Vanta
- 10 repo stars
- Updated July 25, 2026
- mindstone/mcp-servers
Connects an AI agent to Vanta so it can read vulnerabilities, tests, controls, evidence, people, vendors, and docs for compliance work.
About
This Mindstone MCP server connects an AI assistant to Vanta, exposing vulnerabilities, tests, controls, evidence, people, vendors, and docs. A solo builder pursuing SOC 2 or similar reaches for it when they want an agent to check compliance status and pull audit evidence without clicking through Vanta.
- Vanta compliance MCP
- Vulnerabilities, tests, controls, evidence
- People, vendors, docs
- OAuth with region support
Vanta by the numbers
- Data as of Jul 26, 2026 (Skillselion catalog sync)
claude mcp add --env VANTA_CLIENT_ID=YOUR_VANTA_CLIENT_ID --env VANTA_CLIENT_SECRET=YOUR_VANTA_CLIENT_SECRET --env VANTA_REGION=YOUR_VANTA_REGION --env VANTA_REQUEST_TIMEOUT_MS=YOUR_VANTA_REQUEST_TIMEOUT_MS mcp-server-vanta -- npx -y @mindstone/mcp-server-vantaAdd your badge
Show developers this MCP server is listed on Skillselion. Paste this into your README.
| repo stars | ★ 10 |
|---|---|
| Package | @mindstone/mcp-server-vanta |
| Transport | STDIO |
| Auth | Required |
| Last updated | July 25, 2026 |
| Repository | mindstone/mcp-servers ↗ |
What it does
Connects an AI agent to Vanta so it can read vulnerabilities, tests, controls, evidence, people, vendors, and docs for compliance work.
Who is it for?
agents that track compliance and audit evidence in Vanta
Skip if: teams not using Vanta for compliance
What you get
An agent reads Vanta controls, tests, and evidence to track compliance.
- compliance status
- audit evidence
Recommended MCP Servers
1Claw VaultHSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.2
1passwordMCP server for 1Password service accounts — tools and resources for vaults and credentials18
402sentinel McpAssess an x402 counterparty's risk BEFORE paying: allow/review/block, scored on-chain (Base).1
A2adependencyinspector McpRemote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
A2a Governance Bridge McpA2A Governance Bridge MCP server.A2aidentitytoll McpRemote MCP for A2A caller identity, scope policy, verdict receipts, and audit history.How it compares
A Vanta compliance MCP rather than a generic security scanner.
FAQ
What can it read?
Vulnerabilities, tests, controls, evidence, people, vendors, and docs.
Which regions are supported?
US (default), EU, and AUS via a region setting.