vanta Claude Code Plugin
Claude Code PluginClaude CodeSecuritySecurity, Auth & ComplianceClaude Code Customization & WorkflowCloud, Deployment & CI/CDThe explanation below is AI-generated. Please verify it against the sources.
This plugin links Claude Code to Vanta's hosted MCP server so that compliance data from Vanta can be used alongside a local code repository. It requires a Vanta Admin account and connects via OAuth to a region-specific endpoint (US, EU, or AUS). Once connected, it adds a remediation skill that merges Vanta's test data with repository context to draft infrastructure-as-code fixes, plus two slash commands for listing and fixing failing compliance tests. The underlying MCP server also exposes broader Vanta functionality such as control management, vendor risk review, vulnerability tracking, policy handling, and framework gap analysis (e.g., SOC 2, ISO 27001). The plugin is distributed under the MIT license and is installed through the official Claude Code plugin marketplace.
About the service
Vanta is a security and compliance management platform that tracks controls, tests, policies, vendor risk, and vulnerabilities against frameworks like SOC 2 and ISO 27001; this plugin connects to that platform's MCP server rather than replacing it.
What you can do with vanta
- List and prioritize failing Vanta compliance tests relevant to the current repository
- Generate infrastructure-as-code changes to fix a specific failing test and open a pull request via /vanta:fix-test
- View prioritized failing tests with /vanta:list-tests
- Browse compliance controls, their framework mappings, and linked evidence documents
- Review vendor risk assessments and related documentation
- Track vulnerable assets and monitor remediation status
- List, download, or upload policy documents
- Identify compliance coverage gaps across supported frameworks