MCP or Not?

Draft: research not yet reviewed. Hidden from search engines and production.

OfficialClaude connector: yes

Vanta MCP server & Claude connector

Does Vanta have an official MCP server or Claude connector?

Official

As of October 2026, Vanta publishes an official hosted MCP server at mcp.vanta.com, in beta for all customers and listed in Claude's directory as Anthropic verified. Any active Vanta user can sign in with OAuth and gets tools matching their role. It can create and update compliance records, and no read-only mode is documented.

Last checked

Verdict and evidence

What we checked
Vanta hosted MCP server
Published by
Vanta (official)
Runs
Hosted (remote)
Sign-in
OAuth sign-in
Stage
beta
Plan
Any active Vanta user can connect per developer docs; some areas depend on features enabled in your account.
Endpoint
https://mcp.vanta.com/mcp

Evidence

What an AI can do in Vanta

Read

  • List failing tests and get remediation context
  • Browse controls and framework mappings

Create

  • Create controlscreateControls
  • Create policiescreatePolicies
  • Create risk scenarioscreateRiskScenarios
  • Create a third-party ticketcreateThirdPartyTicket

Update

  • Add documents to an evidence requestaddDocumentsToEvidenceRequest
  • Add tags to answer-library entriesaddAnswerLibraryTags

From the publisher’s documentation for the version we checked. Not every tool is listed.

Setup

Claude Code

Add the US endpoint, then run /mcp and select vanta (EU: mcp.eu.vanta.com/mcp, AU: mcp.aus.vanta.com/mcp).

claude mcp add --transport http vanta https://mcp.vanta.com/mcp
Source

Cursor

Add to Cursor's custom MCP settings.

{
  "mcpServers": {
    "vanta": {
      "url": "https://mcp.vanta.com/mcp"
    }
  }
}
Source

Claude (claude.ai / Desktop)

Also available from the Claude directory (sign-in required).

Source

Safety check

  • Pass

    Publisher verified

    Documented on developer.vanta.com and help.vanta.com, endpoint on mcp.vanta.com, and the Claude directory lists Vanta Inc with Anthropic verified. The VantaInc GitHub org is verified.

  • Pass

    Auth model

    OAuth through a browser sign-in; acts with the connecting user's Vanta permissions. Scopes are not listed. Separate endpoints exist for US, EU and Australia.

  • Flag

    Write and delete access

    The directory lists 176 tools including many create and update tools, and the help center says writes go back to Vanta. No read-only mode is documented; non-Admins lose a small set of Admin-only tools.

  • Pass

    Tool-description injection scan

    Read the developer docs, help center article and directory listing (24 of 176 tool names shown); no AI-directed override text. The docs' navigation line to AI tools was documentation boilerplate asking for no action. Hosted tool descriptions not retrieved.

  • Unknown

    Repo maintenance

    No public source for the hosted server. The older open-source VantaInc/vanta-mcp-server is archived (see below).

Community alternatives

Built and maintained by third parties, not Vanta. Check the safety notes before connecting one to a real account.

vanta-mcp-server (legacy open-source, deprecated)

Vanta · Runs locally · API key or token

Legacy local tools; replaced by the hosted server

  • ⚠ Repo maintenance: Archived; description says DEPRECATED and to use the hosted server. Last push 2026-06-17, 63 stars.

FAQ

Does Vanta have an official MCP server?

Yes. Vanta documents a hosted server at developer.vanta.com, with US, EU and Australia endpoints.

Is Vanta a Claude connector?

Yes. The Claude directory lists Vanta Inc as Anthropic verified, with 176 tools.

Who can connect?

Per the developer docs, any active Vanta user, with Admin-only tools withheld from non-Admins.

Can it change my compliance data?

Yes. It can create controls, policies and risk scenarios and update evidence requests.

What happened to the open-source Vanta MCP?

VantaInc/vanta-mcp-server is archived and deprecated in favor of the hosted server.

Last reviewed .

Get your badge

Work at Vanta? Show that your MCP server is independently checked. The badge reflects this page: it updates when we re-check, and it links readers to the evidence.

MCP or Not: Official · Checked Oct 2026

Markdown (README)

[![MCP or Not: Official · Checked Oct 2026](https://mcpornot.com/badge/vanta.svg)](https://mcpornot.com/vanta)

HTML

<a href="https://mcpornot.com/vanta"><img src="https://mcpornot.com/badge/vanta.svg" alt="MCP or Not: Official · Checked Oct 2026" height="20"></a>

Compare Vanta

Something changed?

Vendors ship MCP updates often. If Vanta launched, changed or retired a server, tell us and we will re-check it against primary sources. Submit a correction.

New official MCP servers, weekly

One short email when vendors ship, change or retire an official server or Claude connector. Checked against primary sources, like every verdict here.