# Vanta plugin

> Lets your agent find your failing Vanta compliance tests and fix them with infrastructure-as-code changes and a pull request.

Vanta's own plugin for Claude. It connects Claude to Vanta's hosted MCP server and adds Vanta's remediation skills, so Claude can find your failing compliance tests and fix the ones your code controls, from Terraform, CloudFormation or CDK changes through to a pull request.

What you can do with it
- See your failing tests, ranked by what you can fix from the current repository, then the ones that need guidance or manual steps
- Fix a failing test: Claude gets Vanta's remediation instructions for that test, finds the matching infrastructure-as-code, makes the smallest change and offers to open a pull request
- Browse controls, their framework mappings, their tests and linked evidence
- Review vendors, run security assessments and track their compliance documents
- Find vulnerable assets and follow their remediation
- List, download and upload policy documents
- Check framework requirements for gaps across SOC 2, ISO 27001 and more

Commands
- /vanta:list-tests shows failing tests, prioritized by what you can fix from this repository
- /vanta:fix-test, with a test ID or Vanta test URL, generates the code changes for that test and opens a pull request

How to install it
In Claude Code, run /plugin marketplace update anthropics/claude-plugins-official, then /plugin install vanta-mcp-plugin@claude-plugins-official and /reload-plugins. In Claude Cowork, add it from the plugin directory, then add Vanta's MCP server as a custom connector for your region.

How it connects
It uses Vanta's hosted MCP server for your region: https://mcp.vanta.com/mcp in the US, https://mcp.eu.vanta.com/mcp in the EU and https://mcp.aus.vanta.com/mcp in Australia. Sign-in is OAuth: run /mcp, pick Vanta for your region and click Allow in Vanta. There are no API keys to manage.

Good to know
- Vanta's MCP server is in beta and available to all Vanta customers.
- What you can reach follows your Vanta role and permissions, and some capabilities are for Admins only.
- For code fixes and pull requests, Claude needs access to your repository.
- When a fix turns on a paid cloud service, the plugin mentions the cost, and it won't weaken security settings to make a test pass.
- Vanta also documents connecting its MCP server on its own in Cursor and Perplexity; that gives the tools without the plugin's commands.

- Type: Plugin
- Made by: vantainc
- Category: Legal & compliance
- Formats: Claude plugins
- Version: latest
- Website: https://help.vanta.com/en/articles/14094979-connecting-to-vanta-mcp
- Source: https://github.com/vantainc/vanta-mcp-plugin
- Page: https://pluginboard.ai/plugins/vanta-plugin

## Works with

- Claude
- GitHub Copilot
- Claude Code
- OpenClaw

## Install

### Claude

In Claude (web or desktop): Customize → Plugins → Add → Add marketplace, enter anthropics/knowledge-work-plugins, then add vanta-mcp-plugin

### Claude Code

In Claude Code:

```text
/plugin marketplace add anthropics/knowledge-work-plugins
/plugin install vanta-mcp-plugin@knowledge-work-plugins
```

---
From Pluginboard (https://pluginboard.ai).