Read token metadata, applications, audit logs, proxies and usage in the PCI vault. Hosted by usefulapi: connect it to Claude, ChatGPT, Cursor or any MCP client.
Turn on the Basis Theory connector, then ask in plain words. The AI picks the tools.
For security and compliance engineers who keep card data in a Basis Theory vault.
The AI reads audit-log entries: who did what to which entity and when. It can narrow them by entity type and give you a short list of changes.
The AI searches token metadata, for example metadata.customer_id, and lists each token's id, type, container and fingerprint. Only metadata comes back.
The AI reads the tenant usage report: token counts by type and container, and monthly API call volume. You get a short summary of how the vault is used.
The AI lists tenant members with their roles, and applications with their types and permissions. It points out who can do what.
The AI lists proxies with their destination URL and transform configuration, and lists reactors with their configuration.
The login page asks for your Basis Theory API key.
Create a READ-ONLY management key in the Basis Theory portal → Applications. Your token is used only to call the API on your behalf and to derive a private account id; it is never shown to anyone.
Team and Enterprise: an Owner adds the connector for the organization first.
No Add custom MCP server option? It depends on your account or workspace settings: see OpenAI's guide.
Run this command, then run /mcp in Claude Code to log in:
Add to Cursor or add this to ~/.cursor/mcp.json:
{
"mcpServers": {
"basis-theory": {
"url": "https://basis-theory.usefulapi.io/mcp"
}
}
} Add to VS Code or add this to .vscode/mcp.json:
{
"servers": {
"basis-theory": {
"type": "http",
"url": "https://basis-theory.usefulapi.io/mcp"
}
}
} Run these commands. The second one opens the login page:
Windsurf, Cline, Zed and other MCP clients: add this URL as a remote MCP server (Streamable HTTP). The client then opens the login page in your browser.
Add only the URL. Do not add an Authorization header or an API key to the client config. The server signs you in with OAuth: the login page asks for your Basis Theory API key. If the config has such a header, remove it: some clients then send that header instead of the login token, and every call fails with 401.
| Plan | Price | Limit |
|---|---|---|
| Free | $0 | 50 tool calls / month |
| Pro | $9/mo · $90/yr | 10,000 tool calls / month |
| Pro+ | $39/mo · $390/yr | 100,000 tool calls / month |
Each paid plan covers this Basis Theory server only. Ask your AI to run basis_theory_upgrade and choose Pro or Pro+, billed monthly or yearly (it returns a Stripe Checkout link). If you already have Pro, ask to change it to Pro+. The change requires your confirmation, keeps your billing interval and charges the price difference for the rest of the period immediately. Cancel any time with basis_theory_cancel_subscription: your paid plan continues to the end of the paid period, with no refund for the current period, and asking to resume the same plan with basis_theory_upgrade before then undoes the cancel. Or write to [email protected].
basis_theory_list_tokensbasis_theory_search_tokensbasis_theory_get_tokenbasis_theory_list_applicationsbasis_theory_get_applicationbasis_theory_whoamibasis_theory_list_logsbasis_theory_list_log_entity_typesbasis_theory_list_proxiesbasis_theory_get_proxybasis_theory_list_reactorsbasis_theory_get_reactorbasis_theory_list_permissionsbasis_theory_list_rolesbasis_theory_get_tenantbasis_theory_get_tenant_usagebasis_theory_list_tenant_membersbasis_theory_usage_statusbasis_theory_request_featurebasis_theory_upgradebasis_theory_cancel_subscriptionFind out who changed things in the vault. Find the tokens that belong to a customer. Check token counts and API usage. Review who has access to the account. Check the proxies and reactors you run. See what you can do for the details.
No. usefulapi is an independent service. It is not affiliated with or endorsed by Basis Theory. The server calls the Basis Theory API with your own Basis Theory access, so it sees only the data that your account can see.
Yes. In Claude, add this server's URL as a custom connector. In ChatGPT, add it as a custom MCP server in Plugins. Then log in once. Cursor, VS Code, Claude Code and Codex work too. See the setup steps.
The login page asks for your Basis Theory API key. See Before you connect for where to find it.
No. Add only the URL. Do not add an Authorization header or an API key to the client config. The server signs you in with OAuth: the login page asks for your Basis Theory API key. If the config has such a header, remove it: some clients then send that header instead of the login token, and every call fails with 401.
The login stores them encrypted in the authorization grant of your connection. The server uses them to call the Basis Theory API for you and to derive a private account id for usage metering. usefulapi does not show them on any page or in any reply. To stop all access, remove the connector and change or delete these credentials in Basis Theory.
All 17 Basis Theory tools are marked read-only.
The Free plan gives 50 tool calls / month. Pro costs $9/mo or $90/yr, with 10,000 tool calls / month. Pro+ costs $39/mo or $390/yr, with 100,000 tool calls / month. Each subscription covers this Basis Theory server only. Cancel any time: your paid plan then runs to the end of the paid period. Run basis_theory_usage_status to see how many calls you used.
Ask the AI to run basis_theory_upgrade and choose Pro or Pro+, billed monthly or yearly: it returns a Stripe Checkout link. If you already have Pro, ask to change it to Pro+. After you confirm, your existing subscription changes in place, keeps its billing interval and charges the price difference for the rest of the period immediately. To cancel, run basis_theory_cancel_subscription. Your paid plan continues to the end of the paid period.
Tell the AI what you wanted to do. It can send the request with basis_theory_request_feature. We store the text with the server name, the type of AI client and the tool you tried, not with your account, and read every request when we plan new tools. You can send up to 5 requests per day.
Any client that supports remote MCP servers (Streamable HTTP) with OAuth login: Claude (web and desktop), Claude Code, ChatGPT, Codex, Cursor, VS Code, Windsurf and others.
This is a Model Context Protocol endpoint — meant to be connected from an AI client, not opened in a browser. An invalid_token response at the URL is the auth gate working as designed; clients authenticate automatically.
Need a tool this server does not have, or a connection to another system? We build custom integrations and MCP servers.