vanta-mcp-plugin Plugin
Plugin Claude Code Security Security, Auth & ComplianceClaude Code Customization & WorkflowThe explanation below is AI-generated. Please verify it against the sources.
vanta-mcp-plugin is an official Claude Code plugin that connects Claude to Vanta's hosted MCP server, giving Claude access to Vanta's security and compliance tools inside a coding session. It combines Vanta's test-specific remediation data with local repository context to help generate infrastructure-as-code fixes and open pull requests for failing compliance tests. Use requires a Vanta Admin role, since the MCP server is not yet accessible to non-Admin users, and the server is currently in beta but released to all customers. Authentication uses OAuth only, with no API keys or tokens to manage. The plugin is installed from the official Claude Code marketplace and is separate from a manual MCP setup, which lacks the plugin's built-in skills.
Overview
Vanta is a security and compliance platform (per the item description) that this plugin connects to via Vanta's MCP server, exposing tools for compliance testing, controls, vendor risk, vulnerabilities, and policy management.
What you can do with vanta-mcp-plugin
- Connect Claude Code to Vanta's hosted MCP server (US, EU, or AUS region) via OAuth
- Run /vanta:list-tests to show failing compliance tests prioritized by what can be fixed from the current repo
- Run /vanta:fix-test to generate infrastructure-as-code changes and open a pull request for a failing test
- Browse controls and their framework mappings, list associated tests, and access linked evidence documents
- Review vendors, run security assessments, manage risk attributes, and track compliance documentation
- Surface vulnerable assets and monitor remediation progress
- List, download, and upload policy documents
- Enumerate framework requirements (e.g., SOC 2, ISO 27001) and identify coverage gaps
Sources
Original description (English)
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with your local repository context to help you fix compliance failures faster.
History of vanta-mcp-plugin
- Plugin Added vanta-mcp-plugin