Skip to content
Agentmart
Submit a tool

Vanta

Vanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs

Connector by mindstone · GitHub account verified by the MCP Registry

IndexedLicense unknownLocal (stdio)★ 13
Write a review

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/mindstone-mcp-server-vanta

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Vanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
19 read · 3 write · 3 delete
Secrets
1 (API keys, tokens or passwords)
Install scripts
Not scanned yet
Runs as
Node.js package

Tools by what they do 25

Read from the source code; the running server may list different tools.

Read 19 · Look things up without changing anything.

  • vanta_get_compliance_summary
  • vanta_get_control
  • vanta_get_framework
  • vanta_get_policy
  • vanta_get_risk_scenario
  • vanta_get_test
  • vanta_get_vendor
  • vanta_get_vulnerability
  • vanta_list_controls
  • vanta_list_event_logs
  • vanta_list_frameworks
  • vanta_list_integrations
Show 7 more tools
  • vanta_list_people
  • vanta_list_policies
  • vanta_list_risk_scenarios
  • vanta_list_tests
  • vanta_list_vendors
  • vanta_list_vulnerabilities
  • vanta_query_test_results

Write 3 · Create, change, send or run things.

  • vanta_attach_vendor_document
  • vanta_create_vendor
  • vanta_upload_document

Delete 3 · Delete, drop, revoke or wipe things.

  • vanta_deactivate_vulnerability_monitoring
  • vanta_reactivate_vulnerability_monitoring
  • vanta_update_vendor

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • VANTA_CLIENT_SECRET

Other settings (environment variables or headers).

  • VANTA_CLIENT_ID
  • VANTA_REGION
  • VANTA_REQUEST_TIMEOUT_MS

Files it touches

  • Any path the agent passes to its tools

Tools (25)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • vanta_attach_vendor_documentAttach Document to Vanta Vendor

    Attach a compliance document (SOC 2 report, DPA, pen test, questionnaire) to an existing vendor in Vanta. HOW IT WORKS: - Pass a public https:// URL. The connector downloads the file and forwards the bytes to Vanta as a multipart upload. - document_type is required; Vanta rejects the upload without it. - Vanta accepts .pdf, .docx, .jpg, .png, and .xlsx files. RELATED TOOLS: - vanta_list_vendors to find the vendor_id. RETURNS: - JSON with ok, document, file_name, content_type, and size_bytes.

  • vanta_create_vendorCreate Vanta Vendor

    Create a new vendor in Vanta.

  • vanta_deactivate_vulnerability_monitoringDeactivate Vanta Vulnerability Monitoringcan change or delete data

    Deactivate monitoring for select vulnerabilities. Vanta will not monitor a deactivated vulnerability until it is reactivated.

  • vanta_get_compliance_summaryGet Vanta Compliance Summaryread-only

    Get an aggregate compliance summary from Vanta framework counters.

  • vanta_get_controlGet Vanta Controlread-only

    Get details for one Vanta control by ID.

  • vanta_get_frameworkGet Vanta Frameworkread-only

    Get details for one Vanta framework by ID, including requirement categories and mapped controls.

  • vanta_get_policyGet Vanta Policyread-only

    Get details for one Vanta policy by ID, including its latest version status and approved document links.

  • vanta_get_risk_scenarioGet Vanta Risk Scenarioread-only

    Get details for one Vanta risk scenario by risk ID, including scores, treatment, and review status.

  • vanta_get_testGet Vanta Testread-only

    Get details for one Vanta compliance test by ID.

  • vanta_get_vendorGet Vanta Vendorread-only

    Get details for one Vanta vendor by ID.

  • vanta_get_vulnerabilityGet Vanta Vulnerabilityread-only

    Get details for one Vanta vulnerability by ID.

  • vanta_list_controlsList Vanta Controlsread-only

    List Vanta controls with an optional framework filter.

  • vanta_list_event_logsList Vanta Event Logsread-only

    List audit event logs from the Vanta account (actor, action, targets, date) with an optional start-date filter.

  • vanta_list_frameworksList Vanta Frameworksread-only

    List available compliance frameworks in Vanta with per-framework control, document, and test counters.

  • vanta_list_integrationsList Vanta Integrationsread-only

    List integrations connected to Vanta with per-connection health (disabled flag and connection error message).

Show 10 more tools
  • vanta_list_peopleList Vanta Peopleread-only

    List people tracked in Vanta with optional name/email and employment-status filters.

  • vanta_list_policiesList Vanta Policiesread-only

    List policies in Vanta with their approval/review status — e.g. which policies are out of review.

  • vanta_list_risk_scenariosList Vanta Risk Scenariosread-only

    List risk scenarios from the Vanta risk register with optional search and include-ignored filters.

  • vanta_list_testsList Vanta Testsread-only

    List compliance tests from Vanta with optional status and framework filters.

  • vanta_list_vendorsList Vanta Vendorsread-only

    List vendors tracked in Vanta with optional name and status filters.

  • vanta_list_vulnerabilitiesList Vanta Vulnerabilitiesread-only

    List vulnerabilities from Vanta with optional severity, integration, and deactivation filters. WORKFLOW: - Start here to review open vulnerability posture. - Use page_size and page_cursor for pagination. RELATED TOOLS: - vanta_get_vulnerability for full details on one vulnerability. RETURNS: - JSON with ok, vulnerabilities, count, and pageInfo.

  • vanta_query_test_resultsQuery Vanta Test Resultsread-only

    List test entities/results for one Vanta test with an optional entity-status filter.

  • vanta_reactivate_vulnerability_monitoringReactivate Vanta Vulnerability Monitoringcan change or delete data

    Reactivate vulnerabilities and resume Vanta monitoring.

  • vanta_update_vendorUpdate Vanta Vendorcan change or delete data

    Update an existing vendor in Vanta.

  • vanta_upload_documentUpload Vanta Evidence Document

    Attach an evidence file to an existing Vanta document. HOW IT WORKS: - document_id must be an existing Vanta document (from the Vanta Documents page); this tool does not create documents. - Pass a public https:// URL. The connector downloads the file and forwards the bytes to Vanta as a multipart upload. - Vanta files the upload as a DRAFT: the document must be submitted for review in Vanta before auditors can see it. The response says so via submission_required. RETURNS: - JSON with ok, upload, file_name, content_type, size_bytes, and submission_required.

Signals

Stars
13
Forks
4
Open issues
1
Weekly downloads
18
Last commit (this folder)
Aug 9, 2026 (2 months ago)
Last release
Aug 9, 2026 (2 months ago)
Last package publish
Aug 9, 2026 (2 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name
io.github.mindstone/mcp-server-vanta
Version
0.3.1
Auth
API key
License
License unknown
First seen
Oct 24, 2026
Last checked
Oct 24, 2026

More from mindstone

Cite this page

Vanta MCP server. Agent Mart. https://agentmart.dev/connectors/mindstone-mcp-server-vanta (last updated 2026-10-24)