Vanta MCP server

Read from the package source without running it. The installed server may list more.

• vanta_attach_vendor_document

  Attach a compliance document (SOC 2 report, DPA, pen test, questionnaire) to an existing vendor in Vanta. HOW IT WORKS: - Pass a public https:// URL. The connector downloads the file and forwards the bytes to Vanta as a multipart upload. - document_type is required; Vanta rejects the upload without it. - Vanta accepts .pdf, .docx, .jpg, .png, and .xlsx files. RELATED TOOLS: - vanta_list_vendors to

• vanta_create_vendorwrite action

  Create a new vendor in Vanta.

• vanta_deactivate_vulnerability_monitoring

  Deactivate monitoring for select vulnerabilities. Vanta will not monitor a deactivated vulnerability until it is reactivated.

• vanta_get_compliance_summary

  Get an aggregate compliance summary from Vanta framework counters.

• vanta_get_control

  Get details for one Vanta control by ID.

• vanta_get_framework

  Get details for one Vanta framework by ID, including requirement categories and mapped controls.

• vanta_get_policy

  Get details for one Vanta policy by ID, including its latest version status and approved document links.

• vanta_get_risk_scenario

  Get details for one Vanta risk scenario by risk ID, including scores, treatment, and review status.

• vanta_get_test

  Get details for one Vanta compliance test by ID.

• vanta_get_vendor

  Get details for one Vanta vendor by ID.

• vanta_get_vulnerability

  Get details for one Vanta vulnerability by ID.

• vanta_list_controls

  List Vanta controls with an optional framework filter.

• vanta_list_event_logs

  List audit event logs from the Vanta account (actor, action, targets, date) with an optional start-date filter.

• vanta_list_frameworks

  List available compliance frameworks in Vanta with per-framework control, document, and test counters.

• vanta_list_integrations

  List integrations connected to Vanta with per-connection health (disabled flag and connection error message).

• vanta_list_people

  List people tracked in Vanta with optional name/email and employment-status filters.

• vanta_list_policies

  List policies in Vanta with their approval/review status — e.g. which policies are out of review.

• vanta_list_risk_scenarios

  List risk scenarios from the Vanta risk register with optional search and include-ignored filters.

• vanta_list_tests

  List compliance tests from Vanta with optional status and framework filters.

• vanta_list_vendors

  List vendors tracked in Vanta with optional name and status filters.

• vanta_list_vulnerabilities

  List vulnerabilities from Vanta with optional severity, integration, and deactivation filters. WORKFLOW: - Start here to review open vulnerability posture. - Use page_size and page_cursor for pagination. RELATED TOOLS: - vanta_get_vulnerability for full details on one vulnerability. RETURNS: - JSON with ok, vulnerabilities, count, and pageInfo.

• vanta_query_test_results

  List test entities/results for one Vanta test with an optional entity-status filter.

• vanta_reactivate_vulnerability_monitoring

  Reactivate vulnerabilities and resume Vanta monitoring.

• vanta_update_vendorwrite action

  Update an existing vendor in Vanta.

• vanta_upload_documentwrite action

  Attach an evidence file to an existing Vanta document. HOW IT WORKS: - document_id must be an existing Vanta document (from the Vanta Documents page); this tool does not create documents. - Pass a public https:// URL. The connector downloads the file and forwards the bytes to Vanta as a multipart upload. - Vanta files the upload as a DRAFT: the document must be submitted for review in Vanta before

• Code scan39 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancelast push 0 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Safety score

85/100

higher than 68% of 1,293 Productivity servers

Tools

25

the typical Productivity server has 7

Tools that change things

12%

typical: 0%. Fewer write tools means less an agent can break

GitHub stars

14

more than 80% of 858 Productivity servers

Downloads a week

82

more than 45% of 488 Productivity servers with a package

Vanta: common questions

Is Vanta MCP server safe?

Yes, by our scan: it is graded A (85/100). Read the Vanta safety report

How do I install Vanta?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Vanta need an API key?

Yes. The registry entry asks for VANTA_CLIENT_SECRET.

Is Vanta maintained?

The last commit was 11 days ago (2026-11-04). The latest release is v0.3.1.

What can I use instead of Vanta?

Servers from other publishers that do the same job: Orbit MCP server, Context7 MCP server and Svelte MCP server.

How does Vanta compare with other Productivity MCP servers?

safety score 85/100 (higher than 68% of 1,293 Productivity servers); tools 25 (the typical Productivity server has 7); tools that change things 12% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.