# @vantasdk/vanta-mcp-server

Source: https://glimind.com/server/npm%2F-vantasdk%2Fvanta-mcp-server
Registry id: `npm/-vantasdk/vanta-mcp-server`
Status: unknown

## Install

```json
{
  "mcpServers": {
    "vantasdk-vanta-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@vantasdk/vanta-mcp-server"
      ]
    }
  }
}
```

Claude Code:

```sh
claude mcp add vantasdk-vanta-mcp-server -- npx -y @vantasdk/vanta-mcp-server
```

## Tools (11)

- `controls`: Access security controls in your Vanta account. Provide controlId to get a specific control, or omit to list all controls with optional framework filtering.
- `document_resources`: Retrieve resources linked to a document (controls, links, uploads) by specifying the desired resource type.
- `documents`: List documents in your Vanta account or retrieve a specific document by ID with metadata for compliance and evidence management.
- `frameworks`: List compliance frameworks available in your Vanta account along with completion status and progress metrics.
- `integration_resources`: Access integration resources by selecting the desired operation (list_kinds, get_kind_details, list_resources, or get_resource).
- `integrations`: List integrations connected to your Vanta account or fetch details for a specific integration, including supported resource kinds and connection status.
- `list_control_documents`: List documents that provide evidence for a specific security control so you can quickly locate supporting artifacts.
- `list_control_tests`: Enumerate automated tests that validate a specific security control, including status and failing entity details.
- `list_framework_controls`: Retrieve the controls associated with a framework, including descriptions, implementation guidance, and current compliance status.
- `people`: List people in your Vanta account or retrieve a specific person by ID, including role, email, and group membership metadata.
- `risks`: Track risk scenarios, their status, scoring, and treatment plans.

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.