Vanta runs on your own machine — the client starts it, so there is no endpoint to ping. 66 installs a week from npm. Last commit 2 Nov 2026.
Vanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs
Nothing serious here today
Today is the operative word: we check Vanta every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-server-vanta -e 'VANTA_CLIENT_ID=<VANTA_CLIENT_ID>' -e 'VANTA_CLIENT_SECRET=<VANTA_CLIENT_SECRET>' -- npx -y @mindstone/mcp-server-vanta{
"mcpServers": {
"mcp-server-vanta": {
"command": "npx",
"args": [
"-y",
"@mindstone/mcp-server-vanta"
],
"env": {
"VANTA_CLIENT_ID": "<VANTA_CLIENT_ID>",
"VANTA_CLIENT_SECRET": "<VANTA_CLIENT_SECRET>"
}
}
}
}[mcp_servers.mcp-server-vanta]
command = "npx"
args = ["-y", "@mindstone/mcp-server-vanta"]
env = { VANTA_CLIENT_ID = "<VANTA_CLIENT_ID>", VANTA_CLIENT_SECRET = "<VANTA_CLIENT_SECRET>" }{
"mcpServers": {
"mcp-server-vanta": {
"command": "npx",
"args": [
"-y",
"@mindstone/mcp-server-vanta"
],
"env": {
"VANTA_CLIENT_ID": "<VANTA_CLIENT_ID>",
"VANTA_CLIENT_SECRET": "<VANTA_CLIENT_SECRET>"
}
}
}
}{
"servers": {
"mcp-server-vanta": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@mindstone/mcp-server-vanta"
],
"env": {
"VANTA_CLIENT_ID": "<VANTA_CLIENT_ID>",
"VANTA_CLIENT_SECRET": "<VANTA_CLIENT_SECRET>"
}
}
}
}Put your own values in place of
<VANTA_CLIENT_ID> (Vanta OAuth Client ID), <VANTA_CLIENT_SECRET> (Vanta OAuth Client Secret).
The author’s registry entry marks them as required.
Optional settings from the registry entry, left out of the block above:
VANTA_REGION (Accepted for compatibility; US/EU/AU tenants all use api.vanta.com), VANTA_REQUEST_TIMEOUT_MS (Per-request timeout in milliseconds (default 60000)).
Alternatives to Vanta
same job, measured the same wayMCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.
CLI tool and MCP server that tests MCP servers for spec compliance
Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.
An MCP server that provides tools to author OSCAL security compliance documentation
Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.
Post-quantum cryptography security scanner. Detect ECDSA/RSA vulnerabilities, NIST compliance.
Tamper-evident audit trail MCP server for EU AI Act & GDPR compliance.
npm MCP — search packages, bundle sizes, vulnerabilities, compare downloads.
Vanta — questions
Answers built from our own checks of this server.