vanta-mcp-plugin

The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with your local repository context to help you fix compliance failures faster.

Install

If the official marketplace isn’t added yet, run

Category: Security
Author: Vanta
GitHub: VantaInc/vanta-mcp-plugin
Website: help.vanta.com

Good for

List failing compliance tests and get the context to fix them from your repo
Fix a failing test with /vanta:fix-test, which generates IaC changes and opens a PR
Browse controls and framework mappings, manage policy documents and vendor risk
Find coverage gaps across SOC 2, ISO 27001 and more, and track vulnerable assets

Getting started

Run /plugin marketplace update anthropics/claude-plugins-official
Run /plugin install vanta-mcp-plugin@claude-plugins-official, then /reload-plugins
Run /mcp, select the vanta server for your region and click Allow in Vanta to complete OAuth
Run /vanta:list-tests to see failing tests you can fix from this repo

Before you install

Vanta's remote MCP server is in beta and only available to Vanta Admins. It uses OAuth, so there are no API keys to manage.

Summarized by AI from the project docs; check the official docs before relying on it.

Similar tools

vantaOfficial plugin · Security
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with your local repository context to help you fix compliance failures faster.
claude-securityOfficial plugin · Security
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose.
security-guidanceOfficial plugin · Security
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
42crunch-api-security-testingOfficial plugin · Security
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.
auth0Official plugin · Security
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.