# Vanta Developer Hub

> Build on Vanta, the #1 Agentic Trust Platform. APIs, MCP server, and integration guides for automating compliance, risk, and proof across your security program.

- [Vanta Developer Hub](https://developer.vanta.com/index.md): Build on Vanta — the developer hub for the Manage Vanta, Build Integrations, and Auditor APIs, the Vanta MCP server, SDKs, webhooks, and integration partner program.
- [Make your first API call to Vanta](https://developer.vanta.com/docs/quickstart/manage-vanta.md): Get an access token and use it to list documents, policies, and evidence in your Vanta tenant, filtered by compliance framework.
- [Build a custom integration for compliance data](https://developer.vanta.com/docs/quickstart/build-private-integration.md): Push user accounts and custom resources from a homegrown app into Vanta, then turn that data into pass/fail evidence with a Custom Test.
- [Pull Information Request Lists for your audits](https://developer.vanta.com/docs/quickstart/conduct-audit.md): Get a list of Information Request Lists (IRLs) for the audits assigned to your firm.
- [Remediate a failing test with the Vanta MCP](https://developer.vanta.com/docs/quickstart/remediate-with-mcp.md): Connect Claude Code, Codex, Cursor, or Perplexity to the Vanta MCP server, surface failing tests, and generate a remediation plan for one.
- [Assign a control owner](https://developer.vanta.com/docs/guides/add-an-owner-to-a-control.md): Make a specific Vanta user accountable for a framework control's compliance status, using the Manage Vanta API.
- [Upload a document](https://developer.vanta.com/docs/guides/upload-a-document.md): Attach an evidence file to a Vanta document and submit it for review, using the Manage Vanta API.
- [Find overdue security tasks](https://developer.vanta.com/docs/guides/list-users-with-overdue-security-tasks.md): Find current employees with overdue trainings, policy acceptances, custom tasks, background checks, or device-monitoring installs, using the Manage Vanta API.
- [Offboard personnel](https://developer.vanta.com/docs/guides/offboard-people.md): Complete the offboarding workflow for ex-employees — deactivating unmonitored accounts and recording an acknowledger — using the Manage Vanta API.
- [Scope resources in or out](https://developer.vanta.com/docs/guides/scope-resources-at-the-integration-level.md): Control which resources synced from a connected integration are tested and used as compliance evidence, using the Manage Vanta API.
- [Add owners to resources](https://developer.vanta.com/docs/guides/add-owners-to-resources.md): Use the Vanta API to update the owner and descriptions on your resources.
- [Create vendors with evidence](https://developer.vanta.com/docs/guides/create-vendors-and-attach-documentation.md): Add a vendor to your Vanta vendor inventory and attach a documentation file (SOC 2, DPA, security questionnaire, etc.), using the Manage Vanta API.
- [Set custom fields on vendors](https://developer.vanta.com/docs/guides/use-custom-fields-with-vendors.md): Attach organization-specific metadata — contract dates, internal owners, risk tiers, anything you track — to vendors when creating or updating them, using the Manage Vanta API.
- [Create and update risk scenarios](https://developer.vanta.com/docs/guides/create-risk-scenarios.md): Create risk scenarios in a specific register, set custom fields, and update them via the Manage Vanta API — including the common 400 errors that trip up most integrations.
- [Find vulnerabilities approaching SLAs](https://developer.vanta.com/docs/guides/vulnerabilities-with-approaching-slas.md): Query vulnerabilities approaching their remediation deadline so you can prioritize fixes before they breach SLA, using the Manage Vanta API.
- [Find failing tests](https://developer.vanta.com/docs/guides/query-test-results-and-filter-for-failing-resources.md): Find tests that need attention, then drill into the specific entities (users, buckets, repos, etc.) causing them to fail, using the Manage Vanta API.
- [Subscribe to webhook events](https://developer.vanta.com/docs/webhooks.md): Receive real-time HTTP notifications when events happen in Vanta — register an endpoint, verify Svix signatures, and handle retries — instead of polling the API.
- [Vanta API authentication](https://developer.vanta.com/docs/concepts/authentication.md): How Vanta authenticates API clients, the OAuth grant types each application type uses, and the nuances of tokens, refresh, and revocation.
- [Integrations in Vanta](https://developer.vanta.com/docs/concepts/integrations.md): What an integration is in Vanta, the difference between public and private integrations, and how they work.
- [Resources in Vanta](https://developer.vanta.com/docs/concepts/resources.md): What a Vanta resource is, base vs custom resource types, supported custom property types, and when to model your data as a custom resource.
- [Tests in Vanta](https://developer.vanta.com/docs/concepts/tests.md): What a test is in Vanta, the difference between built-in tests and Custom Tests, and when to reach for a Custom Test instead of a standard one.
- [Become an integration partner](https://developer.vanta.com/docs/guides/become-partner.md): Join the Vanta Integration Partner Program to publish your integration in the Vanta marketplace and reach thousands of security-conscious customers.
- [Build a public integration](https://developer.vanta.com/docs/quickstart/build-integration.md): Become a Vanta partner, complete the OAuth authorization-code flow, and push your first resource into a customer's Vanta tenant.
- [Publish your integration](https://developer.vanta.com/docs/guides/list-your-integration.md): Submit your finished integration for review and publish it to the Vanta marketplace.
- [Vanta MCP server](https://developer.vanta.com/docs/vanta-mcp.md): Let AI agents use the Vanta API. Connect Claude Code, Cursor, Perplexity, and other AI tools using the Vanta MCP server.
- [Install Vanta AI Skills](https://developer.vanta.com/docs/ai-skills.md): Vanta publishes agentskills.io-spec skill files that give your AI coding tool Vanta-specific guidance. Install them with one command or add the Vanta Developer Docs MCP server.
- [Postman setup](https://developer.vanta.com/docs/postman-setup.md): Import the Vanta Postman collections and start testing requests in minutes.
- [Vanta SDKs](https://developer.vanta.com/docs/sdks.md): Official Vanta SDKs for building against the Vanta API in your language of choice.
- [API Overview](https://developer.vanta.com/reference/overview.md): The Vanta API is a RESTful JSON API that lets you automate workflows, integrate external data, and access audit information programmatically.
- [Manage Vanta API](https://developer.vanta.com/reference/manage-vanta/overview.md): Manage Vanta API — automate your Vanta tenant: controls, documents, vendors, personnel, resources, tests, and issues.
- [List contracts](https://developer.vanta.com/api-reference/contracts/list-contracts.md): List contracts, paginated.
- [Upload contract](https://developer.vanta.com/api-reference/contracts/upload-contract.md): Upload a contract.
- [Get contract](https://developer.vanta.com/api-reference/contracts/get-contract.md): Get a contract by ID.
- [Delete contract](https://developer.vanta.com/api-reference/contracts/delete-contract.md): Delete a contract by ID.
- [List controls](https://developer.vanta.com/api-reference/controls/list-controls.md): List controls.
- [Create custom control](https://developer.vanta.com/api-reference/controls/create-custom-control.md): Create a custom control.
- [Add control from Vanta library](https://developer.vanta.com/api-reference/controls/add-control-from-vanta-library.md): Add a control from the Vanta library to your organization's controls.
- [List Vanta controls from the library](https://developer.vanta.com/api-reference/controls/list-vanta-controls-from-the-library.md): List Vanta controls from the library.
- [List deactivated controls](https://developer.vanta.com/api-reference/controls/list-deactivated-controls.md): List deactivated Vanta controls (previously known as the controls library).
- [Get control by an ID](https://developer.vanta.com/api-reference/controls/get-control-by-an-id.md): Get a control by an ID.
- [Deactivates a control](https://developer.vanta.com/api-reference/controls/deactivates-a-control.md): Deactivates a custom or Vanta control.
- [Update a control's metadata](https://developer.vanta.com/api-reference/controls/update-a-controls-metadata.md): Update a control's metadata.
- [Add control to document mapping](https://developer.vanta.com/api-reference/controls/add-control-to-document-mapping.md): Add a document to a control.
- [Add control to test mapping](https://developer.vanta.com/api-reference/controls/add-control-to-test-mapping.md): Add a control to test mapping.
- [List a control's documents](https://developer.vanta.com/api-reference/controls/list-a-controls-documents.md): List a control's documents.
- [Remove control from document mapping](https://developer.vanta.com/api-reference/controls/remove-control-from-document-mapping.md): Remove a document by ID from a control.
- [Set owner of a control](https://developer.vanta.com/api-reference/controls/set-owner-of-a-control.md): Assign a control to a user or remove an owner from a control.
- [List a control's tests](https://developer.vanta.com/api-reference/controls/list-a-controls-tests.md): List a control's tests.
- [Remove control from test mapping](https://developer.vanta.com/api-reference/controls/remove-control-from-test-mapping.md): Remove a control from test mapping.
- [List customer trust accounts](https://developer.vanta.com/api-reference/customer-trust/list-customer-trust-accounts.md): List customer trust accounts with pagination.
- [Create customer trust account](https://developer.vanta.com/api-reference/customer-trust/create-customer-trust-account.md): Create a new customer trust account.
- [Get customer trust account](https://developer.vanta.com/api-reference/customer-trust/get-customer-trust-account.md): Get a specific customer trust account by ID.
- [Delete customer trust account](https://developer.vanta.com/api-reference/customer-trust/delete-customer-trust-account.md): Delete a customer trust account by ID.
- [Update customer trust account](https://developer.vanta.com/api-reference/customer-trust/update-customer-trust-account.md): Update a customer trust account by ID.
- [Create data deletion request](https://developer.vanta.com/api-reference/customer-trust/create-data-deletion-request.md): Submit a Right to Be Forgotten (RTBF) data deletion request for the specified email address.
- [List questionnaires](https://developer.vanta.com/api-reference/customer-trust/list-questionnaires.md): List questionnaires with filtering and pagination.
- [List assignable users](https://developer.vanta.com/api-reference/customer-trust/list-assignable-users.md): List users who can be assigned as owner or approver on a questionnaire.
- [Create questionnaire export](https://developer.vanta.com/api-reference/customer-trust/create-questionnaire-export.md): Creates an asynchronous export job for a questionnaire. The export processes in the background and typically completes within a few minutes depending on questionnaire size.
- [Get questionnaire export status](https://developer.vanta.com/api-reference/customer-trust/get-questionnaire-export-status.md): Retrieves the current status and result of a questionnaire export using the id received from either the `createQuestionnaireExport` endpoint or the `v1.questionnaire.export-completed` webhook payload.
- [Create file questionnaire](https://developer.vanta.com/api-reference/customer-trust/create-file-questionnaire.md): Create a new file-based questionnaire from an uploaded file (.xlsx, .docx, .pdf). File type is inferred as `SPREADSHEET` or `DOCUMENT` based on the uploaded file.
- [Create website questionnaire](https://developer.vanta.com/api-reference/customer-trust/create-website-questionnaire.md): Create a new website-based questionnaire from a portal URL.
- [Get questionnaire by ID](https://developer.vanta.com/api-reference/customer-trust/get-questionnaire-by-id.md): Retrieve a questionnaire by ID.
- [Delete questionnaire](https://developer.vanta.com/api-reference/customer-trust/delete-questionnaire.md): Delete a questionnaire by ID.
- [Update questionnaire](https://developer.vanta.com/api-reference/customer-trust/update-questionnaire.md): Update an existing questionnaire.
- [Approve questionnaire](https://developer.vanta.com/api-reference/customer-trust/approve-questionnaire.md): Mark a questionnaire as `APPROVED` and optionally provide a `statusChangeMessage`.
- [Complete questionnaire](https://developer.vanta.com/api-reference/customer-trust/complete-questionnaire.md): Complete a questionnaire and optionally sync approved answers to the answer library.
- [List questionnaire responses](https://developer.vanta.com/api-reference/customer-trust/list-questionnaire-responses.md): List the responses on a questionnaire. Each response carries its `answerPartsSchema` and `answerPartsValues`, which describe the parts an answer is composed of and their current values.
- [Get questionnaire response](https://developer.vanta.com/api-reference/customer-trust/get-questionnaire-response.md): Retrieve a single questionnaire response.
- [Update questionnaire response content](https://developer.vanta.com/api-reference/customer-trust/update-questionnaire-response-content.md): Update the answer content of a questionnaire response. The edit is recorded as performed by the calling application, since vanta-api authenticates an OAuth client rather than a specific user.
- [Update questionnaire response owner](https://developer.vanta.com/api-reference/customer-trust/update-questionnaire-response-owner.md): Reassign or clear the owner of a questionnaire response. The assignment is recorded as performed by the calling API client, so the notification to the new owner names the Vanta API rather than a user.
- [List tag categories](https://developer.vanta.com/api-reference/customer-trust/list-tag-categories.md): List user-defined tag categories. Optionally filter by product context.
- [Get tags for category](https://developer.vanta.com/api-reference/customer-trust/get-tags-for-category.md): Retrieve a tag category and its associated tags by category ID.
- [Enable tag category for product context](https://developer.vanta.com/api-reference/customer-trust/enable-tag-category-for-product-context.md): Enables a tag category for a product context (e.g. document sharing, control sharing), making it available for scoping that context's shareable content. Idempotent: enabling an already-enabled category is a no-op.
- [Disable tag category for product context](https://developer.vanta.com/api-reference/customer-trust/disable-tag-category-for-product-context.md): Disables a tag category for a product context. Idempotent: removing a category that isn't enabled for the context is a no-op.
- [List discovered vendors](https://developer.vanta.com/api-reference/discovered-vendors/list-discovered-vendors.md): List discovered vendors.
- [List of discovered vendor accounts](https://developer.vanta.com/api-reference/discovered-vendors/list-of-discovered-vendor-accounts.md): List of discovered vendor accounts.
- [Adds a discovered vendor to managed vendor by ID](https://developer.vanta.com/api-reference/discovered-vendors/adds-a-discovered-vendor-to-managed-vendor-by-id.md): Add a discovered vendor to managed vendor.
- [List documents](https://developer.vanta.com/api-reference/documents/list-documents.md): List documents.
- [Create a custom document](https://developer.vanta.com/api-reference/documents/create-a-custom-document.md): Create a custom document.
- [Get document by ID](https://developer.vanta.com/api-reference/documents/get-document-by-id.md): Get a document by ID.
- [Delete document by ID](https://developer.vanta.com/api-reference/documents/delete-document-by-id.md): Delete a document by ID.
- [List document's controls](https://developer.vanta.com/api-reference/documents/list-documents-controls.md): List a document's associated controls.
- [List document's links](https://developer.vanta.com/api-reference/documents/list-documents-links.md): List the uploaded links for a document.
- [Create document link](https://developer.vanta.com/api-reference/documents/create-document-link.md): Create a link for a document.
- [Remove document link](https://developer.vanta.com/api-reference/documents/remove-document-link.md): Remove a link from a document.
- [Set document owner](https://developer.vanta.com/api-reference/documents/set-document-owner.md): Assign or unassign a user to the document.
- [Submit document collection](https://developer.vanta.com/api-reference/documents/submit-document-collection.md): Submit document collection.
- [List document's uploads](https://developer.vanta.com/api-reference/documents/list-documents-uploads.md): List the uploaded files for a document.
- [Upload file for document](https://developer.vanta.com/api-reference/documents/upload-file-for-document.md): Upload a file for a document.
- [Delete file for a document](https://developer.vanta.com/api-reference/documents/delete-file-for-a-document.md): Delete a file for a document.
- [Download file for document](https://developer.vanta.com/api-reference/documents/download-file-for-document.md): Download a file from a document.
- [List event logs](https://developer.vanta.com/api-reference/event-logs/list-event-logs.md): List event logs.
- [List available frameworks](https://developer.vanta.com/api-reference/frameworks/list-available-frameworks.md): Lists available frameworks.
- [Get framework by ID](https://developer.vanta.com/api-reference/frameworks/get-framework-by-id.md): Get a framework by ID.
- [List a framework's controls](https://developer.vanta.com/api-reference/frameworks/list-a-frameworks-controls.md): List a framework's controls.
- [List groups](https://developer.vanta.com/api-reference/groups/list-groups.md): Lists all groups by ID.
- [Create group](https://developer.vanta.com/api-reference/groups/create-group.md): Creates a group.
- [Import IdP groups](https://developer.vanta.com/api-reference/groups/import-idp-groups.md): Imports groups from an identity provider.
- [List importable IdP groups](https://developer.vanta.com/api-reference/groups/list-importable-idp-groups.md): Lists IdP groups that are available to import.
- [Get group by ID](https://developer.vanta.com/api-reference/groups/get-group-by-id.md): Get a group by ID.
- [Update group](https://developer.vanta.com/api-reference/groups/update-group.md): Partially updates a group. At least one field must be provided.
- [Add people to group](https://developer.vanta.com/api-reference/groups/add-people-to-group.md): Add people to a group.
- [List people in a group](https://developer.vanta.com/api-reference/groups/list-people-in-a-group.md): List people in a group.
- [Add person to a group](https://developer.vanta.com/api-reference/groups/add-person-to-a-group.md): Add a single person, by ID, to a group.
- [Remove person from a group](https://developer.vanta.com/api-reference/groups/remove-person-from-a-group.md): Remove a single person, by ID, from a group.
- [Remove people from group](https://developer.vanta.com/api-reference/groups/remove-people-from-group.md): Remove people from a group.
- [List connected integrations](https://developer.vanta.com/api-reference/integrations/list-connected-integrations.md): Lists all integrations connected to a Vanta instance.
- [Get a connected integration](https://developer.vanta.com/api-reference/integrations/get-a-connected-integration.md): Gets details for a specific integration by connection ID.
- [List integration resource kinds](https://developer.vanta.com/api-reference/integrations/list-integration-resource-kinds.md): Lists a connected integration's resource types (kinds) such as S3Bucket or CloudwatchLogGroup.
- [Get details for resource kind](https://developer.vanta.com/api-reference/integrations/get-details-for-resource-kind.md): Gets details for a specific resource type (kind) such as S3Bucket or CloudwatchLogGroup.
- [List resources](https://developer.vanta.com/api-reference/integrations/list-resources.md): Lists resources for a specific integration and resource type (kind) such as S3Bucket or CloudwatchLogGroup.
- [Update resource metadata](https://developer.vanta.com/api-reference/integrations/update-resource-metadata.md): Updates metadata for multiple resources.
- [Get resource by ID](https://developer.vanta.com/api-reference/integrations/get-resource-by-id.md): Gets resource by its ID.
- [Update resource metadata](https://developer.vanta.com/api-reference/integrations/update-resource-metadata-1.md): Updates metadata for a specific resource such as an S3Bucket or CloudwatchLogGroup.
- [List issues](https://developer.vanta.com/api-reference/issues/list-issues.md): List issues on a domain (paginated). Returns a paginated list of issues that the authenticated app has permission to view, optionally filtered and sorted.
- [Get issue by ID](https://developer.vanta.com/api-reference/issues/get-issue-by-id.md): Get the details of an issue by its ID.
- [List Answer Library entries](https://developer.vanta.com/api-reference/knowledge-base/list-answer-library-entries.md): List Answer Library entries. Supports full-text search, tag filtering (OR across the given tags), and date-range filters on last-updated and expiration.
- [Create Answer Library entry](https://developer.vanta.com/api-reference/knowledge-base/create-answer-library-entry.md): Create an Answer Library entry.
- [Get Answer Library entry](https://developer.vanta.com/api-reference/knowledge-base/get-answer-library-entry.md): Get an Answer Library entry.
- [Delete Answer Library entry](https://developer.vanta.com/api-reference/knowledge-base/delete-answer-library-entry.md): Delete an Answer Library entry.
- [Update Answer Library entry](https://developer.vanta.com/api-reference/knowledge-base/update-answer-library-entry.md): Update an Answer Library entry.
- [Verify Answer Library entry](https://developer.vanta.com/api-reference/knowledge-base/verify-answer-library-entry.md): Mark an Answer Library entry as verified. Stamps `lastVerifiedAt` to the current time; the entry's question, answer, tags, owner, and expiration are left unchanged.
- [List Knowledge Base resources](https://developer.vanta.com/api-reference/knowledge-base/list-knowledge-base-resources.md): List Knowledge Base resources (documents and webpages) in a single paginated response. Each entry is a discriminated union on `type` — "FILE" entries carry a `fileUrl` (presigned S3 URL, valid for one hour), "URL" entries carry the resource's `url` and `includeSubPages`.
- [Create document resource](https://developer.vanta.com/api-reference/knowledge-base/create-document-resource.md): Create a document (FILE-type) resource in the Trust Knowledge Base. Accepts the document as a multipart/form-data upload.
- [Update document resource](https://developer.vanta.com/api-reference/knowledge-base/update-document-resource.md): Apply a partial update to a document (FILE-type) resource. Omitted fields are left untouched. To swap the underlying file, use `POST /v1/knowledge-base/resources/documents/{id}/upload`. Returns 404 for an unknown id or a URL-type resource.
- [Replace document resource file](https://developer.vanta.com/api-reference/knowledge-base/replace-document-resource-file.md): Replace the underlying file on a document (FILE-type) resource with a new multipart upload. Other resource fields (title, description, visibility, tags, owner, etc.) are unchanged — use PATCH for those. Returns 404 for an unknown id or a URL-type resource.
- [Create webpage resource](https://developer.vanta.com/api-reference/knowledge-base/create-webpage-resource.md): Create a webpage (URL-type) resource in the Trust Knowledge Base.
- [Update webpage resource](https://developer.vanta.com/api-reference/knowledge-base/update-webpage-resource.md): Apply a partial update to a webpage (URL-type) resource. Omitted fields are left untouched. `description`, `ownerAssignment`, and `expirationDate` accept `null` to clear. The resource URL is not updatable here — recreate the resource if the URL needs to change. Returns 404 for an unknown id or a FIL…
- [Get Knowledge Base resource](https://developer.vanta.com/api-reference/knowledge-base/get-knowledge-base-resource.md): Fetch a single Knowledge Base resource (FILE or URL) by id. Returns the same `type`-discriminated union as the list endpoint, so callers can branch on `type` without knowing the kind ahead of time. Returns 404 when the resource does not exist in the domain or — for FILE rows — when the underlying up…
- [Delete Knowledge Base resource](https://developer.vanta.com/api-reference/knowledge-base/delete-knowledge-base-resource.md): Hard-delete a Knowledge Base resource (FILE or URL) by id. Tears down the row plus its associated state (uploaded document for FILE rows, Trust Center references, Oso facts, chunk-store entries) via   .
- [Verify Knowledge Base resource](https://developer.vanta.com/api-reference/knowledge-base/verify-knowledge-base-resource.md): Mark a Knowledge Base resource (FILE or URL) as verified. Stamps `lastVerifiedAt` to the current time and resets `expiresAt` forward by the domain's configured review cadence; the resource's content (title, description, file or url, tags, owner) is left unchanged. Caller does not need to know the re…
- [List monitored computers](https://developer.vanta.com/api-reference/monitored-computers/list-monitored-computers.md): Returns a list of computers monitored by an MDM (with an integration built by Vanta) or by Vanta Device Monitor. Currently this list does not include resources from partner or customer-built integrations.
- [Get monitored computer by ID](https://developer.vanta.com/api-reference/monitored-computers/get-monitored-computer-by-id.md): Returns a monitored computer by ID.
- [List people](https://developer.vanta.com/api-reference/people/list-people.md): Returns a list of all people.
- [Mark as not people](https://developer.vanta.com/api-reference/people/mark-as-not-people.md): Mark a set of accounts on the People Page as "not a person." As a result, these accounts will not be treated as people in Vanta, and you will not be able to assign them tasks or use them in tests related to your company's personnel.
- [Mark as people](https://developer.vanta.com/api-reference/people/mark-as-people.md): Mark a set of accounts on the People Page as "people." As a result, these accounts will be treated as people in Vanta, and you will be able to assign them tasks and use them in tests related to your company's personnel.
- [Offboard people](https://developer.vanta.com/api-reference/people/offboard-people.md): Offboard a list of people. A person is only eligible for offboarding completion when: 1. They are an ex-employee. 2. All of the person's monitored accounts are deactivated or manually overwritten as such. 3. All of a person's custom offboarding tasks have been completed. All of the person's unmonito…
- [Get person by ID](https://developer.vanta.com/api-reference/people/get-person-by-id.md): Returns a person by ID.
- [Update person metadata](https://developer.vanta.com/api-reference/people/update-person-metadata.md): Update a person's basic information.
- [Remove leave information](https://developer.vanta.com/api-reference/people/remove-leave-information.md): Remove leave information on a person. The person will become active in Vanta, and will be considered in certain tests related to personnel.
- [Set leave information](https://developer.vanta.com/api-reference/people/set-leave-information.md): Set leave information on a person. A person on leave is inactive in Vanta and will not be considered in certain personnel-related tests. If the person has existing leave information, it will be cleared and replaced.
- [Get personnel notification settings](https://developer.vanta.com/api-reference/personnel-notification-settings/get-personnel-notification-settings.md): Returns the organization's personnel reminder and employee-digest settings.
- [Update personnel notification settings](https://developer.vanta.com/api-reference/personnel-notification-settings/update-personnel-notification-settings.md): Partially updates the organization's personnel reminder and employee-digest settings. Omitted fields remain unchanged.
- [List policies](https://developer.vanta.com/api-reference/policies/list-policies.md): Lists all policies.
- [Get policy by ID](https://developer.vanta.com/api-reference/policies/get-policy-by-id.md): Gets a policy by ID. Policy IDs can be found in Vanta in URL bar after /policies/.
- [List risk scenarios](https://developer.vanta.com/api-reference/risk-scenarios/list-risk-scenarios.md): List risk scenarios.
- [Create risk scenario](https://developer.vanta.com/api-reference/risk-scenarios/create-risk-scenario.md): Create a new risk scenario.
- [Get risk scenario by ID](https://developer.vanta.com/api-reference/risk-scenarios/get-risk-scenario-by-id.md): Get a risk scenario by ID (can be the Risk ID or the object ID).
- [Update risk scenario](https://developer.vanta.com/api-reference/risk-scenarios/update-risk-scenario.md): Update a risk scenario.
- [Cancel risk scenario approval request](https://developer.vanta.com/api-reference/risk-scenarios/cancel-risk-scenario-approval-request.md): Cancel approval request for a risk scenario.
- [List risk scenario controls](https://developer.vanta.com/api-reference/risk-scenarios/list-risk-scenario-controls.md): List the controls associated with a risk scenario.
- [Add a control to a risk scenario](https://developer.vanta.com/api-reference/risk-scenarios/add-a-control-to-a-risk-scenario.md): Associate a control with a risk scenario.
- [Remove a control from a risk scenario](https://developer.vanta.com/api-reference/risk-scenarios/remove-a-control-from-a-risk-scenario.md): Remove a control from a risk scenario.
- [Change a risk scenario control's controlType](https://developer.vanta.com/api-reference/risk-scenarios/change-a-risk-scenario-controls-controltype.md): Change the `controlType` on an existing risk-scenario / control association.
- [Submit risk scenario for approval](https://developer.vanta.com/api-reference/risk-scenarios/submit-risk-scenario-for-approval.md): Submit a risk scenario for approval.
- [List tests](https://developer.vanta.com/api-reference/tests/list-tests.md): Lists all tests based on applied filters.
- [Get test by ID](https://developer.vanta.com/api-reference/tests/get-test-by-id.md): Gets a test by ID. Test IDs can be found in Vanta in URL bar after /tests/.
- [Get test entities by test ID](https://developer.vanta.com/api-reference/tests/get-test-entities-by-test-id.md): Gets a list of tested items (entities) for a test by test ID. An entity is a tested item that can have its own outcome. For example, for a test that makes sure that all S3 buckets are versioned, an individual S3 bucket would be an entity.
- [Deactivate test entity](https://developer.vanta.com/api-reference/tests/deactivate-test-entity.md): Deactivates a single test item (test entity). There may be a delay in the deactivation of the test entity until the next test run. Use the /vulnerabilities/deactivate endpoint for vulnerabilities.
- [Reactivate test entity](https://developer.vanta.com/api-reference/tests/reactivate-test-entity.md): Reactivates a single tested item (test entity). There may be a delay in the reactivation of the test entity until the next test run. Use the /vulnerabilities/reactivate endpoint for vulnerabilities.
- [Get Trust Center](https://developer.vanta.com/api-reference/trust-centers/get-trust-center.md): Gets a Trust Center by slug ID.
- [Update Trust Center](https://developer.vanta.com/api-reference/trust-centers/update-trust-center.md): Updates a Trust Center by slug ID.
- [List Trust Center access requests](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-access-requests.md): Gets a list of access requests for a Trust Center.
- [Get Trust Center access request](https://developer.vanta.com/api-reference/trust-centers/get-trust-center-access-request.md): Gets a specific access request for a Trust Center.
- [Approve Trust Center access request](https://developer.vanta.com/api-reference/trust-centers/approve-trust-center-access-request.md): Approves an access request on a Trust Center.
- [Deny Trust Center access request](https://developer.vanta.com/api-reference/trust-centers/deny-trust-center-access-request.md): Denies an access request on a Trust Center.
- [List Trust Center viewer activity events](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-viewer-activity-events.md): Gets a list of viewer activity events on a Trust Center.
- [List Trust Center chatbot conversations](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-chatbot-conversations.md): Gets a paginated list of chatbot conversations on a Trust Center.
- [Get Trust Center chatbot conversation messages](https://developer.vanta.com/api-reference/trust-centers/get-trust-center-chatbot-conversation-messages.md): Gets the messages for a specific chatbot conversation on a Trust Center.
- [List Trust Center compliance frameworks](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-compliance-frameworks.md): Gets the list of compliance frameworks on a Trust Center.
- [Create Trust Center compliance framework](https://developer.vanta.com/api-reference/trust-centers/create-trust-center-compliance-framework.md): Adds a compliance framework to a Trust Center.
- [Delete Trust Center compliance framework](https://developer.vanta.com/api-reference/trust-centers/delete-trust-center-compliance-framework.md): Removes a compliance framework from a Trust Center.
- [Update Trust Center compliance framework](https://developer.vanta.com/api-reference/trust-centers/update-trust-center-compliance-framework.md): Updates a compliance framework on a Trust Center.
- [Upload Trust Center compliance framework badge](https://developer.vanta.com/api-reference/trust-centers/upload-trust-center-compliance-framework-badge.md): Uploads a badge image for a compliance framework on a Trust Center.
- [List Trust Center control categories](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-control-categories.md): Gets a list of control categories on a Trust Center.
- [Add Trust Center control category](https://developer.vanta.com/api-reference/trust-centers/add-trust-center-control-category.md): Adds a control category to a Trust Center.
- [Reorder Trust Center control categories](https://developer.vanta.com/api-reference/trust-centers/reorder-trust-center-control-categories.md): Reorders control categories on a Trust Center. The request body must contain the complete set of category IDs in the desired order.
- [Get Trust Center control category](https://developer.vanta.com/api-reference/trust-centers/get-trust-center-control-category.md): Gets a specific control category on a Trust Center.
- [Delete Trust Center control category](https://developer.vanta.com/api-reference/trust-centers/delete-trust-center-control-category.md): Removes a control category from a Trust Center along with all of the controls in the category.
- [Update Trust Center control category](https://developer.vanta.com/api-reference/trust-centers/update-trust-center-control-category.md): Updates a control category on a Trust Center.
- [Bulk edit controls in a category](https://developer.vanta.com/api-reference/trust-centers/bulk-edit-controls-in-a-category.md): Bulk add or remove controls from a control category on a Trust Center.
- [Reorder controls in a Trust Center control category](https://developer.vanta.com/api-reference/trust-centers/reorder-controls-in-a-trust-center-control-category.md): Reorders controls within a control category on a Trust Center. The request body must contain the complete set of control IDs in the category in the desired order.
- [List Trust Center controls](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-controls.md): Gets a list of controls on a Trust Center.
- [Add Trust Center control](https://developer.vanta.com/api-reference/trust-centers/add-trust-center-control.md): Adds a control to a Trust Center.
- [Bulk add tags to Trust Center controls](https://developer.vanta.com/api-reference/trust-centers/bulk-add-tags-to-trust-center-controls.md): Adds tags to multiple controls on a Trust Center. Limited to 100 controls per request.
- [Bulk remove tags from Trust Center controls](https://developer.vanta.com/api-reference/trust-centers/bulk-remove-tags-from-trust-center-controls.md): Removes tags from multiple controls on a Trust Center. Limited to 100 controls per request.
- [Get Trust Center control](https://developer.vanta.com/api-reference/trust-centers/get-trust-center-control.md): Gets a specific control on a Trust Center.
- [Delete Trust Center control](https://developer.vanta.com/api-reference/trust-centers/delete-trust-center-control.md): Removes a specific control from a Trust Center. This removes the control from all of the control categories that is in.
- [List Trust Center data collected](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-data-collected.md): Gets the list of data-collected disclosures on a Trust Center.
- [Set Trust Center data collected](https://developer.vanta.com/api-reference/trust-centers/set-trust-center-data-collected.md): Replaces all data-collected disclosures on a Trust Center with the provided list. This is a full replacement — any existing disclosures not included in the request body will be removed. To add or remove a single entry, first GET the current list, modify it, then PUT the updated list back.
- [List Trust Center FAQ categories](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-faq-categories.md): Gets a list of FAQ categories on a Trust Center.
- [Add Trust Center FAQ category](https://developer.vanta.com/api-reference/trust-centers/add-trust-center-faq-category.md): Adds an FAQ category to a Trust Center.
- [Delete Trust Center FAQ category](https://developer.vanta.com/api-reference/trust-centers/delete-trust-center-faq-category.md): Removes an FAQ category from a Trust Center. FAQs in the deleted category are moved to uncategorized.
- [Update Trust Center FAQ category](https://developer.vanta.com/api-reference/trust-centers/update-trust-center-faq-category.md): Updates an FAQ category on a Trust Center.
- [List Trust Center FAQs](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-faqs.md): Gets a list of FAQs on a Trust Center.
- [Create Trust Center FAQ](https://developer.vanta.com/api-reference/trust-centers/create-trust-center-faq.md): Adds an FAQ to a Trust Center.
- [Get Trust Center FAQ](https://developer.vanta.com/api-reference/trust-centers/get-trust-center-faq.md): Gets a specific FAQ on the Trust Center by ID.
- [Delete Trust Center FAQ](https://developer.vanta.com/api-reference/trust-centers/delete-trust-center-faq.md): Remove a specific FAQ from the Trust Center by ID.
- [Update Trust Center FAQ](https://developer.vanta.com/api-reference/trust-centers/update-trust-center-faq.md): Update a specific FAQ on the Trust Center by ID.
- [Upload Trust Center favicon](https://developer.vanta.com/api-reference/trust-centers/upload-trust-center-favicon.md): Uploads a favicon for a Trust Center. The Trust Center must have a custom domain configured.
- [List historical Trust Center access requests](https://developer.vanta.com/api-reference/trust-centers/list-historical-trust-center-access-requests.md): Gets a list of historical (approved or denied) access requests for a Trust Center.
- [List Trust Center resource categories](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-resource-categories.md): Gets a list of resource categories on a Trust Center.
- [Add Trust Center resource category](https://developer.vanta.com/api-reference/trust-centers/add-trust-center-resource-category.md): Adds a resource category to a Trust Center.
- [Reorder Trust Center resource categories](https://developer.vanta.com/api-reference/trust-centers/reorder-trust-center-resource-categories.md): Reorders resource categories on a Trust Center. The request body must contain the complete set of category IDs in the desired order.
- [Delete Trust Center resource category](https://developer.vanta.com/api-reference/trust-centers/delete-trust-center-resource-category.md): Removes a resource category from a Trust Center. Resources in the deleted category are moved to uncategorized.
- [Update Trust Center resource category](https://developer.vanta.com/api-reference/trust-centers/update-trust-center-resource-category.md): Updates a resource category on a Trust Center.
- [List Trust Center resources](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-resources.md): Gets a list of resources on a Trust Center.
- [Create Trust Center document](https://developer.vanta.com/api-reference/trust-centers/create-trust-center-document.md): Adds a document to a Trust Center.
- [Get Trust Center document](https://developer.vanta.com/api-reference/trust-centers/get-trust-center-document.md): Gets a specific document on a Trust Center.
- [Delete Trust Center document](https://developer.vanta.com/api-reference/trust-centers/delete-trust-center-document.md): Removes a specific document from a Trust Center.
- [Update Trust Center document](https://developer.vanta.com/api-reference/trust-centers/update-trust-center-document.md): Updates a specific document on a Trust Center.
- [Get uploaded media for Trust Center document](https://developer.vanta.com/api-reference/trust-centers/get-uploaded-media-for-trust-center-document.md): Gets the actual given uploaded document for a Trust Center.
- [List Trust Center subprocessors](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-subprocessors.md): Gets the list of subprocessors on a Trust Center.
- [Create Trust Center subprocessor](https://developer.vanta.com/api-reference/trust-centers/create-trust-center-subprocessor.md): Adds a subprocessor to a Trust Center.
- [Get Trust Center subprocessor](https://developer.vanta.com/api-reference/trust-centers/get-trust-center-subprocessor.md): Gets a specific subprocessor on a Trust Center.
- [Delete Trust Center subprocessor](https://developer.vanta.com/api-reference/trust-centers/delete-trust-center-subprocessor.md): Removes a subprocessor from a Trust Center.
- [Update Trust Center subprocessor](https://developer.vanta.com/api-reference/trust-centers/update-trust-center-subprocessor.md): Updates a subprocessor on a Trust Center.
- [List Trust Center subscriber groups](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-subscriber-groups.md): Gets a list of subscriber groups on a Trust Center.
- [Create Trust Center subscriber group](https://developer.vanta.com/api-reference/trust-centers/create-trust-center-subscriber-group.md): Adds a subscriber group to a Trust Center.
- [Get Trust Center subscriber group](https://developer.vanta.com/api-reference/trust-centers/get-trust-center-subscriber-group.md): Get a subscriber group by ID.
- [Delete Trust Center subscriber group](https://developer.vanta.com/api-reference/trust-centers/delete-trust-center-subscriber-group.md): Removes a subscriber group from a Trust Center.
- [Edit Trust Center subscriber group](https://developer.vanta.com/api-reference/trust-centers/edit-trust-center-subscriber-group.md): Edits a Trust Center subscriber group.
- [List Trust Center subscribers](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-subscribers.md): Gets a list of subscribers on a Trust Center.
- [Create Trust Center subscriber](https://developer.vanta.com/api-reference/trust-centers/create-trust-center-subscriber.md): Adds a subscriber to a Trust Center.
- [Get Trust Center subscriber](https://developer.vanta.com/api-reference/trust-centers/get-trust-center-subscriber.md): Gets a specific subscriber on a Trust Center.
- [Delete Trust Center subscriber](https://developer.vanta.com/api-reference/trust-centers/delete-trust-center-subscriber.md): Removes a subscriber from a Trust Center.
- [Set groups for a Trust Center subscriber](https://developer.vanta.com/api-reference/trust-centers/set-groups-for-a-trust-center-subscriber.md): Sets groups on a subscriber.
- [List Trust Center updates](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-updates.md): Gets a list of updates on a Trust Center.
- [Create Trust Center update](https://developer.vanta.com/api-reference/trust-centers/create-trust-center-update.md): Adds an update to a Trust Center.
- [Get Trust Center update](https://developer.vanta.com/api-reference/trust-centers/get-trust-center-update.md): Gets a specific update on a Trust Center.
- [Delete Trust Center update](https://developer.vanta.com/api-reference/trust-centers/delete-trust-center-update.md): Removes an update from a Trust Center.
- [Update Trust Center update](https://developer.vanta.com/api-reference/trust-centers/update-trust-center-update.md): Updates an update on a Trust Center.
- [Send Trust Center update notifications to all subscribers](https://developer.vanta.com/api-reference/trust-centers/send-trust-center-update-notifications-to-all-subscribers.md): Sends notifications for a specific Trust Center update to all subscribers.
- [Send Trust Center update notifications to specific subscribers](https://developer.vanta.com/api-reference/trust-centers/send-trust-center-update-notifications-to-specific-subscribers.md): Sends notifications for a specific Trust Center update to specific subscribers. At least one subscriber group or email address is required.
- [Set Trust Center videos](https://developer.vanta.com/api-reference/trust-centers/set-trust-center-videos.md): Configures the videos displayed on a Trust Center. Replaces all existing videos with the provided list.
- [List Trust Center viewers](https://developer.vanta.com/api-reference/trust-centers/list-trust-center-viewers.md): Gets a list of viewers that have been granted access to a Trust Center.
- [Add Trust Center viewer](https://developer.vanta.com/api-reference/trust-centers/add-trust-center-viewer.md): Adds a viewer and grants them access to a Trust Center.
- [Get Trust Center viewer](https://developer.vanta.com/api-reference/trust-centers/get-trust-center-viewer.md): Gets a specific viewer for a Trust Center.
- [Remove Trust Center viewer](https://developer.vanta.com/api-reference/trust-centers/remove-trust-center-viewer.md): Revokes a viewer's access to a Trust Center.
- [Update Trust Center viewer](https://developer.vanta.com/api-reference/trust-centers/update-trust-center-viewer.md): Updates a viewer's access on a Trust Center.
- [Send Trust Center viewer invite reminder](https://developer.vanta.com/api-reference/trust-centers/send-trust-center-viewer-invite-reminder.md): Resends the invite email for a Trust Center viewer.
- [List active users](https://developer.vanta.com/api-reference/users/list-active-users.md): Returns a list of all active users.
- [Get user by ID](https://developer.vanta.com/api-reference/users/get-user-by-id.md): Returns a user by ID.
- [List assessment types](https://developer.vanta.com/api-reference/vendor-assessment-types/list-assessment-types.md): Lists the domain's assessment types. Returns both active and archived types by default; pass the `status` query parameter to filter server-side.
- [Get assessment type by ID](https://developer.vanta.com/api-reference/vendor-assessment-types/get-assessment-type-by-id.md): Gets an assessment type by ID.
- [List vendor risk attributes](https://developer.vanta.com/api-reference/vendor-risk-attributes/list-vendor-risk-attributes.md): Returns a list of vendor risk attributes.
- [List vendors](https://developer.vanta.com/api-reference/vendors/list-vendors.md): List of vendors.
- [Create a vendor](https://developer.vanta.com/api-reference/vendors/create-a-vendor.md): Add vendor with metadata.
- [Get vendor by ID](https://developer.vanta.com/api-reference/vendors/get-vendor-by-id.md): Get a vendor.
- [Delete vendor by ID](https://developer.vanta.com/api-reference/vendors/delete-vendor-by-id.md): Deletes a vendor.
- [Update vendor by ID](https://developer.vanta.com/api-reference/vendors/update-vendor-by-id.md): Update vendor.
- [List assessments by vendor ID](https://developer.vanta.com/api-reference/vendors/list-assessments-by-vendor-id.md): Returns a vendor's assessments across all assessment types.
- [Get assessment by ID](https://developer.vanta.com/api-reference/vendors/get-assessment-by-id.md): Returns a single assessment for a vendor.
- [List vendor documents](https://developer.vanta.com/api-reference/vendors/list-vendor-documents.md): Returns a vendor's list of documents.
- [Add document to a vendor](https://developer.vanta.com/api-reference/vendors/add-document-to-a-vendor.md): Add document to a vendor.
- [List vendor findings](https://developer.vanta.com/api-reference/vendors/list-vendor-findings.md): Lists a vendor's findings.
- [Add a vendor finding](https://developer.vanta.com/api-reference/vendors/add-a-vendor-finding.md): Add vendor finding.
- [Delete finding by ID](https://developer.vanta.com/api-reference/vendors/delete-finding-by-id.md): Deletes a finding.
- [Update vendor finding](https://developer.vanta.com/api-reference/vendors/update-vendor-finding.md): Update vendor finding.
- [List security reviews by vendor ID](https://developer.vanta.com/api-reference/vendors/list-security-reviews-by-vendor-id.md): Returns a vendor's security reviews.
- [Get security review by ID](https://developer.vanta.com/api-reference/vendors/get-security-review-by-id.md): Returns a security review.
- [List security review documents](https://developer.vanta.com/api-reference/vendors/list-security-review-documents.md): Lists a security review's documents.
- [Add document to security review](https://developer.vanta.com/api-reference/vendors/add-document-to-security-review.md): Add document to a security review.
- [Delete a security review document by ID](https://developer.vanta.com/api-reference/vendors/delete-a-security-review-document-by-id.md): Delete a security review document.
- [Set vendor status](https://developer.vanta.com/api-reference/vendors/set-vendor-status.md): Sets the status of a vendor, which can be MANAGED, ARCHIVED, or IN_PROCUREMENT.
- [Get vulnerabilities](https://developer.vanta.com/api-reference/vulnerabilities/get-vulnerabilities.md): List all vulnerabilities based on selected filters.
- [Deactivate vulnerability monitoring for a vulnerability](https://developer.vanta.com/api-reference/vulnerabilities/deactivate-vulnerability-monitoring-for-a-vulnerability.md): Deactivate monitoring for select vulnerabilities. Vanta will not monitor a deactivated vulnerability until it is reactivated.
- [Reactivate vulnerability monitoring](https://developer.vanta.com/api-reference/vulnerabilities/reactivate-vulnerability-monitoring.md): Reactivate vulnerabilities and resume Vanta monitoring.
- [Get vulnerability by ID](https://developer.vanta.com/api-reference/vulnerabilities/get-vulnerability-by-id.md): Gets a vulnerability by an ID.
- [List vulnerability remediations](https://developer.vanta.com/api-reference/vulnerability-remediations/list-vulnerability-remediations.md): List all vulnerability remediations based on selected filters.
- [Acknowledge SLA miss](https://developer.vanta.com/api-reference/vulnerability-remediations/acknowledge-sla-miss.md): Acknowledge an SLA miss for a vulnerability remediation.
- [List assets associated with vulnerabilities](https://developer.vanta.com/api-reference/vulnerable-assets/list-assets-associated-with-vulnerabilities.md): List assets that Vanta monitors that are associated with vulnerabilities.
- [Get vulnerable asset by ID](https://developer.vanta.com/api-reference/vulnerable-assets/get-vulnerable-asset-by-id.md): Gets a vulnerable asset by ID.
- [Build Integrations API](https://developer.vanta.com/reference/build-integrations/overview.md): Build Integrations API — push resource data and evidence into Vanta tenants. For partner built integrations and private integrations.
- [List all API Endpoint Vulnerabilities](https://developer.vanta.com/api-reference/api-endpoint-vulnerabilities/list-all-api-endpoint-vulnerabilities.md): List `ApiEndpointVulnerabilityConnectors` resources for the given application.
- [Sync all API Endpoint Vulnerabilities](https://developer.vanta.com/api-reference/api-endpoint-vulnerabilities/sync-all-api-endpoint-vulnerabilities.md): To send us data related to API endpoint vulnerabilities. Note that you must first sync `VulnerableComponent` resources before sending us this data, and this sync should reference the `uniqueId` field in the `VulnerableComponent` resource.
- [List all Background Checks](https://developer.vanta.com/api-reference/background-checks/list-all-background-checks.md): List `BackgroundCheckConnector` resources for the given application.
- [Sync all Background Checks](https://developer.vanta.com/api-reference/background-checks/sync-all-background-checks.md): To send us data regarding employee/contractor background checks, you send us `BackgroundCheckConnector` resources. This helps us determine current background check statuses.
- [List all Custom Resources](https://developer.vanta.com/api-reference/custom-resources/list-all-custom-resources.md): List `CustomResource` resources for the given application.
- [Sync all Custom Resources](https://developer.vanta.com/api-reference/custom-resources/sync-all-custom-resources.md): To send data of custom resource that you want to build custom tests on, use `CustomResource`.
- [Upload file for document](https://developer.vanta.com/api-reference/documents/upload-file-for-document.md): Upload a file for a document.
- [List all MacOS User Computers](https://developer.vanta.com/api-reference/macos-user-computers/list-all-macos-user-computers.md): List `MacosUserComputer` resources for the given application.
- [Sync all MacOS User Computers](https://developer.vanta.com/api-reference/macos-user-computers/sync-all-macos-user-computers.md): To send us data related to employee/contractor MacOS computers, you send us `MacosUserComputer` resources. This helps us determine important security properties, like whether devices have encrypted drives, have anti-virus installed or have password managers installed.
- [List all Package Vulnerabilities](https://developer.vanta.com/api-reference/package-vulnerabilities/list-all-package-vulnerabilities.md): List `PackageVulnerabilityConnectors` resources for the given application.
- [Sync all Package Vulnerabilities](https://developer.vanta.com/api-reference/package-vulnerabilities/sync-all-package-vulnerabilities.md): To send us data related to package vulnerabilities. Note that you must first sync `VulnerableComponent` resources before sending us this data, and this sync should reference the `uniqueId` field in the `VulnerableComponent` resource.
- [List all secrets](https://developer.vanta.com/api-reference/secrets/list-all-secrets.md): List `Secret` resources for the given application.
- [Sync all secrets](https://developer.vanta.com/api-reference/secrets/sync-all-secrets.md): To send metadata of a secret used to access applications or infrastructure, use `Secret`.
- [List all security tasks](https://developer.vanta.com/api-reference/security-tasks/list-all-security-tasks.md): List `SecurityTask` resources for the given application.
- [Sync all security tasks](https://developer.vanta.com/api-reference/security-tasks/sync-all-security-tasks.md): To send us data related to security relevant tasks/follow-ups your system, you send us `SecurityTask` resources. This helps us determine whether security relevant tasks are being completed in a timely manner.
- [List all Static Code Analysis Vulnerabilities](https://developer.vanta.com/api-reference/static-code-analysis-vulnerabilities/list-all-static-code-analysis-vulnerabilities.md): List `StaticAnalysisCodeVulnerabilityConnectors` resources for the given application.
- [Sync all Static Code Analysis Vulnerabilities](https://developer.vanta.com/api-reference/static-code-analysis-vulnerabilities/sync-all-static-code-analysis-vulnerabilities.md): To send us data related to static code analysis vulnerabilities. Note that you must first sync `VulnerableComponent` resources before sending us this data, and this sync should reference the `uniqueId` field in the `VulnerableComponent` resource.
- [List all user accounts](https://developer.vanta.com/api-reference/user-accounts/list-all-user-accounts.md): List `UserAccount` resources for the given application.
- [Sync all user accounts](https://developer.vanta.com/api-reference/user-accounts/sync-all-user-accounts.md): To send us data related to users in your system, you send us `UserAccount` resources. Every partner must send us `UserAccount` resources. This helps us determine whether users have appropriate levels of access and have a secure authentication mechanism.
- [List all user security training statuses](https://developer.vanta.com/api-reference/user-security-training-statuses/list-all-user-security-training-statuses.md): List `UserSecurityTrainingStatus` resources for the given application.
- [Sync all user security training statuses](https://developer.vanta.com/api-reference/user-security-training-statuses/sync-all-user-security-training-statuses.md): To send us data related to security trainings, you send us `UserSecurityTrainingStatus` resources. This helps us determine whether users have completed their security and compliance trainings in a timely manner.
- [List all Vulnerable Components](https://developer.vanta.com/api-reference/vulnerable-components/list-all-vulnerable-components.md): List `VulnerableComponent` resources for the given application.
- [Sync all Vulnerable Components](https://developer.vanta.com/api-reference/vulnerable-components/sync-all-vulnerable-components.md): To send us data related to system components that have vulnerabilities.
- [List all Windows User Computers](https://developer.vanta.com/api-reference/windows-user-computers/list-all-windows-user-computers.md): List `WindowsUserComputer` resources for the given application.
- [Sync all Windows User Computers](https://developer.vanta.com/api-reference/windows-user-computers/sync-all-windows-user-computers.md): To send us data related to employee/contractor Windows computers, you send us `WindowsUserComputer` resources. This helps us determine important security properties, like whether devices have encrypted drives, have anti-virus installed or have password managers installed.
- [Auditor API](https://developer.vanta.com/reference/audits/overview.md): Auditor API — programmatically conduct audits in Vanta: read audit data, manage information requests, and review evidence.
- [Create an auditor](https://developer.vanta.com/api-reference/auditors/create-an-auditor.md): Create an auditor in Vanta.
- [List audits](https://developer.vanta.com/api-reference/audits/list-audits.md): Returns a paginated list of audits scoped to the audit firm.
- [Duplicate an IRL audit](https://developer.vanta.com/api-reference/audits/duplicate-an-irl-audit.md): Duplicates an existing IRL audit into a new audit engagement with the supplied displayName, audit dates, early access date, and auditor roster. Company, audit type, and framework are copied from the source audit and cannot be changed.
- [Get audit by ID](https://developer.vanta.com/api-reference/audits/get-audit-by-id.md): Returns a single audit by ID, scoped to the audit firm.
- [List code changes for an audit](https://developer.vanta.com/api-reference/audits/list-code-changes-for-an-audit.md): Retrieves code changes population data for an audit.
- [List audit comments](https://developer.vanta.com/api-reference/audits/list-audit-comments.md): Returns a paginated list of comments for an audit.
- [List audit controls](https://developer.vanta.com/api-reference/audits/list-audit-controls.md): Returns a paginated list of controls for an audit.
- [Create a custom control for an audit](https://developer.vanta.com/api-reference/audits/create-a-custom-control-for-an-audit.md): Create a custom control for an audit.
- [Upsert a control's assessment within an audit](https://developer.vanta.com/api-reference/audits/upsert-a-controls-assessment-within-an-audit.md): Records (upserts) an auditor's assessment state and justification for a control within an IRL audit — the API equivalent of assessing a control in the web app. Overwrites the assessment for this control in the chosen program segment.
- [List comments for a control within an audit](https://developer.vanta.com/api-reference/audits/list-comments-for-a-control-within-an-audit.md): Retrieves a paginated list of comments on a control within an IRL audit, enabling auditors to view collaboration history on the control.
- [Create a comment for a control within an audit](https://developer.vanta.com/api-reference/audits/create-a-comment-for-a-control-within-an-audit.md): Creates a new comment on a control within an IRL audit. The comment author must be an auditor in the audit firm making the request. The comment will be associated with the control and visible to all authorized users.
- [Delete a comment for a control within an audit](https://developer.vanta.com/api-reference/audits/delete-a-comment-for-a-control-within-an-audit.md): Deletes an existing comment on a control. Only the original author of the comment can delete it. The author is identified by their email address, which must match the email of the user who created the comment.
- [Update a comment for a control within an audit](https://developer.vanta.com/api-reference/audits/update-a-comment-for-a-control-within-an-audit.md): Updates an existing comment on a control. Only the original author of the comment can update it. The author is identified by their email address, which must match the email of the user who created the comment.
- [List information requests linked to a control within an audit](https://developer.vanta.com/api-reference/audits/list-information-requests-linked-to-a-control-within-an-audit.md): Returns a paginated list of active information requests linked to a specific control within an IRL audit. Only links saved on the audit's current control rows are included.
- [List audit evidence](https://developer.vanta.com/api-reference/audits/list-audit-evidence.md): Returns a paginated list of evidence for an audit.
- [Create a custom evidence request for an audit](https://developer.vanta.com/api-reference/audits/create-a-custom-evidence-request-for-an-audit.md): Create a custom evidence request for an audit.
- [Get an audit evidence item by ID](https://developer.vanta.com/api-reference/audits/get-an-audit-evidence-item-by-id.md): Retrieves a single classic audit evidence item by its ID, scoped to its audit. The response matches the entry `GET /audits/{auditId}/evidence` returns for the same item, so an evidence ID surfaced by a webhook can be resolved directly instead of paging the audit's full evidence list.
- [Update audit evidence](https://developer.vanta.com/api-reference/audits/update-audit-evidence.md): Update audit evidence.
- [Create a comment for audit evidence](https://developer.vanta.com/api-reference/audits/create-a-comment-for-audit-evidence.md): Create a comment in Vanta for a piece of evidence.
- [Get an audit evidence comment by ID](https://developer.vanta.com/api-reference/audits/get-an-audit-evidence-comment-by-id.md): Retrieves a single comment on a classic audit evidence item by its ID.
- [List audit evidence url](https://developer.vanta.com/api-reference/audits/list-audit-evidence-url.md): Returns a paginated list of evidence urls for an audit. This endpoint should be called whenever an evidence is created or has a statusUpdatedAt field that is more recent than the most recent polling event.
- [Get framework codes for an audit](https://developer.vanta.com/api-reference/audits/get-framework-codes-for-an-audit.md): Retrieves all valid framework codes for the specified audit. This endpoint helps users discover which framework codes are available for creating and updating information requests for this audit.
- [List information requests for an audit](https://developer.vanta.com/api-reference/audits/list-information-requests-for-an-audit.md): Retrieves a paginated list of all information requests for an audit, enabling external audit management systems to display and track evidence requests.
- [Create a new information request](https://developer.vanta.com/api-reference/audits/create-a-new-information-request.md): Creates a new information request for an audit during audit setup or as requirements evolve.
- [Get an information request by ID](https://developer.vanta.com/api-reference/audits/get-an-information-request-by-id.md): Retrieves a single information request by its ID for an audit, allowing external audit management systems to fetch the latest state of a specific request without paginating through the full list.
- [Delete an information request for an audit](https://developer.vanta.com/api-reference/audits/delete-an-information-request-for-an-audit.md): Deletes an information request for an audit. This performs a soft delete, marking the request as deleted (setting `deletionDate`) while preserving it in the system for audit history and compliance tracking.
- [Update an information request for an audit](https://developer.vanta.com/api-reference/audits/update-an-information-request-for-an-audit.md): Updates an existing information request for an audit, allowing modification of request details as audit requirements evolve. Supports partial updates where only specified fields are changed; omitted fields remain unchanged.
- [Accept evidence for an information request](https://developer.vanta.com/api-reference/audits/accept-evidence-for-an-information-request.md): Accepts evidence for an information request, confirming that all submitted evidence meets audit requirements. This action changes the request's approvalStatus to an approved state and creates an activity log entry.
- [List information request activity](https://developer.vanta.com/api-reference/audits/list-information-request-activity.md): Retrieves a paginated list of activity logs for an information request, providing a complete audit trail of all changes and actions.
- [List comments for an information request](https://developer.vanta.com/api-reference/audits/list-comments-for-an-information-request.md): Retrieves a paginated list of comments for an information request, enabling auditors to view communication history and collaborate with customers.
- [Create a comment for an information request](https://developer.vanta.com/api-reference/audits/create-a-comment-for-an-information-request.md): Creates a new comment for an information request. The comment author must be an auditor in the audit firm making the request. The comment will be associated with the information request and visible to all authorized users.
- [Get an information request comment by ID](https://developer.vanta.com/api-reference/audits/get-an-information-request-comment-by-id.md): Retrieves a single comment on an information request by its ID.
- [Delete a comment for an information request](https://developer.vanta.com/api-reference/audits/delete-a-comment-for-an-information-request.md): Deletes an existing comment for an information request. Only the original author of the comment can delete it. The author is identified by their email address, which must match the email of the user who created the comment.
- [Update a comment for an information request](https://developer.vanta.com/api-reference/audits/update-a-comment-for-an-information-request.md): Updates an existing comment for an information request. Only the original author of the comment can update it. The author is identified by their email address, which must match the email of the user who created the comment.
- [List evidence for an information request](https://developer.vanta.com/api-reference/audits/list-evidence-for-an-information-request.md): Retrieves a paginated list of all evidence attached to an information request, enabling auditors to review evidence submitted by customers.
- [Get information request evidence by ID](https://developer.vanta.com/api-reference/audits/get-information-request-evidence-by-id.md): Retrieves a single evidence item attached to an information request by its ID.
- [Get test snapshot detail for an evidence row](https://developer.vanta.com/api-reference/audits/get-test-snapshot-detail-for-an-evidence-row.md): Retrieves the rich detail for a single VANTA_TEST_SNAPSHOT evidence row attached to an information request. The response includes test-level metadata (description, integrations, SLA), the raw test data captured at snapshot time, and the resources that were excluded from the test (out-of-scope resour…
- [Flag evidence for an information request](https://developer.vanta.com/api-reference/audits/flag-evidence-for-an-information-request.md): Flags evidence for an information request when it doesn't meet audit requirements, marking issues that need to be addressed before approval. This action changes the request's approvalStatus to a flagged state and creates an activity log entry.
- [List integrations for an audit](https://developer.vanta.com/api-reference/audits/list-integrations-for-an-audit.md): Retrieves integration population data for an audit.
- [List snapshotted issues for an audit](https://developer.vanta.com/api-reference/audits/list-snapshotted-issues-for-an-audit.md): Retrieves a list of all issues that have been shared with an audit.
- [List snapshotted issues for an audit](https://developer.vanta.com/api-reference/audits/list-snapshotted-issues-for-an-audit-1.md): Retrieves a list of snapshots that have been shared with an audit.
- [List vendors for an audit](https://developer.vanta.com/api-reference/audits/list-vendors-for-an-audit.md): Retrieves vendor population data for an audit.
- [List monitored computers](https://developer.vanta.com/api-reference/audits/list-monitored-computers.md): Returns a list of computers monitored by an MDM (with an integration built by Vanta) or by Vanta Device Monitor. Currently this list does not include resources from partner or customer-built integrations.
- [Get organization information for an audit](https://developer.vanta.com/api-reference/audits/get-organization-information-for-an-audit.md): Retrieves organization information for an audit.
- [Get organization notification settings for an audit](https://developer.vanta.com/api-reference/audits/get-organization-notification-settings-for-an-audit.md): Retrieves organization notification settings for an audit.
- [List of people who are in scope for this audit](https://developer.vanta.com/api-reference/audits/list-of-people-who-are-in-scope-for-this-audit.md): Returns a list of people who are in scope for this audit.
- [List account access services for an audit](https://developer.vanta.com/api-reference/audits/list-account-access-services-for-an-audit.md): Retrieves connected account access services for an audit.
- [List account access records for an audit](https://developer.vanta.com/api-reference/audits/list-account-access-records-for-an-audit.md): Retrieves account access population data for an audit.
- [List groups for an audit](https://developer.vanta.com/api-reference/audits/list-groups-for-an-audit.md): Retrieves groups population data for an audit.
- [List people for an audit](https://developer.vanta.com/api-reference/audits/list-people-for-an-audit.md): Retrieves people population data for an audit.
- [List risk snapshots for an audit](https://developer.vanta.com/api-reference/audits/list-risk-snapshots-for-an-audit.md): Returns a paginated list of risk assessment snapshots available for an audit.
- [List risks for an audit](https://developer.vanta.com/api-reference/audits/list-risks-for-an-audit.md): Retrieves risk population data for an audit.
- [Share information request list with customer](https://developer.vanta.com/api-reference/audits/share-information-request-list-with-customer.md): Shares the current information request list for an audit with the customer organization, making it visible in their portal. This action allows the customer to see all information requests that have been created for their audit. Only IRL audits are supported.
- [List of vendors who are in scope for this audit](https://developer.vanta.com/api-reference/audits/list-of-vendors-who-are-in-scope-for-this-audit.md): Returns a list of vendors who are in scope for this audit.
- [List vulnerabilities within the scope of a given audit](https://developer.vanta.com/api-reference/audits/list-vulnerabilities-within-the-scope-of-a-given-audit.md): List all vulnerabilities based on selected filters.
- [List vulnerability remediations that are in scope for this audit](https://developer.vanta.com/api-reference/audits/list-vulnerability-remediations-that-are-in-scope-for-this-audit.md): List all vulnerability remediations based on selected filters that are in scope for this audit.
- [List assets associated with vulnerabilities](https://developer.vanta.com/api-reference/audits/list-assets-associated-with-vulnerabilities.md): List assets that Vanta monitors that are associated with vulnerabilities.
- [Webhook events](https://developer.vanta.com/reference/webhooks/overview.md): Reference for every webhook event including payloads, schemas, and examples.
- [Questionnaire created](https://developer.vanta.com/api-reference/questionnaire/questionnaire-created.md): A questionnaire was created.
- [Questionnaire deleted](https://developer.vanta.com/api-reference/questionnaire/questionnaire-deleted.md): A questionnaire was deleted.
- [Questionnaire status changed](https://developer.vanta.com/api-reference/questionnaire/questionnaire-status-changed.md): A questionnaire status was changed.
- [Questionnaire export completed](https://developer.vanta.com/api-reference/questionnaire/questionnaire-export-completed.md): A questionnaire export has completed successfully.
- [Questionnaire export failed](https://developer.vanta.com/api-reference/questionnaire/questionnaire-export-failed.md): A questionnaire export has failed.
- [Trust Center access request received](https://developer.vanta.com/api-reference/trust-center/trust-center-access-request-received.md): A Trust Center access request was received.
- [Trust Center access request denied](https://developer.vanta.com/api-reference/trust-center/trust-center-access-request-denied.md): A Trust Center access request was denied.
- [Trust Center access request approved](https://developer.vanta.com/api-reference/trust-center/trust-center-access-request-approved.md): A Trust Center access request was approved.
- [Vendor decision created](https://developer.vanta.com/api-reference/vendor/vendor-decision-created.md): A new vendor decision has been created.
- [Information request status changed](https://developer.vanta.com/api-reference/information-request/information-request-status-changed.md): Fires when an information request's approval status changes. This is a status-change event.
- [Information request comment created](https://developer.vanta.com/api-reference/information-request/information-request-comment-created.md): Fires when a comment is created on an information request. Fires once per comment.
- [Information request comment updated](https://developer.vanta.com/api-reference/information-request/information-request-comment-updated.md): Fires when a comment on an information request is updated. Fires once per comment update.
- [Information request comment deleted](https://developer.vanta.com/api-reference/information-request/information-request-comment-deleted.md): Fires when a comment is deleted from an information request. Fires once per comment deletion.
- [Information request evidence created](https://developer.vanta.com/api-reference/information-request/information-request-evidence-created.md): Fires when a piece of evidence is added to an information request. Fires once per piece of evidence — if several pieces are added in a single action, you receive one event per piece.
- [Information request evidence deleted](https://developer.vanta.com/api-reference/information-request/information-request-evidence-deleted.md): Fires when a piece of evidence is removed from an information request. Fires once per piece of evidence removed.
- [Evidence status changed](https://developer.vanta.com/api-reference/evidence/evidence-status-changed.md): Fires when an existing audit evidence item changes status. `oldStatus` and `newStatus` always describe a transition of an item that already exists. See [`v1.evidence.created`](/reference/webhooks/v1-evidence-created) for the event that fires when an item first comes into scope for an audit.
- [Evidence comment created](https://developer.vanta.com/api-reference/evidence/evidence-comment-created.md): Fires when a comment is created on an audit evidence item. Fires once per comment.
- [Evidence comment updated](https://developer.vanta.com/api-reference/evidence/evidence-comment-updated.md): Fires when a comment on an audit evidence item is updated. Fires once per comment update.
- [Evidence comment deleted](https://developer.vanta.com/api-reference/evidence/evidence-comment-deleted.md): Fires when a comment is deleted from an audit evidence item. Fires once per comment deletion.
- [Evidence created](https://developer.vanta.com/api-reference/evidence/evidence-created.md): Fires when an audit evidence item comes into scope for an audit, including when a previously removed item re-enters scope after soft-delete.
- [Evidence deleted](https://developer.vanta.com/api-reference/evidence/evidence-deleted.md): Fires when an audit evidence item leaves scope for an audit. Fires once per item.
- [Control comment created](https://developer.vanta.com/api-reference/control/control-comment-created.md): An external comment was created on an audit control. Fires once per comment.
- [Control comment updated](https://developer.vanta.com/api-reference/control/control-comment-updated.md): An external comment on an audit control was updated. Fires once per comment update.
- [Control comment deleted](https://developer.vanta.com/api-reference/control/control-comment-deleted.md): An external comment was deleted from an audit control. Fires once per comment deletion.
- [Vanta API changelog](https://developer.vanta.com/docs/changelog.md): Recent updates to the Vanta API and developer documentation, including new endpoints, breaking changes, and release notes.

## OpenAPI Specs

- [conduct-an-audit-with-code-samples](https://spec.speakeasy.com/vanta/vanta/conduct-an-audit-with-code-samples)
- [auditor-api](/reference/auditor-api.json)
- [build-integrations](/reference/build-integrations.json)
- [manage-vanta](/reference/manage-vanta.json)
- [webhooks](/reference/webhooks.json)