io.usefulapiPublished by usefulapi.ioOfficial publisherv1.39.2Updated Nov 14, 2026
Read token metadata, applications, audit logs, proxies and usage in the PCI vault.
The publisher's own server: Ably MCP by usefulapi
Read-only access to a Basis Theory PCI vault: token metadata, applications, audit logs, proxies, reactors and tenant usage.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.usefulapi%2Fbasis-theory/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"basis-theory-by-usefulapi": {
"type": "http",
"url": "https://basis-theory.usefulapi.io/mcp"
}
}
}Read token metadata, applications, audit logs, proxies and usage in the PCI vault. Hosted, no local install.
Live endpoint: https://basis-theory.usefulapi.io/mcp · Homepage: https://usefulapi.io
https://basis-theory.usefulapi.io/mcp.claude mcp add --transport http basis-theory https://basis-theory.usefulapi.io/mcp, then run /mcp to log in.Add only the URL. Do not add an Authorization header or an API key to the client config: the server signs you in with OAuth, and the login page asks for your Basis Theory credentials.
Step-by-step setup, where to find your credentials, and FAQ: https://usefulapi.io/basis-theory/
On first connect you'll paste your Basis Theory credentials. They are validated, stored per-user, and scoped to you — no keys in config files.
read tools are read-only; write tools mutate data (clients should confirm them); meta tools report usage, manage your subscription or send a feature request.
Each paid plan covers this server only. Ask your AI to run basis_theory_upgrade and choose Pro or Pro+, billed monthly or yearly (it returns a Stripe Checkout link). If you already have Pro, ask to change it to Pro+. The change requires your confirmation, keeps your billing interval and charges the price difference for the rest of the period immediately. Cancel any time with basis_theory_cancel_subscription: your paid plan continues to the end of the paid period, with no refund for the current period, and asking to resume the same plan with basis_theory_upgrade before then undoes the cancel. Or write to [email protected].
MIT
Source: servers/basis-theory/README.md at commit 3c1b3df
List tokens
List vault tokens as METADATA — id, type, container, fingerprint, metadata and timestamps. Does not return the underlying card number or PII. Basis Theory: GET /v2/tokens.
sizetypestartcontainerfingerprintSearch tokens
Search tokens with Basis Theory's query syntax over metadata, e.g. metadata.customer_id:"cus_1". Returns metadata only. Read-only despite being a POST — the query goes in the body. Basis Theory: POST /v2/tokens/search.
sizequeryrequiredstartGet one token
Fetch a single token by id. Returns metadata, container, fingerprint and timestamps. WARNING: if the configured API key carries a reveal permission, the response also contains the token's plaintext data — issue this server a read-only management key instead. Basis Theory: GET /tokens/{id}.
token_idrequiredList applications
List the applications (API-key holders) in the tenant, with their types and permissions. Basis Theory: GET /applications.
pagesizetypeGet one application
Fetch a single application with its type and permission list. Basis Theory: GET /applications/{id}.
application_idrequiredIdentify the configured key
Return the application the configured BT-API-KEY belongs to — the fastest way to check which permissions this server actually has. Basis Theory: GET /applications/key.
Takes no parameters.
List audit logs
List audit-log entries — who did what to which entity and when. The tool for answering 'who touched this token?'. Basis Theory: GET /logs.
pagesizeend_dateentity_idstart_dateentity_typeList log entity types
List the entity types the audit log records — the valid values for entity_type. Basis Theory: GET /logs/entity-types.
Takes no parameters.
List proxies
List the proxies that forward requests to third parties, detokenizing in flight. Basis Theory: GET /proxies.
namepagesizeGet one proxy
Fetch a single proxy with its destination URL and transform configuration. Basis Theory: GET /proxies/{id}.
proxy_idrequiredList reactors
List reactors — the serverless functions that run against detokenized data inside the vault. Basis Theory: GET /reactors.
namepagesizeGet one reactor
Fetch a single reactor with its configuration. Basis Theory: GET /reactors/{id}.
reactor_idrequiredList permissions
List the permissions that can be granted to an application, optionally for one application type. Basis Theory: GET /permissions.
application_typeList roles
List the roles available for tenant members. Basis Theory: GET /roles.
Takes no parameters.
Get the tenant
Fetch the current tenant — name, id and settings. Basis Theory: GET /tenants/self.
Takes no parameters.
Get the tenant usage report
Fetch the tenant's usage report — token counts by type and container, and monthly API call volume. Basis Theory: GET /tenants/self/reports/usage.
Takes no parameters.
List tenant members
List the people with access to the tenant, and their roles. Basis Theory: GET /tenants/self/members.
pagesize100% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
io.usefulapiOfficial publisher
Hosted MCP server for Ably that lets an assistant inspect realtime channels, presence and usage stats, publish messages, and review app configuration.
io.usefulapiOfficial publisher
Read-only access to ROLLER venue data: search bookings, check product availability, and look up guests, waivers, gift cards and daily reports.
io.usefulapiOfficial publisher
Hosted Planerio connector that lets an assistant read shifts, staffing requirements, staff, employees, absences and vacation days.
io.usefulapiOfficial publisher
Read-only access to Marmin UAE e-invoicing data: invoices, credit notes, UBL XML, Peppol status and business profiles.
io.usefulapiOfficial publisher
Remote MCP server for Oyster that lets an assistant read team, time off, expense, contract and invoice data and approve or decline requests.
{ "mcpServers": { "basis-theory": { "url": "https://basis-theory.usefulapi.io/mcp" } }}