A Model Context Protocol server that provides access to Vanta's automated security compliance platform. Vanta helps organizations achieve and maintain compliance with security frameworks like SOC 2, ISO 27001, HIPAA, GDPR, and others through automated monitoring, evidence collection, and continuous security testing. This MCP server enables AI assistants to interact with Vanta's API to retrieve compliance test results, manage security findings, access framework requirements, and handle compliance documentation.

⚠️ Important Disclaimer: This server provides AI assistants with access to your Vanta compliance data. Always verify the accuracy and appropriateness of AI-generated responses before taking any compliance or security actions. Users are responsible for reviewing all outputs and ensuring they meet their organization's security and compliance requirements.

• Access Vanta's 1,200+ automated security tests that run continuously to monitor compliance
• Retrieve test results with filtering by status (passing/failing), cloud provider (AWS/Azure/GCP), or compliance framework
• Get detailed information about failing resources (test entities) that need remediation
• Temporarily deactivate specific test entities during planned maintenance or remediation work

• Access 35+ supported compliance frameworks including SOC 2, ISO 27001, HIPAA, GDPR, FedRAMP, and PCI
• Retrieve detailed control requirements and evidence mappings for each framework
• Monitor framework completion progress and compliance status
• Get specific control details that map to automated tests and required documentation

• Upload compliance documentation and evidence files required for audits

• US, EU, and AUS regions with region-specific API endpoints
• Global compliance support for distributed organizations

1. Create OAuth credentials from the developer dashboard
2. Save the client_id and client_secret to a env file:

   {
     "client_id": "your_client_id_here",
     "client_secret": "your_client_secret_here"
   }

Note: Vanta currently only allows a single active access_token per Application today. More info here

Add the server to your claude_desktop_config.json:

{
  "mcpServers": {
    "vanta": {
      "command": "npx",
      "args": ["-y", "@vanta/vanta-mcp-server"],
      "env": {
        "VANTA_ENV_FILE": "/absolute/path/to/your/vanta-credentials.env"
      }
    }
  }
}

Add the server to your Cursor MCP settings:

{
  "mcpServers": {
    "Vanta": {
      "command": "npx",
      "args": ["-y", "@vanta/vanta-mcp-server"],
      "env": {
        "VANTA_ENV_FILE": "/absolute/path/to/your/vanta-credentials.json"
      }
    }
  }
}

• VANTA_ENV_FILE (required): Absolute path to JSON file containing OAuth credentials
• REGION (optional): API region - us, eu, or aus (defaults to us)

npx vanta-mcp-server

npm install -g vanta-mcp-server
vanta-mcp-server

git clone https://github.com/VantaInc/vanta-mcp-server.git
cd vanta-mcp-server
npm install
npm run build
npm start

To build from source:

npm run build

This will:

1. Compile TypeScript to JavaScript
2. Make the output executable
3. Place built files in the build/ directory

You can use the MCP Inspector to debug the server:

npx @modelcontextprotocol/inspector npx vanta-mcp-server

The inspector will open in your browser, allowing you to test tool calls and inspect the server's behavior.

{
  "tool": "get_tests",
  "arguments": {
    "statusFilter": "NEEDS_ATTENTION",
    "integrationFilter": "aws",
    "frameworkFilter": "soc2",
    "pageSize": 50
  }
}

{
  "tool": "deactivate_test_entity",
  "arguments": {
    "testId": "aws-security-groups-open-to-world",
    "entityId": "sg-12345678",
    "deactivateReason": "Scheduled maintenance",
    "deactivateUntil": "2024-02-15T10:00:00Z"
  }
}

This project is licensed under the terms of the MIT open source license. Please refer to LICENSE file for details.