Vanta MCP Server

No new issues or pull requests will be accepted here.

⚠️ Important Disclaimer:This experimental server is deprecated. You may encounter bugs, errors or unexpected results. Always verify the accuracy and appropriateness of AI-generated responses before taking any compliance or security actions. Users are responsible for reviewing all outputs and ensuring they meet their organization's security and compliance requirements.

- List security controls or fetch a specific control by ID
- Discover which automated tests validate each control
- Review evidence documents mapped to controls

- Enumerate compliance documents across your organization
- Inspect the controls, links, or uploads associated with a document

- Review framework adoption and progress metrics across your organization
- Drill into the controls required by each framework

- Enumerate connected integrations and review their metadata
- Explore supported resource kinds and fetch integration resources on demand

- List or retrieve people for compliance and access reviews

- Track risk scenarios, their status, scoring, and treatment plans

- Monitor automated security tests running in your environment
- Investigate the entities associated with a specific test

{ "client_id": "your_client_id_here", "client_secret": "your_client_secret_here" }

Add the server to yourclaude_desktop_config.json:

Add the server to your Cursor MCP settings:

You can use the MCP Inspector to debug the server:

npx @modelcontextprotocol/inspector npx @vantasdk/vanta-mcp-server

The inspector will open in your browser, allowing you to test tool calls and inspect the server's behavior.

If you want to test a local build you can do so using:

npx @modelcontextprotocol/inspector node path/to/build/index.js

In the browser window you will then need to add the environment variable "VANTA_ENV_FILE": "/absolute/path/to/your/vanta-credentials.env"

{ "tool": "list_tests", "arguments": { "statusFilter": "NEEDS_ATTENTION", "integrationFilter": "aws", "frameworkFilter": "soc2", "pageSize": 50 } }

This AWS Labs Model Context Protocol (MCP) server for CloudTrail enables your AI agents to query AWS account activity for security investigations, compliance auditing, and operational troubleshooting.

AISG MCP Gateway — a security & DLP proxy for the Model Context Protocol. Aggregates your MCP servers behind one endpoint and enforces policy on every tool call

Implements CISA Binding Operational Directive 25-01 security controls for Microsoft 365 and Azure AD/Entra ID.

Cloud security insights, guardrail guidance, and compliance checking via Dawnguard.

KHEPRA MCP Server smithery badge MCP Registry License Container PQC Sovereign compliance engine with 36,195 STIG/CCI/NIST/CMMC mappings. Air-gappable. Zero token costs. Run ert_scan → get a Godfather Report with dollar-denominated business impact. The only MCP compliance server that runs on your metal — with the World's First DoD PQC STIG built in. PQC-01-STIG-V1R1 — Full Whitepaper → 17 controls covering CNSA 2.0, FIPS 203/204/205, and the NSA's May 2026 MCP security advisory. The world's first DoD-style Post-Quantum Cryptography STIG, including the first PQC controls for agentic AI and MCP deployments.

Secure every MCP server with one governed gateway. Give each AI agent its own scoped MCP access, contain credentials at the gateway, and audit every MCP tool call without wiring agents directly to each server.

Self-hosted MCP governance runtime in Rust — audit trail, policy enforcement, and cost controls for MCP servers.

Zero-setup MCP gateway securely connecting AI to your tools with authentication and workflows

Interact with the RAD Security platform which provides AI-powered security insights for Kubernetes and cloud environments.