# Basis Theory

**Canonical:** https://apis.io/providers/basis-theory/  
**Website:** https://basistheory.com/  
**APIs profiled:** 10

Basis Theory is a PCI Level 1 compliant tokenization and data vault platform. Its API-first product lets developers tokenize, store, and use sensitive data - cardholder data, PII, PHI, and bank account numbers - without that data ever touching their own systems, using tokens, a detokenizing Proxy, serverless Reactors, and 3D Secure authentication.

## Kin Score — 54.1 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 54.1).

| Facet | Score |
|---|---|
| Discoverability | 81.5 |
| Contract Quality | 58.3 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 44.7 |
| Developer Ergonomics | 31.0 |
| Commercial Clarity | 92.1 |
| Access Clarity | 92.1 |

Regulatory layer — **Payments**: 39.1 (matched via tags).

## Agent readiness — 29.1 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (10)

- **Basis Theory 3D Secure API** — Create and authenticate 3D Secure sessions.
- **Basis Theory Applications API** — Manage API credentials, permissions, and access rules.
- **Basis Theory Logs API** — List audit logs of platform activity.
- **Basis Theory Proxy API** — Manage pre-configured proxies and invoke the detokenizing Proxy.
- **Basis Theory Reactors API** — Manage and invoke serverless Reactor functions.
- **Basis Theory Tenants API** — Manage the current tenant, usage reports, and security contact.
- **Basis Theory Token Intents API** — Short-lived intents that capture data before conversion to a token.
- **Basis Theory Tokenize / Detokenize API** — Batch tokenization and detokenization.
- **Basis Theory Tokens API** — Create, retrieve, search, update, and delete tokens.
- **Basis Theory Webhooks API** — Register webhook URLs and subscribe to event types.

## Agentic access (1)

- **Basis Theory Agentic Access** — 49 operations · 30 acting

## Security (3)

- **Basis Theory Authentication** — apiKey · 1 scheme
- **Basis Theory Domain Security** — TLSv1.3 · HSTS · DMARC
- **Basis Theory Trust Center** — SOC 2, ISO 27001, PCI DSS

## Plans (1)

- **Basis Theory Plans Pricing**

## Tags

Tokenization, Data Vault, PCI Compliance, Payments, Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/basis-theory/). Scores are computed from the provider's own public artifacts under a published rubric.