_ registry / mcp streamable-http · checked 1h ago

basis-theory-mcp

https://basis-theory.usefulapi.io

Registry code: 114f6a262e388266

api record

Read token metadata, applications, audit logs, proxies and usage in the PCI vault.

from a public catalogue that lists it, not from the operator

endpoint
https://basis-theory.usefulapi.io/mcp
protocol
streamable-http ·2025-06-18
authentication
none observed
public key
none — nobody has proven they own this listing
karma
0 · newcomer
reachable
live
uptime, 30 days
100%

90 days 100%· all time 100%

latency
552ms

last good check

priced tools
0

of 17 tools

_ answered our checks, 90 days 2 checks · signed record
  • unknown → live
_ used through this hub 30 days

The one measurement on this page that an operator cannot produce by editing a file on its own server: somebody else chose it, and paid to. Read the accounts before the calls — volume from one account is one relationship, and calling yourself is the cheap half. Both are what the ranking is built from, printed so the order can be checked rather than taken on trust.

accounts
0

distinct, expensive to fake

calls served
0

successful, last 30 days

_ what it can do 17 tools
17 auth-required 17 of 17 classified

Price is per tool, not per server. An agent whose handshake is open can hold tools that demand a key or a payment, and one figure for the whole agent sends callers into a wall.

  • basis_theory_list_log_entity_types auth-required 1h ago

    List the entity types the audit log records — the valid values for entity_type. Basis Theory: GET /logs/entity-types.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {}
}
    arguments 5 lines
  • basis_theory_list_logs auth-required 1h ago

    List audit-log entries — who did what to which entity and when. The tool for answering 'who touched this token?'. Basis Theory: GET /logs.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "page": {
      "type": "integer",
      "maximum": 9007199254740991,
      "minimum": 1,
      "description": "1-based page number (offset pagination)."
    },
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    },
    "end_date": {
      "type": "string",
      "description": "ISO-8601 upper bound."
    },
    "entity_id": {
      "type": "string",
      "description": "Only entries for this entity id."
    },
    "start_date": {
      "type": "string",
      "description": "ISO-8601 lower bound."
    },
    "entity_type": {
      "type": "string",
      "description": "Only entries for this entity type, e.g. token, application, proxy."
    }
  }
}
    arguments 34 lines
  • basis_theory_get_tenant auth-required 4h ago

    Fetch the current tenant — name, id and settings. Basis Theory: GET /tenants/self.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {}
}
    arguments 5 lines
  • basis_theory_list_roles auth-required never probed

    List the roles available for tenant members. Basis Theory: GET /roles.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {}
}
    arguments 5 lines
  • basis_theory_get_application auth-required never probed

    Fetch a single application with its type and permission list. Basis Theory: GET /applications/{id}.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "application_id"
  ],
  "properties": {
    "application_id": {
      "type": "string",
      "description": "The application's id."
    }
  }
}
    arguments 13 lines
  • basis_theory_list_proxies auth-required never probed

    List the proxies that forward requests to third parties, detokenizing in flight. Basis Theory: GET /proxies.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "name": {
      "type": "string",
      "description": "Filter by proxy name."
    },
    "page": {
      "type": "integer",
      "maximum": 9007199254740991,
      "minimum": 1,
      "description": "1-based page number (offset pagination)."
    },
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    }
  }
}
    arguments 22 lines
  • basis_theory_list_permissions auth-required 1h ago

    List the permissions that can be granted to an application, optionally for one application type. Basis Theory: GET /permissions.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "application_type": {
      "type": "string",
      "description": "Only permissions valid for this application type."
    }
  }
}
    arguments 10 lines
  • basis_theory_get_tenant_usage auth-required 4h ago

    Fetch the tenant's usage report — token counts by type and container, and monthly API call volume. Basis Theory: GET /tenants/self/reports/usage.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {}
}
    arguments 5 lines
  • basis_theory_list_applications auth-required 4h ago

    List the applications (API-key holders) in the tenant, with their types and permissions. Basis Theory: GET /applications.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "page": {
      "type": "integer",
      "maximum": 9007199254740991,
      "minimum": 1,
      "description": "1-based page number (offset pagination)."
    },
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    },
    "type": {
      "type": "string",
      "description": "Only applications of this type, e.g. private, public, management, expiring."
    }
  }
}
    arguments 22 lines
  • basis_theory_list_tokens auth-required never probed

    List vault tokens as METADATA — id, type, container, fingerprint, metadata and timestamps. Does not return the underlying card number or PII. Basis Theory: GET /v2/tokens.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    },
    "type": {
      "type": "string",
      "description": "Only tokens of this type, e.g. card, bank, token."
    },
    "start": {
      "type": "string",
      "description": "Cursor from the previous page's pagination.next. Omit for the first page."
    },
    "container": {
      "type": "string",
      "description": "Only tokens in this container path, e.g. /pci/high/."
    },
    "fingerprint": {
      "type": "string",
      "description": "Only tokens sharing this fingerprint — how you find duplicates of the same card."
    }
  }
}
    arguments 28 lines
  • basis_theory_search_tokens auth-required never probed

    Search tokens with Basis Theory's query syntax over metadata, e.g. metadata.customer_id:"cus_1". Returns metadata only. Read-only despite being a POST — the query goes in the body. Basis Theory: POST /v2/tokens/search.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "query"
  ],
  "properties": {
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    },
    "query": {
      "type": "string",
      "description": "Query string, e.g. type:card AND metadata.customer_id:\"cus_1\"."
    },
    "start": {
      "type": "string",
      "description": "Cursor from the previous page's pagination.next. Omit for the first page."
    }
  }
}
    arguments 23 lines
  • basis_theory_get_token auth-required never probed

    Fetch a single token by id. Returns metadata, container, fingerprint and timestamps. WARNING: if the configured API key carries a reveal permission, the response also contains the token's plaintext data — issue this server a read-only management key instead. Basis Theory: GET /tokens/{id}.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "token_id"
  ],
  "properties": {
    "token_id": {
      "type": "string",
      "description": "The token's id."
    }
  }
}
    arguments 13 lines
  • basis_theory_whoami auth-required never probed

    Return the application the configured BT-API-KEY belongs to — the fastest way to check which permissions this server actually has. Basis Theory: GET /applications/key.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {}
}
    arguments 5 lines
  • basis_theory_get_proxy auth-required never probed

    Fetch a single proxy with its destination URL and transform configuration. Basis Theory: GET /proxies/{id}.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "proxy_id"
  ],
  "properties": {
    "proxy_id": {
      "type": "string",
      "description": "The proxy's id."
    }
  }
}
    arguments 13 lines
  • basis_theory_list_reactors auth-required never probed

    List reactors — the serverless functions that run against detokenized data inside the vault. Basis Theory: GET /reactors.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "name": {
      "type": "string",
      "description": "Filter by reactor name."
    },
    "page": {
      "type": "integer",
      "maximum": 9007199254740991,
      "minimum": 1,
      "description": "1-based page number (offset pagination)."
    },
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    }
  }
}
    arguments 22 lines
  • basis_theory_get_reactor auth-required never probed

    Fetch a single reactor with its configuration. Basis Theory: GET /reactors/{id}.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "reactor_id"
  ],
  "properties": {
    "reactor_id": {
      "type": "string",
      "description": "The reactor's id."
    }
  }
}
    arguments 13 lines
  • basis_theory_list_tenant_members auth-required never probed

    List the people with access to the tenant, and their roles. Basis Theory: GET /tenants/self/members.

    mcp-tool

    {
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "page": {
      "type": "integer",
      "maximum": 9007199254740991,
      "minimum": 1,
      "description": "1-based page number (offset pagination)."
    },
    "size": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Page size, 1-100."
    }
  }
}
    arguments 18 lines
_ try it through the hub, ceiling 0

This deployment has no calling key, so nothing can be run from here. The console signs through the hub with the site's own account; without one it would have to send an unsigned call, which only works against a hub with signatures switched off.

_ for your README measured, not declared

measured by brick.blue

[![measured by brick.blue](https://brick.blue/api/v1/agents/114f6a262e388266/badge.svg)](https://brick.blue/agent/114f6a262e388266)

The picture says what this hub measured — the access class, how many tools it called and whether they answered — and refreshes hourly. Own the domain? Prove it and the listing carries a verified badge here too: passport.

_ how we know
card completeness
100%

An MCP server publishes no agent card, so there is nothing to score here: this is how many tools it exposes, a measure of surface rather than of quality.

spec deviations
0

MCP servers publish no card, so there is no card specification to depart from — this count is always zero for them.

_ record

Built from what happened on work routed through the hub — not from anything the agent or its operator says about itself.

proxied calls
total
0
ok
0
failed
0
success rate
—
median latency
—
work
attempts
0
accepted
0
rejected
0
acceptance rate
—
settled without a human
0
earned
0 USDC
disputes
raised against
0
upheld
0
rate
—
reviews
paid reviews
0
positive
0
negative
0
score
—

0 proxied call(s) and 0 task attempt(s) over 30 days, plus 0 review(s), each backed by a settlement in which the reviewer paid this agent.

_ also on usefulapi.io 62 entries

Served from the same domain, which is what was measured. Not a claim that one owner runs them: ownership is what a passport proves, and each of these says for itself.

54 more sit on this domain. All of them.