Back to the catalog

Vanta

The Vanta plugin connects Claude to Vanta's security and compliance platform through the Vanta MCP server. List failing compliance tests, ge

Open source Repository Open in the app JSON README (API)

About

The Vanta plugin connects Claude to Vanta's security and compliance platform through the Vanta MCP server. List failing compliance tests, get test-specific remediation context, and fix failing tests with code changes — directly from your Claude session.

Details

Kind
Plugins
Topic
Security & identity
Publisher
vantainc
Origin
marketplace
Category
ferramentas
Stars
4
Last push
2026-05-13T14:06:23Z
Repository state
ativo
License
MIT
Added
2026-08-30 01:48:58
Updated
2026-09-12 04:04:13
Origin id
vantainc/vanta-mcp-plugin/vanta-mcp-plugin

README

# Vanta Plugin for Claude Code

This repository provides an official Claude Code plugin that connects Claude to the **[Vanta MCP Server](https://help.vanta.com/en/articles/14094979-connecting-to-vanta-mcp)**, giving you access to Vanta's security and compliance tools directly inside your Claude Code sessions.

> [!NOTE]  
> Vanta’s remote MCP server is currently in beta and released to all customers. Before connecting, confirm the following:
> 
> **Vanta role**: You must be a Vanta Admin. The MCP server is not currently accessible to non-Admin users. Access for non-admin users is coming soon. 

---

## Features

### Vanta MCP Server

Claude Code automatically connects to Vanta's hosted MCP server for your region:

```bash
# US
https://mcp.vanta.com/mcp

# EU
https://mcp.eu.vanta.com/mcp

# Aus
https://mcp.aus.vanta.com/mcp
```

This gives Claude tools to:

- **Remediate failing tests** — list failing compliance tests, inspect which entities are out of scope, and get the context needed to fix them
- **Manage controls** — browse controls and their framework mappings, list associated tests, and access linked evidence documents
- **Assess vendor risk** — review vendors, run security assessments, manage risk attributes, and track compliance documentation
- **Track vulnerabilities** — surface vulnerable assets, and monitor remediation progress
- **Govern policies** — list, download, and upload policy documents across your compliance program
- **Analyze compliance gaps** — enumerate framework requirements and identify coverage gaps across SOC 2, ISO 27001, and more

### Slash Commands

| Command                            | Description                                                       |
| ---------------------------------- | ----------------------------------------------------------------- |
| `/vanta:fix-test <test-id or URL>` | Fix a failing test by generating IaC changes and opening a PR     |
| `/vanta:list-tests`                | Show failing tests prioritized by what you can fix from this repo |

---

## Installation (Claude Code)

### 1. Update the official marketplace

```
/plugin marketplace update anthropics/claude-plugins-official
```

This ensures you have the latest plugin listings from the official Claude Code marketplace.

### 2. Install the plugin

```
/plugin install vanta-mcp-plugin@claude-plugins-official
```

### 3. Reload plugins

```
/reload-plugins
```

This loads the plugin and starts the MCP server without restarting Claude Code.

### 4. Authenticate

In Claude Code, run `/mcp` and select **vanta-\*** for your region. A browser window will open in your Vanta app — click **Allow** to complete OAuth authorization.

## Manual Setup

For detailed setup instructions across Claude Code, Cursor, and Perplexity, see the [Connecting to Vanta MCP](https://help.vanta.com/en/articles/14094979-connecting-to-vanta-mcp#h_887ce3f337) guide.

## Authentication

All integrations use **OAuth** against the MCP server. No API keys or tokens to manage.

## Resources

- [Connecting to Vanta MCP](https://help.vanta.com/en/articles/14094979-connecting-to-vanta-mcp#h_887ce3f337) — setup guide for Claude Code, Cursor, and Perplexity
- [Vanta documentation](https://docs.vanta.com)
- [Report an issue](https://github.com/VantaInc/vanta-mcp-plugin/issues)

## License

This project is licensed under the terms of the MIT open source license. Please refer to [LICENSE](LICENSE) file for details.

More