Skip to main content

Documentation Index

Fetch the complete documentation index at: https://developer.vanta.com/llms.txt

Use this file to discover all available pages before exploring further.

The Vanta Postman collections cover every public API endpoint, paired with a shared environment for authentication and base URLs. Each API ships as its own collection, so you can download only what you need.

​
Downloads

Download a collection for each API you plan to use.

Vanta environment

Shared variables for authentication and base URLs. Used by every collection below.

Manage Vanta

Manage your Vanta tenant: tests, controls, vendors, people, and more.

Build Integrations

Push resources from your platform into Vanta.

Auditor API

Run an audit programmatically using the Conduct an Audit endpoints.

​
Setup

1

Install Postman

Download Postman from the official site if you don’t have it already.
2

Import the environment and your collections

  1. Open Postman and click Import in the upper-left corner.
  2. Drag in (or select) the environment file and at least one collection from the downloads above.
  3. Click Import to add them to your workspace.
You can import additional collections later — they’ll all share the same environment.
3

Configure environment variables

Go to Environments in the left nav and select Vanta Environment. The following variables are available:
VariableDescription
baseUrlPreset to https://api.vanta.com/v1 — the Vanta base URL (https://api.vanta.com) with the /v1 path pre-prefixed so endpoints can be dropped in directly. Vanta Gov tenants should change this to https://api.vanta-gov.com/v1.
authUrlPreset to https://api.vanta.com/oauth/token — used to fetch an access token.
clientIdYour application’s client ID.
clientSecretYour application’s client secret.
bearerTokenSet automatically after running Create Token — no manual entry needed.
Don’t have a clientId or clientSecret yet? Follow the Manage Vanta quickstart to create an application.
4

Authenticate

Run the Create Token request from any imported collection. A post-response script stores the token in bearerToken, so subsequent requests across every collection are authenticated for you.Create Token request

​
Build Integrations variables

If you imported the Build Integrations collection, the environment includes additional variables for resource IDs. Populate these using the resource creation flow. Build Integrations variables

​
Next steps

Authenticate to the API

Full walkthrough of OAuth authentication.

Browse the API reference

Try every endpoint directly from the docs.