> ## Documentation Index
> Fetch the complete documentation index at: https://developer.vanta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Vanta MCP server

> Let AI agents use the Vanta API. Connect Claude Code, Cursor, Perplexity, and other AI tools using the Vanta MCP server.

The Vanta MCP server lets AI assistants like Claude, Cursor, and Perplexity call the Vanta API on your behalf — securely querying controls, remediating failing tests, and acting on your compliance data through the [Model Context Protocol](https://modelcontextprotocol.io). This guide explains how to connect Vanta MCP to your AI tool of choice.

<Note>
  Vanta's remote MCP server is currently in **beta** and released to all customers.
</Note>

## Find your MCP URL

Vanta hosts a separate MCP server in each region. Find the region for your Vanta instance and use that URL.

| Region        | MCP URL                         |
| ------------- | ------------------------------- |
| United States | `https://mcp.vanta.com/mcp`     |
| Europe        | `https://mcp.eu.vanta.com/mcp`  |
| Australia     | `https://mcp.aus.vanta.com/mcp` |

<Info>
  The setup steps below use the **US** URL (`https://mcp.vanta.com/mcp`) as an example. If your instance is in the EU or AUS, substitute the matching URL from the table above.
</Info>

## Prerequisites

Before connecting, confirm the following:

* **Vanta role** — You must be a Vanta Admin. The MCP server is not currently accessible to non-Admin users.
* **Supported AI tool** — You need access to at least one of: Claude Code, Cursor, Perplexity, Codex, or an AI tool that supports remote MCPs.

## Claude Code

You can connect Claude Code to Vanta MCP by adding the server manually or by installing the official Vanta plugin.

### Manual MCP setup

<Steps>
  <Step title="Add the MCP server">
    Run the following command in your terminal:

    ```bash theme={"system"}
    claude mcp add --transport http vanta https://mcp.vanta.com/mcp
    ```
  </Step>

  <Step title="Authenticate">
    In Claude Code, run `/mcp` and select **vanta**. A webpage will open in your Vanta app to authorize MCP — click **Allow**.
  </Step>

  <Step title="Start using Vanta MCP">
    Once authorized, you're ready to start using the Vanta MCP server.
  </Step>
</Steps>

<Info>
  Manual setup gives you access to all Vanta MCP tools but does not include the plugin's built-in skills (`/vanta:fix-test`, `/vanta:list-tests`).
</Info>

### Claude Code plugin

The [Vanta plugin](https://github.com/VantaInc/vanta-mcp-plugin) connects Claude Code to Vanta's MCP server, purpose-built remediation skills, and slash commands — all in one easy-to-install package. It enables you to discover and prioritize failing tests, generate infrastructure-as-code fixes directly in your repository, and open pull requests without leaving your editor.

<Steps>
  <Step title="Install the plugin">
    Within Claude Code, run:

    ```bash theme={"system"}
    /plugin marketplace update anthropics/claude-plugins-official
    /plugin install vanta-mcp-plugin@claude-plugins-official
    /reload-plugins
    ```
  </Step>

  <Step title="Authenticate">
    Run `/mcp`, select **Vanta**, choose your region, and complete the OAuth flow in your browser.
  </Step>
</Steps>

Once connected, you'll have access to:

* A **remediation skill** that combines MCP data with your local repo context to generate targeted IaC fixes.
* **Slash commands** that streamline common workflows into single actions:
  * `/vanta:fix-test` — generate code changes to fix a failing compliance test and open a PR.
  * `/vanta:list-tests` — show prioritized failing tests relevant to your codebase.

## Add to Cursor

<Steps>
  <Step title="Open Cursor settings">
    Open **Settings** in Cursor.
  </Step>

  <Step title="Add a custom MCP server">
    Select **Tools & MCP → Add custom MCP**.
  </Step>

  <Step title="Add the Vanta configuration">
    Paste the following configuration:

    ```json theme={"system"}
    {
      "mcpServers": {
        "vanta": {
          "url": "https://mcp.vanta.com/mcp"
        }
      }
    }
    ```
  </Step>
</Steps>

<Info>
  Cursor connects directly to the Vanta MCP server and has access to all Vanta tools. The Claude Code plugin skills (`/vanta:fix-test`, `/vanta:list-tests`) are Claude Code-specific and are not available in Cursor.
</Info>

## Add to Claude Cowork

<Steps>
  <Step title="Install the Vanta plugin">
    In Claude Cowork, add the Vanta plugin from the plugin directory.
  </Step>

  <Step title="Add the Vanta MCP connector">
    Under **Manage Plugins → Connectors**, install the Vanta MCP server as a custom connector using the URL for your region.
  </Step>

  <Step title="Authorize Vanta">
    Complete the OAuth flow when prompted.
  </Step>
</Steps>

<Info>
  Adding custom connectors in Claude Cowork requires the appropriate permission. If you don't have it, ask your Claude Cowork administrator. For the full walkthrough with screenshots, see [Connecting to Vanta MCP — Claude Cowork](https://help.vanta.com/en/articles/14094979-connecting-to-vanta-mcp#h_d3e8ff47d9) in the Vanta Help Center.
</Info>

## Add to Perplexity

<Steps>
  <Step title="Set up a remote custom connector">
    In Perplexity, set up a new **remote custom connector**.
  </Step>

  <Step title="Configure the URL">
    For the URL, enter `https://mcp.vanta.com/mcp` (or your regional endpoint).
  </Step>

  <Step title="Configure authentication">
    For **Authentication**, select **OAuth** and complete the authorization flow.
  </Step>
</Steps>

## Other MCP-compatible clients

Vanta MCP is a standard remote MCP server. Any tool that can connect to a remote MCP endpoint with OAuth — including VS Code (via an MCP-capable extension), Codex, and other emerging MCP clients — can connect to Vanta. The setup steps above (Claude Code, Cursor, Perplexity) are the officially tested paths. Other clients aren't formally validated, but typically work with the same two pieces of configuration:

* **Server URL** — `https://mcp.vanta.com/mcp` for US tenants, or `https://mcp.eu.vanta.com/mcp` for EU tenants. See [Find your MCP URL](#find-your-mcp-url).
* **Authentication** — OAuth. Sign in as a Vanta Admin when the browser flow opens.

Consult your client's documentation for where to register a remote MCP server. If your client can't reach the hosted server, you can also run the [open-source `@vantasdk/vanta-mcp-server`](https://github.com/VantaInc/vanta-mcp-server) locally and point your client at the local process instead.

## What your AI agents can do with Vanta MCP

Once connected, your AI assistant can:

* **Remediate failing tests** — list failing compliance tests, inspect which entities are out of scope, and get the context needed to fix them.
* **Manage controls** — browse controls and their framework mappings, list associated tests, and access linked evidence documents.
* **Assess vendor risk** — review vendors, run security assessments, manage risk attributes, and track compliance documentation.
* **Track vulnerabilities** — surface vulnerable assets and monitor remediation progress.
* **Govern policies** — list, download, and upload policy documents across your compliance program.
* **Analyze compliance gaps** — enumerate framework requirements and identify coverage gaps across SOC 2, ISO 27001, and more.

## Resources

<CardGroup cols={2}>
  <Card title="Vanta MCP plugin" icon="github" href="https://github.com/VantaInc/vanta-mcp-plugin" arrow={true}>
    Official Vanta plugin for Claude Code — bundles the hosted MCP server with remediation skills and slash commands.
  </Card>

  <Card title="Vanta MCP server" icon="github" href="https://github.com/VantaInc/vanta-mcp-server" arrow={true}>
    Open-source, self-hosted MCP server (`@vantasdk/vanta-mcp-server`) for running Vanta MCP locally with your own OAuth credentials.
  </Card>

  <Card title="Model Context Protocol" icon="book" href="https://modelcontextprotocol.io" arrow={true}>
    Learn more about the open protocol that powers Vanta MCP and other AI tool integrations.
  </Card>
</CardGroup>