Vanta MCP Server

Vanta compliance MCP server - read and write vulnerabilities, tests, controls, people, vendors, documents, and compliance summaries via the Vanta API.

People connecting productivity tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

One of 41 MCP servers published from mindstone/mcp-servers. Stars and repository activity are shared across all of them. See all 41 →

VERIFIED ACTIVE

LAST COMMIT 2026-08-19 · VERIFIED 2026-08-25

NOASSERTION · TypeScript servers · how we verify → /methodology

01 · Install Vanta

before you install - you'll need

Set VANTA_CLIENT_ID, VANTA_CLIENT_SECRET, VANTA_REGION before connecting. VANTA_REQUEST_TIMEOUT_MS is optional or environment-specific per the README.

Claude Code

claude mcp add mindstone-mcp-servers-connectors-vanta -- npx -y @mindstone/mcp-server-vanta

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "mindstone-mcp-servers-connectors-vanta": {
      "command": "npx",
      "args": [
        "-y",
        "@mindstone/mcp-server-vanta"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license no standard license detected - usage rights unclear; check the repo before commercial use

npm package @mindstone/mcp-server-vanta - published under the repo owner's npm scope (@mindstone)

registry namespace io.github.mindstone is GitHub-verified and matches the repo owner

03 · Who maintains Vanta

Vanta is maintained by mindstone. We track 41 MCP servers from mindstone - 41 actively maintained, 10 combined GitHub stars, oldest repo from Apr 2026. Full record: all servers from mindstone.

04 · Facts

repository: github.com/mindstone/mcp-servers
category: productivity - actively maintained as of 2026-08-25.
registry: io.github.mindstone/mcp-server-vanta (active, first published 2026-05-21 · 4 versions)
packages: npm:@mindstone/mcp-server-vanta

05 · Vanta FAQ

What is Vanta?

Vanta compliance MCP server - read and write vulnerabilities, tests, controls, people, vendors, documents, and compliance summaries via the Vanta API.

Is Vanta still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-19. We re-verify nightly.

How do I install Vanta?

Run `npx -y @mindstone/mcp-server-vanta`. The README documents 4 environment variables (VANTA_CLIENT_ID, VANTA_CLIENT_SECRET, VANTA_REGION…) to set first. Set VANTA_CLIENT_ID, VANTA_CLIENT_SECRET, VANTA_REGION before connecting. VANTA_REQUEST_TIMEOUT_MS is optional or environment-specific per the README. You can also paste the ready-made client config above.

Does Vanta run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

06 · Alternatives to Vanta

Alternatives to Vanta

Maintained productivity servers if Vanta isn't the fit.

Pairs well with

Servers that cover what Vanta doesn't - only shown when the pairing reason fits the companion.

More productivity MCP servers · Wise · Workday · Xero · Zendesk · Mjucius Cozi MCP

More TypeScript MCP servers · Claude Prompts MCP · see all