Vanta
listing.by
Query Vanta controls, failing tests, vendors and compliance data, and remediate failing tests from your AI assistant.
listing.connect
listing.explain.oauth
listing.note.oauth
listing.share.h
listing.share.p
mcp.tc/i/vantalisting.about
Vanta's MCP server lets AI assistants call the Vanta API on your behalf. You can query controls, find and remediate failing tests, and work with vendors and other compliance data. The server is in beta.
It runs as a hosted streamable HTTP endpoint with a separate URL per region: https://mcp.vanta.com/mcp (US), https://mcp.eu.vanta.com/mcp (EU) and https://mcp.aus.vanta.com/mcp (Australia). Users sign in with OAuth and must hold the Vanta Admin role. It works with Claude Code, Cursor, Perplexity, Codex and other clients that support remote MCP.
listing.can
- Query Vanta controls
- Find failing tests
- Remediate failing tests
- Look up vendors
- Act on compliance data through the Vanta API
listing.tools
listing.notools.oauth
listing.prompts
List my failing Vanta tests and group them by owner.
Which Vanta controls need attention this week?
Help me fix the failing test for unencrypted storage.
Show the vendors in Vanta and their current status.
listing.setup.h
listing.setup.oauth
Claude Code
- Run this in a terminal, in your project folder:
claude mcp add --transport http vanta https://mcp.vanta.com/mcp- Start Claude Code, type
/mcp, pick vanta and choose Authenticate. A browser window opens for the Vanta sign-in.
Add --scope user to make it available in every project, not just this one.
Claude Desktop
- Open Settings → Connectors and click Add custom connector.
- Name it Vanta and paste this URL:
https://mcp.vanta.com/mcp- Click Add, then Connect, and sign in when Vanta asks.
Claude Desktop's JSON config file only starts local servers. Remote servers go through Connectors, and connectors you add on claude.ai show up here too.
claude.ai
- Open the connector form on claude.ai. This button fills in the name and URL for you:
- Check that the URL reads
https://mcp.vanta.com/mcpand click Add. - Click Connect and sign in when Vanta asks.
Free plans allow one custom connector. On Team and Enterprise plans an owner adds it under Organization settings → Connectors.
ChatGPT
- On chatgpt.com, open Settings → Security and login and turn on Developer mode.
- Go to
chatgpt.com/pluginsand click + to create an app for a remote MCP server. - Paste
https://mcp.vanta.com/mcpas the server URL and choose OAuth. ChatGPT sends you to Vanta to sign in.
Developer mode is available on the web for Plus, Pro, Business, Enterprise and Education accounts.
Cursor
Or add it by hand to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project):
{
"mcpServers": {
"vanta": {
"url": "https://mcp.vanta.com/mcp"
}
}
}Cursor shows Needs login next to the server. Click it to sign in.
VS Code
Install in VS Code a11y.new_tab
Or from a terminal:
code --add-mcp '{"name":"vanta","type":"http","url":"https://mcp.vanta.com/mcp"}'Or commit it to the repo in .vscode/mcp.json:
{
"servers": {
"vanta": {
"type": "http",
"url": "https://mcp.vanta.com/mcp"
}
}
}VS Code asks you to sign in the first time the server starts.
Devin Desktop
- Add it to
~/.config/devin/mcp_config.json(macOS and Linux) or%APPDATA%\devin\mcp_config.json(Windows):
{
"mcpServers": {
"vanta": {
"serverUrl": "https://mcp.vanta.com/mcp"
}
}
}- Refresh the MCP server list in Cascade and sign in when asked.
Devin Desktop is the new name for Windsurf. It reads serverUrl (or url) for remote servers.
Codex
codex mcp add vanta --url https://mcp.vanta.com/mcp
codex mcp login vantaOr edit ~/.codex/config.toml directly:
[mcp_servers.vanta]
url = "https://mcp.vanta.com/mcp"Gemini CLI
gemini mcp add --transport http vanta https://mcp.vanta.com/mcpThen, inside Gemini CLI, run /mcp auth vanta to sign in.
This adds it to the current project. Add -s user to use it everywhere.
Any client
Most clients accept this shape. Some name the URL field differently: serverUrl in Devin Desktop, httpUrl in Gemini CLI's settings file.
{
"mcpServers": {
"vanta": {
"type": "http",
"url": "https://mcp.vanta.com/mcp"
}
}
}Zed puts servers under context_servers in its settings. Cline needs "type": "streamableHttp", or it assumes SSE.
Client only starts local servers? Bridge it with npx -y mcp-remote https://mcp.vanta.com/mcp.
listing.faq
Can I paste mcp.tc/i/vanta into my MCP client?
No. mcp.tc links are pages, not server addresses. Connect with https://mcp.vanta.com/mcp, so your client talks to Vanta directly. The sign-in token only works there anyway. The quick link is for sharing: it opens this page, with setup steps for every client.
Does Vanta need an API key or a sign-in?
Yes, you need a Vanta account. The first time your client connects, it opens Vanta's sign-in page. The token goes straight to the server's own URL, never through mcp.tc.
Is Vanta a remote or a local server?
Remote. Vanta hosts it at https://mcp.vanta.com/mcp, and it speaks Streamable HTTP. There's nothing to install.
What can Vanta do?
You can query Vanta controls, find failing tests and remediate failing tests.
Which clients can use it?
Any client that supports remote MCP servers: Claude Code, Claude Desktop, claude.ai, ChatGPT in developer mode, Cursor, VS Code, Devin Desktop, Codex, Gemini CLI, Zed and others. The setup steps cover each one.
Who wrote this page?
mcp.tc's robot read Vanta's own metadata (its MCP handshake, tool list and public pages), and an AI model drafted the text from it. A person reviews anything the checks can't confirm. The text can still be wrong, so if you spot a mistake, use Report this listing on this page.
listing.em.h
listing.em.lead listing.em.how
listing.em.badge
[](https://mcp.tc/i/vanta)<a href="https://mcp.tc/i/vanta"><img src="https://mcp.tc/i/vanta/badge.svg" alt="Vanta on mcp.tc" height="20"></a>listing.em.badge_note
listing.em.widget
<script src="https://mcp.tc/w/vanta.js" async></script>listing.em.widget_note
iframe
<iframe src="https://mcp.tc/embed/vanta" title="Vanta on mcp.tc" width="420" height="200" loading="lazy" allow="clipboard-write" style="border:0;border-radius:8px;max-width:100%"></iframe>listing.em.iframe_note
listing.disclaimer_checked