, container, fingerprint and timestamps. WARNING: if the configured API key carries a reveal permission, the response also contains the token's plaintext data — issue this server a read-only management key instead. Basis Theory: GET /tokens/{id}.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['token_id'], 'properties': {'token_id': {'type': 'string', 'description': "The token's id."}}}
basis_theory_list_applications
List applications
List the applications (API-key holders) in the tenant, with their types and permissions. Basis Theory: GET /applications.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {'page': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 1, 'description': '1-based page number (offset pagination).'}, 'size': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Page size, 1-100.'}, 'type': {'type': 'string', 'description': 'Only applications of this type, e.g. private, public, management, expiring.'}}}
basis_theory_list_log_entity_types
List log entity types
List the entity types the audit log records — the valid values for entity_type. Basis Theory: GET /logs/entity-types.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {}}
basis_theory_list_logs
List audit logs
List audit-log entries — who did what to which entity and when. The tool for answering 'who touched this token?'. Basis Theory: GET /logs.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {'page': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 1, 'description': '1-based page number (offset pagination).'}, 'size': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Page size, 1-100.'}, 'end_date': {'type': 'string', 'description': 'ISO-8601 upper bound.'}, 'entity_id': {'type': 'string', 'description': 'Only entries for this entity id.'}, 'start_date': {'type': 'string', 'description': 'ISO-8601 lower bound.'}, 'entity_type': {'type': 'string', 'description': 'Only entries for this entity type, e.g. token, application, proxy.'}}}
basis_theory_list_permissions
List permissions
List the permissions that can be granted to an application, optionally for one application type. Basis Theory: GET /permissions.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {'application_type': {'type': 'string', 'description': 'Only permissions valid for this application type.'}}}
basis_theory_list_proxies
List proxies
List the proxies that forward requests to third parties, detokenizing in flight. Basis Theory: GET /proxies.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {'name': {'type': 'string', 'description': 'Filter by proxy name.'}, 'page': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 1, 'description': '1-based page number (offset pagination).'}, 'size': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Page size, 1-100.'}}}
basis_theory_list_reactors
List reactors
List reactors — the serverless functions that run against detokenized data inside the vault. Basis Theory: GET /reactors.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {'name': {'type': 'string', 'description': 'Filter by reactor name.'}, 'page': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 1, 'description': '1-based page number (offset pagination).'}, 'size': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Page size, 1-100.'}}}
basis_theory_list_roles
List roles
List the roles available for tenant members. Basis Theory: GET /roles.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {}}
basis_theory_list_tenant_members
List tenant members
List the people with access to the tenant, and their roles. Basis Theory: GET /tenants/self/members.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {'page': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 1, 'description': '1-based page number (offset pagination).'}, 'size': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Page size, 1-100.'}}}
basis_theory_list_tokens
List tokens
List vault tokens as METADATA — id, type, container, fingerprint, metadata and timestamps. Does not return the underlying card number or PII. Basis Theory: GET /v2/tokens.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {'size': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Page size, 1-100.'}, 'type': {'type': 'string', 'description': 'Only tokens of this type, e.g. card, bank, token.'}, 'start': {'type': 'string', 'description': "Cursor from the previous page's pagination.next. Omit for the first page."}, 'container': {'type': 'string', 'description': 'Only tokens in this container path, e.g. /pci/high/.'}, 'fingerprint': {'type': 'string', 'description': 'Only tokens sharing this fingerprint — how you find duplicates of the same card.'}}}
basis_theory_search_tokens
Search tokens
Search tokens with Basis Theory's query syntax over metadata, e.g. metadata.customer_id:"cus_1". Returns metadata only. Read-only despite being a POST — the query goes in the body. Basis Theory: POST /v2/tokens/search.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'required': ['query'], 'properties': {'size': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Page size, 1-100.'}, 'query': {'type': 'string', 'description': 'Query string, e.g. type:card AND metadata.customer_id:"cus_1".'}, 'start': {'type': 'string', 'description': "Cursor from the previous page's pagination.next. Omit for the first page."}}}
basis_theory_whoami
Identify the configured key
Return the application the configured BT-API-KEY belongs to — the fastest way to check which permissions this server actually has. Basis Theory: GET /applications/key.
Read only
Input schema 
{'type': 'object', '$schema': 'https://json-schema.org/draft/2020-12/schema', 'properties': {}}
History

Recent tool changes

Changed
basis_theory_list_tenant_members
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_get_tenant_usage
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_get_tenant
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_list_roles
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_list_permissions
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_get_reactor
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_list_reactors
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_get_proxy
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_list_proxies
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_list_log_entity_types
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_list_logs
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_whoami
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_get_application
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_list_applications
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_get_token
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_search_tokens
Oct. 2, 2026, 2:40 a.m.
Changed
basis_theory_list_tokens
Oct. 2, 2026, 2:40 a.m.
Added
basis_theory_list_tenant_members
Sept. 30, 2026, 2:40 a.m.
Added
basis_theory_get_tenant_usage
Sept. 30, 2026, 2:40 a.m.
Added
basis_theory_get_tenant
Sept. 30, 2026, 2:40 a.m.
Added
basis_theory_list_roles
Sept. 30, 2026, 2:40 a.m.
Added
basis_theory_list_permissions
Sept. 30, 2026, 2:40 a.m.
Added
basis_theory_get_reactor
Sept. 30, 2026, 2:40 a.m.
Added
basis_theory_list_reactors
Sept. 30, 2026, 2:40 a.m.
Added
basis_theory_get_proxy
Sept. 30, 2026, 2:40 a.m.
Added
basis_theory_list_proxies
Sept. 30, 2026, 2:40 a.m.
Added
basis_theory_list_log_entity_types
Sept. 30, 2026, 2:40 a.m.
Added
basis_theory_list_logs
Sept. 30, 2026, 2:40 a.m.
Added
basis_theory_whoami
Sept. 30, 2026, 2:40 a.m.
Added
basis_theory_get_application
Sept. 30, 2026, 2:40 a.m.
Discover

Similar MCP servers

Robyn — Gasless Cross-Chain for AI Agents

io.github.ox31461/robyn

Supports gasless cross-chain transfers, wallet and transaction checks, spending mandates, privacy-preserving messaging, and signe…

x402-endpoints

io.github.digitalweb33333-creator/x402-endpoints

Offers paid x402 API tools for crypto intelligence, wallet and transaction analysis, compliance screening, content safety, due di…

Cofferline

com.cofferline/treasury

Provides policy-controlled agent wallet treasury operations, token conversions, gas top-ups, prediction-market orders, delegation…

xrpl-referee

io.github.eamwhite1/xrpl-referee

Supports XRPL-based agent hiring, escrow payments, job marketplaces, wallet trust scoring, sanctions and KYC checks, and AI-assis…

blindoracle

io.github.craigmbrown/blindoracle

Offers paid, verifiable research and data services alongside agent trust checks, settlement attestations, crypto market analysis,…

SALT19 Agent Utility Grid

io.github.GabrielAllit1/salt19-agent-utility-grid

Provides paid agent decision gates, code and dependency risk checks, repository intelligence, blockchain facts, payment-policy ch…

InsureLink

io.github.skewing1/insurelink

Manages agent reputation, insurance coverage, SLA agreements, transaction safety checks, attestations, claims, and x402-mediated …

biii

io.github.philpof102-svg/biii

Evaluates Base wallets, tokens, agents, merchants, payment authorization, transaction settlement, approvals, theft traces, and on…