@vantasdk/vanta-mcp-server weekly downloads statistics

Vanta MCP Server

A Model Context Protocol server that provides access to Vanta's automated security compliance platform. Vanta helps organizations achieve and maintain compliance with security frameworks like SOC 2, ISO 27001, HIPAA, GDPR, and others through automated monitoring, evidence collection, and continuous security testing. This MCP server enables AI assistants to interact with Vanta's API to retrieve compliance test results, manage security findings, and access framework requirements.

⚠️ Important Disclaimer: This experimental server is currently in public preview and provides AI assistants with access to your Vanta compliance data. You may encounter bugs, errors or unexpected results. Always verify the accuracy and appropriateness of AI-generated responses before taking any compliance or security actions. Users are responsible for reviewing all outputs and ensuring they meet their organization's security and compliance requirements.

Features

Controls

• List security controls or fetch a specific control by ID • Discover which automated tests validate each control • Review evidence documents mapped to controls

| Tool Name | Description |

| controls | Access security controls in your Vanta account. Provide controlId to get a specific control, or omit to list all controls with optional framework filtering. | | list_control_tests | Enumerate automated tests that validate a specific security control, including status and failing entity details. | | list_control_documents | List documents that provide evidence for a specific security control so you can quickly locate supporting artifacts. |

Documents

• Enumerate compliance documents across your organization • Inspect the controls, links, or uploads associated with a document

| Tool Name | Description |

| documents | List documents in your Vanta account or retrieve a specific document by ID with metadata for compliance and evidence management. | | document_resources | Retrieve resources linked to a document (controls, links, uploads) by specifying the desired resource type. |

Frameworks

• Review framework adoption and progress metrics across your organization • Drill into the controls required by each framework

| Tool Name | Description |

| frameworks | List compliance frameworks available in your Vanta account along with completion status and progress metrics. | | list_framework_controls | Retrieve the controls associated with a framework, including descriptions, implementation guidance, and current compliance status. |

Integrations

• Enumerate connected integrations and review their metadata • Explore supported resource kinds and fetch integration resources on demand

| Tool Name | Description |

| integrations | List integrations connected to your Vanta account or fetch details for a specific integration, including supported resource kinds and connection status. | | integration_resources | Access integration resources by selecting the desired operation (list_kinds, get_kind_details, list_resources, or get_resource). |

People

• List or retrieve people for compliance and access reviews

| Tool Name | Description |

| people | List people in your Vanta account or retrieve a specific person by ID, including role, email, and group membership metadata. |

Risks

• Track risk scenarios, their status, scoring, and treatment plans

| Tool Name | Description |

| risks | List risk scenarios managed in your risk register or fetch a specific scenario by ID to review status, scoring, and treatment information. |

Tests

• Monitor automated security tests running in your environment • Investigate the entities associated with a specific test

| Tool Name | Description |

| tests | Retrieve Vanta's automated security and compliance tests. Filter by status, integration, or framework to understand which controls are passing or failing. | | list_test_entities | Get the resources monitored by a specific security test, including failing entities that require remediation. |

Vulnerabilities

• Review vulnerabilities surfaced by Vanta, including CVE metadata and affected assets

| Tool Name | Description |

| vulnerabilities | List vulnerabilities detected across your infrastructure or retrieve a specific vulnerability by ID with CVE details, severity, and impacted asset information. |

Tools

| Tool Name | Description |…

Description from the npm listing.