Vanta MCP Server

by mindstone Your server? Claim it

local only

Vanta runs on your own machine — the client starts it, so there is no endpoint to ping. 86 installs a week from npm. Last commit 13 Sep 2026.

Vanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs

Installs per day peak 32 · avg 16 · -11% w/w

a month agotoday

Installs / week

npm · @mindstone/mcp-server-vanta

Stars

1 open issues

13 Sep 2026

Last commit

0 releases in 90 days

—

License

TypeScript

Nothing serious here today

Today is the operative word: we check Vanta every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp-server-vanta -- npx -y @mindstone/mcp-server-vanta

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp-server-vanta": {
      "args": [
        "-y",
        "@mindstone/mcp-server-vanta"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.mcp-server-vanta]
command = "npx"
args = ["-y", "@mindstone/mcp-server-vanta"]

.cursor/mcp.json

{
  "mcpServers": {
    "mcp-server-vanta": {
      "args": [
        "-y",
        "@mindstone/mcp-server-vanta"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "mcp-server-vanta": {
      "args": [
        "-y",
        "@mindstone/mcp-server-vanta"
      ],
      "command": "npx"
    }
  }
}

This one needs environment variables set before it will start: VANTA_CLIENT_ID (Vanta OAuth Client ID), VANTA_CLIENT_SECRET (Vanta OAuth Client Secret), VANTA_REGION (Accepted for compatibility; US/EU/AU tenants all use api.vanta.com), VANTA_REQUEST_TIMEOUT_MS (Per-request timeout in milliseconds (default 60000)). The author declared them in the registry entry; get the values from the project itself.

Alternatives to Vanta

same job, measured the same way

Base Security Scanner MCP

by lordbasilaiassistant-sudo

MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.

255 installs/wk local only

MCP Compliance

by yawlabs

CLI tool and MCP server that tests MCP servers for spec compliance

1 350 installs/wk local only

Inkog

by inkog-io

Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.

228 installs/wk local only

Compliance Trestle MCP

by oscal-compass

An MCP server that provides tools to author OSCAL security compliance documentation

149 installs/wk local only

Bawbel Scanner

by bawbel

Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.

79 installs/wk local only

Quantumguard MCP

by kota1026

Post-quantum cryptography security scanner. Detect ECDSA/RSA vulnerabilities, NIST compliance.

21 installs/wk local only

EU Audit Trail

by jellewas

Tamper-evident audit trail MCP server for EU AI Act & GDPR compliance.

72 installs/wk local only

npm Plus

by ofershap

npm MCP — search packages, bundle sizes, vulnerabilities, compare downloads.

47 installs/wk local only

Vanta — questions

Answers built from our own checks of this server.

Why is there no uptime for Vanta?

Vanta runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @mindstone/mcp-server-vanta was installed 86 times last week.

How do I connect Vanta?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @mindstone/mcp-server-vanta straight from npm; nothing to host, nothing to sign up for.

How many people use Vanta?

The npm package @mindstone/mcp-server-vanta was installed 86 times in the last week. Week over week that is -11%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Vanta open source?

We cannot say either way: written in TypeScript, 12 stars on GitHub and 1 open issue, but we could not determine the licence, and without one the code is not open source by default.