Vanta plugin

Vanta's own plugin for Claude. It connects Claude to Vanta's hosted MCP server and adds Vanta's remediation skills, so Claude can find your failing compliance tests and fix the ones your code controls, from Terraform, CloudFormation or CDK changes through to a pull request. What you can do with it - See your failing tests, ranked by what you can fix from the current repository, then the ones that need guidance or manual steps - Fix a failing test: Claude gets Vanta's remediation instructions for that test, finds the matching infrastructure-as-code, makes the smallest change and offers to open a pull request - Browse controls, their framework mappings, their tests and linked evidence - Review vendors, run security assessments and track their compliance documents - Find vulnerable assets and follow their remediation - List, download and upload policy documents - Check framework requirements for gaps across SOC 2, ISO 27001 and more Commands - /vanta:list-tests shows failing tests, prioritized by what you can fix from this repository - /vanta:fix-test, with a test ID or Vanta test URL, generates the code changes for that test and opens a pull request How to install it In Claude Code, run /plugin marketplace update anthropics/claude-plugins-official, then /plugin install vanta-mcp-plugin@claude-plugins-official and /reload-plugins. In Claude Cowork, add it from the plugin directory, then add Vanta's MCP server as a custom connector for your region. How it connects It uses Vanta's hosted MCP server for your region: https://mcp.vanta.com/mcp in the US, https://mcp.eu.vanta.com/mcp in the EU and https://mcp.aus.vanta.com/mcp in Australia. Sign-in is OAuth: run /mcp, pick Vanta for your region and click Allow in Vanta. There are no API keys to manage. Good to know - Vanta's MCP server is in beta and available to all Vanta customers. - What you can reach follows your Vanta role and permissions, and some capabilities are for Admins only. - For code fixes and pull requests, Claude needs access to your repository. - When a fix turns on a paid cloud service, the plugin mentions the cost, and it won't weaken security settings to make a test pass. - Vanta also documents connecting its MCP server on its own in Cursor and Perplexity; that gives the tools without the plugin's commands.

• “Show my failing Vanta tests, prioritized by what I can fix from this repo.”

  1. tests
  Copy

• “Fix the failing test cloudtrail-log-file-validation and open a PR.”

  1. getAgentRemediationPrompt
  Copy

• “Which resources are failing this test?”

  1. list_test_entities
  Copy

• “What should I fix first?”

  1. tests