MCP serverio.usefulapi/basis-theory

Fetch a single application with its type and permission list. Basis Theory: GET /applications/{id}.

Fetch a single proxy with its destination URL and transform configuration. Basis Theory: GET /proxies/{id}.

Fetch a single reactor with its configuration. Basis Theory: GET /reactors/{id}.

Fetch the current tenant — name, id and settings. Basis Theory: GET /tenants/self.

Fetch the tenant's usage report — token counts by type and container, and monthly API call volume. Basis Theory: GET /tenants/self/reports/usage.

Fetch a single token by id. Returns metadata, container, fingerprint and timestamps. WARNING: if the configured API key carries a reveal permission, the response also contains the

List the applications (API-key holders) in the tenant, with their types and permissions. Basis Theory: GET /applications.

List the entity types the audit log records — the valid values for entity_type. Basis Theory: GET /logs/entity-types.

List audit-log entries — who did what to which entity and when. The tool for answering 'who touched this token?'. Basis Theory: GET /logs.

List the permissions that can be granted to an application, optionally for one application type. Basis Theory: GET /permissions.

List the proxies that forward requests to third parties, detokenizing in flight. Basis Theory: GET /proxies.

List reactors — the serverless functions that run against detokenized data inside the vault. Basis Theory: GET /reactors.

List the roles available for tenant members. Basis Theory: GET /roles.

List the people with access to the tenant, and their roles. Basis Theory: GET /tenants/self/members.

List vault tokens as METADATA — id, type, container, fingerprint, metadata and timestamps. Does not return the underlying card number or PII. Basis Theory: GET /v2/tokens.

Search tokens with Basis Theory's query syntax over metadata, e.g. metadata.customer_id:"cus_1". Returns metadata only. Read-only despite being a POST — the query goes in the body.

Return the application the configured BT-API-KEY belongs to — the fastest way to check which permissions this server actually has. Basis Theory: GET /applications/key.