MCPLow riskUnclaimed

Vanta

Vanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs

mindstonemindstone/mcp-server-vanta★ 12Updated Aug 9, 2026

server.json

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "io.github.mindstone/mcp-server-vanta",
  "description": "Vanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs",
  "title": "Vanta",
  "repository": {
    "url": "https://github.com/mindstone/mcp-servers",
    "source": "github",
    "subfolder": "connectors/vanta"
  },
  "version": "0.3.1",
  "packages": [
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "@mindstone/mcp-server-vanta",
      "version": "0.3.1",
      "runtimeHint": "npx",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "description": "Vanta OAuth Client ID",
          "isRequired": true,
          "format": "string",
          "name": "VANTA_CLIENT_ID"
        },
        {
          "description": "Vanta OAuth Client Secret",
          "isRequired": true,
          "format": "string",
          "isSecret": true,
          "name": "VANTA_CLIENT_SECRET"
        },
        {
          "description": "Accepted for compatibility; US/EU/AU tenants all use api.vanta.com",
          "format": "string",
          "default": "us",
          "name": "VANTA_REGION"
        },
        {
          "description": "Per-request timeout in milliseconds (default 60000)",
          "format": "number",
          "default": "60000",
          "name": "VANTA_REQUEST_TIMEOUT_MS"
        }
      ]
    }
  ],
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "com.mindstone.rebel": {
        "catalogId": "bundled-vanta",
        "provider": "rebel-oss"
      }
    }
  }
}

Permissions

DeclaredDetected
Runs code—node
Installs—npm:@mindstone/mcp-server-vanta@0.3.1
Runs install scripts—None
NetworkNoneNone
Needs credentialsVANTA_CLIENT_SECRETVANTA_CLIENT_SECRET
Outside the workspace—None
Agent tools—None

Checks

Low risk · Nothing worth a warning was found.

Not reviewed by a person · Checked by rules; the model review is not switched on yet.

Versions

  1. #10.3.1latestOct 7, 2026