Vanta’s remote MCP server is currently in beta and released to all customers.
Find your MCP URL
Vanta hosts a separate MCP server in each region. Find the region for your Vanta instance and use that URL.The setup steps below use the US URL (
https://mcp.vanta.com/mcp) as an example. If your instance is in the EU or AUS, substitute the matching URL from the table above.Prerequisites
Before connecting, confirm the following:- Vanta role — You must be a Vanta Admin. The MCP server is not currently accessible to non-Admin users.
- Supported AI tool — You need access to at least one of: Claude Code, Cursor, Perplexity, Codex, or an AI tool that supports remote MCPs.
Claude Code
You can connect Claude Code to Vanta MCP by adding the server manually or by installing the official Vanta plugin.Manual MCP setup
1
Add the MCP server
Run the following command in your terminal:
2
Authenticate
In Claude Code, run
/mcp and select vanta. A webpage will open in your Vanta app to authorize MCP — click Allow.3
Start using Vanta MCP
Once authorized, you’re ready to start using the Vanta MCP server.
Manual setup gives you access to all Vanta MCP tools but does not include the plugin’s built-in skills (
/vanta:fix-test, /vanta:list-tests).Claude Code plugin
The Vanta plugin connects Claude Code to Vanta’s MCP server, purpose-built remediation skills, and slash commands — all in one easy-to-install package. It enables you to discover and prioritize failing tests, generate infrastructure-as-code fixes directly in your repository, and open pull requests without leaving your editor.1
Install the plugin
Within Claude Code, run:
2
Authenticate
Run
/mcp, select Vanta, choose your region, and complete the OAuth flow in your browser.- A remediation skill that combines MCP data with your local repo context to generate targeted IaC fixes.
- Slash commands that streamline common workflows into single actions:
/vanta:fix-test— generate code changes to fix a failing compliance test and open a PR./vanta:list-tests— show prioritized failing tests relevant to your codebase.
Add to Cursor
1
Open Cursor settings
Open Settings in Cursor.
2
Add a custom MCP server
Select Tools & MCP → Add custom MCP.
3
Add the Vanta configuration
Paste the following configuration:
Cursor connects directly to the Vanta MCP server and has access to all Vanta tools. The Claude Code plugin skills (
/vanta:fix-test, /vanta:list-tests) are Claude Code-specific and are not available in Cursor.Add to Claude Cowork
1
Install the Vanta plugin
In Claude Cowork, add the Vanta plugin from the plugin directory.
2
Add the Vanta MCP connector
Under Manage Plugins → Connectors, install the Vanta MCP server as a custom connector using the URL for your region.
3
Authorize Vanta
Complete the OAuth flow when prompted.
Adding custom connectors in Claude Cowork requires the appropriate permission. If you don’t have it, ask your Claude Cowork administrator. For the full walkthrough with screenshots, see Connecting to Vanta MCP — Claude Cowork in the Vanta Help Center.
Add to Perplexity
1
Set up a remote custom connector
In Perplexity, set up a new remote custom connector.
2
Configure the URL
For the URL, enter
https://mcp.vanta.com/mcp (or your regional endpoint).3
Configure authentication
For Authentication, select OAuth and complete the authorization flow.
Other MCP-compatible clients
Vanta MCP is a standard remote MCP server. Any tool that can connect to a remote MCP endpoint with OAuth — including VS Code (via an MCP-capable extension), Codex, and other emerging MCP clients — can connect to Vanta. The setup steps above (Claude Code, Cursor, Perplexity) are the officially tested paths. Other clients aren’t formally validated, but typically work with the same two pieces of configuration:- Server URL —
https://mcp.vanta.com/mcpfor US tenants, orhttps://mcp.eu.vanta.com/mcpfor EU tenants. See Find your MCP URL. - Authentication — OAuth. Sign in as a Vanta Admin when the browser flow opens.
@vantasdk/vanta-mcp-server locally and point your client at the local process instead.
What your AI agents can do with Vanta MCP
Once connected, your AI assistant can:- Remediate failing tests — list failing compliance tests, inspect which entities are out of scope, and get the context needed to fix them.
- Manage controls — browse controls and their framework mappings, list associated tests, and access linked evidence documents.
- Assess vendor risk — review vendors, run security assessments, manage risk attributes, and track compliance documentation.
- Track vulnerabilities — surface vulnerable assets and monitor remediation progress.
- Govern policies — list, download, and upload policy documents across your compliance program.
- Analyze compliance gaps — enumerate framework requirements and identify coverage gaps across SOC 2, ISO 27001, and more.
Resources
Vanta MCP plugin
Official Vanta plugin for Claude Code — bundles the hosted MCP server with remediation skills and slash commands.
Vanta MCP server
Open-source, self-hosted MCP server (
@vantasdk/vanta-mcp-server) for running Vanta MCP locally with your own OAuth credentials.Model Context Protocol
Learn more about the open protocol that powers Vanta MCP and other AI tool integrations.