# Vanta MCP connector Connecting Vanta to Elaichi lets Claude, ChatGPT, Cursor, and any other MCP client read and update your controls, documents, tests, and frameworks, with each person signed in as themselves and every action recorded in an audit log. Source: https://elaichi.ai/connectors/vanta/ ## Facts | | | | --- | --- | | Application | Vanta | | Category | Compliance | | AI tools | 182 | | Authentication | App credentials | | Needs your own OAuth app | No | | MCP endpoint | https://api.elaichi.ai/mcp | | Works with | Claude, ChatGPT, Cursor, any MCP client, and the Elaichi Agent | | Tools advertised by name | No. 182 tools is past the 30-tool threshold, so clients use `search_tools` and `execute_tool` | ## What you can ask once Vanta is connected - Which Vanta controls have failing control tests this week? - List Vanta controls with no owner set. - Show control documents uploaded in Vanta this month. ## Connect Vanta in Elaichi This happens once for the organization, before any client is involved. 1. Open Connections, choose Add connection, and pick Vanta. 2. Optionally set Share with, then press Connect. 3. Paste your Vanta app credentials. Vanta authenticates the app rather than a person. One person supplies the credentials once, and everyone else works through Share with. Credentials are vaulted and nobody, including the AI, reads them back. The connection becomes a toolbox immediately, so you can curate which Vanta tools are exposed, rename them, or freeze arguments before anyone points a client at it. ## Connect Vanta to Claude Endpoint: https://api.elaichi.ai/mcp 1. Open Customize, then Connectors. 2. Press Add. 3. Name it, paste the MCP server URL, then Continue. 4. Sign in and approve. On Team and Enterprise, an Owner adds it once. Everyone else turns it on for themselves. ## Connect Vanta to ChatGPT Endpoint: https://api.elaichi.ai/mcp 1. Open Plugins, then press the + button. 2. Name it and paste the endpoint into Server URL. 3. Leave Authentication on OAuth, then tick the risk acknowledgement. 4. Press Create, then sign in and approve. Works on the web today. The plugin directory lives at chatgpt.com/plugins. ## Connect Vanta to Cursor Endpoint: https://api.elaichi.ai/mcp 1. Open `~/.cursor/mcp.json`. 2. Add the endpoint under `mcpServers`. 3. Reload Cursor, then sign in and approve. Set up per machine, so repeat it on each computer you work from. ## Connect Vanta to any MCP client Endpoint: https://api.elaichi.ai/mcp 1. Add the endpoint as a remote MCP server. 2. Sign in and approve. The Elaichi Agent already has these tools, with nothing to set up. ## What the consent screen decides Only Read is granted by default, which is not enough to call a Vanta tool. Over MCP there is no trusted place to confirm a write in the moment, so the consent screen is the standing approval rather than a formality. Grant Read and Run tools. Think hard before granting Delete, which reaches into connected apps and cannot be undone. ## What teams do with Vanta through Elaichi ### Find every control still missing an owner Compliance. Ask which Vanta controls have no owner assigned, then set the right person on each one without opening every record by hand. ### Attach evidence after a fix ships Security. Once a gap is closed, add the screenshot or export as a control document in Vanta so the control shows evidence before the auditor asks. ### Upload a policy and submit it IT. Create the document in Vanta, attach the signed policy file, and submit it for review in one conversation instead of three clicks and an email. ### See what a new framework will require Compliance. List the frameworks in your Vanta account, pull one up in detail, and add the controls you still need from the library. ### Add a test to a control Engineering. When a control is verified by a check your team already runs, record that test against the Vanta control so it stays visible to the compliance team. ### Pull the file an auditor asked for Legal. Ask for the current version of a Vanta document by name, download the attached file, and hand it over without searching folders. ## Frequently asked questions ### How do I connect Vanta to Claude? Two steps. In Elaichi, add the Vanta connector and enter your Vanta app credentials, then paste https://api.elaichi.ai/mcp into Claude under Customize, then Connectors, then Add. There is no OAuth application to register in Vanta and no client ID or secret to generate. It takes a few minutes. ### Does Vanta work with ChatGPT and Cursor as well as Claude? Yes. Once Vanta is connected in Elaichi, the same https://api.elaichi.ai/mcp endpoint works in Claude, ChatGPT, Cursor, any other MCP client, and the Elaichi Agent. You connect Vanta once and every client uses that one connection. ### What can an AI agent actually do with my Vanta data? It can list your Vanta controls, find the ones with no owner and assign one, add controls from the library, and create or remove controls and their tests. It can also create and submit documents, attach or download the files behind them, and look up the frameworks your Vanta account tracks. Because Vanta exposes a lot of actions, short concrete asks like "show controls without an owner" work better than long paragraphs. ### Does connecting Vanta give the AI access to everything in my Vanta account? No. Every call to Vanta runs inside the access of the person who signed in, so the agent sees only the controls, documents, and frameworks that person could already see in Vanta. Elaichi can narrow that access further with restrictions, and it can never widen it beyond what Vanta itself allows. ### Can my team share one Vanta connection? Yes. One person connects Vanta in Elaichi and shares the connection with a team, and nobody else ever handles the Vanta credentials. Each teammate still signs in to Elaichi as themselves, so the audit log records who assigned an owner or submitted a document, not just that the shared connection did. ### Can I stop an agent from deleting or changing things in Vanta? Yes. Restrictions in Elaichi apply per action, so you can allow reading Vanta controls and documents while blocking deletes, updates, or submissions. A blocked action is never advertised to Claude, ChatGPT, Cursor, or any other client, so no prompt can reach it. ### What happens to a Vanta connection when someone leaves? Offboarding that person in Elaichi ends their access to Vanta through every client at once. If they connected Vanta and shared it, the connection keeps working for everyone else on the team. If you ever want Vanta gone entirely, disconnecting it once in Elaichi removes it from Claude, ChatGPT, Cursor, and every other client together. ## All 182 Vanta tools Every tool below is callable through https://api.elaichi.ai/mcp once Vanta is connected, subject to the toolbox it is in and the restrictions on the caller. - **List all Vanta controls** (List). List controls in Vanta. Returns id, externalId, name, description, source, domains, owner, role, and customFields for each control. - **Get single Vanta control by ID** (Get). Get a control in Vanta by id. Returns fields such as id, externalId, name, description, source, domains, owner, customFields, numDocumentsPassing, numDocumentsTotal, numTestsPassing, numTestsTotal, status, role, and note. - **Create a Vanta control** (Create). Create a custom control in Vanta. Requires externalId, name, description, effectiveDate, and domain as parameters. Returns id, externalId, name, description, source, domains, owner, role, and customFields, which include information about the newly created control. - **Update a Vanta control by ID** (Update). Update a control's metadata in Vanta using id. Returns id (control's unique ID), externalId (external control ID), name, description, source, domains, owner, role, and customFields in the response. - **Delete a Vanta control by ID** (Delete). Delete a specific control in Vanta using id. No content is returned in the response when the control is successfully removed. - **Vanta controls set owner** (Set). Set owner for a specific control in Vanta using id. Returns id, externalId, name, description, source, domains, owner, role, and customFields in the response. - **Vanta controls add from library** (Add). Add a control from the Vanta library to your organization's controls in Vanta. Requires controlId. Returns id, externalId, name, description, source, domains, owner, role, and customFields of the new control in the response. - **List all Vanta control documents** (List). List documents for a specific control in Vanta. Requires id. Returns id, ownerId, category, isSensitive, title, uploadStatus, uploadStatusDate, and url for each document. - **Delete a Vanta control document by ID** (Delete). Remove a document from a control in Vanta. Requires control_id and id. Returns no content if successful. - **Create a Vanta control document** (Create). Add a document to a control in Vanta. Requires id (as controlId) and documentId. Returns document fields including id, ownerId, category, isSensitive, title, uploadStatus, uploadStatusDate, and url. - **List all Vanta control tests** (List). List tests for a specific control in Vanta. Requires id. Returns fields: id, name, lastTestRunDate, latestFlipDate, description, failureDescription, remediationDescription, version, category, integrations, status, deactivatedStatusInfo, remediationStatusInfo, owner. - **Delete a Vanta control test by ID** (Delete). Remove a control-test mapping in Vanta. Requires control_id and id. Returns no content in the response. - **Create a Vanta control test** (Create). Add a test to a control in Vanta. Requires id for the control and testId in the body. Returns test fields (id, name, lastTestRunDate, description, status, owner) and control fields (id, name, description, source, domains, owner) in the response. - **List all Vanta documents** (List). List documents in Vanta. Returns id, ownerId, category, isSensitive, title, uploadStatus, uploadStatusDate, and url for each document. - **Get single Vanta document by ID** (Get). Get a document in Vanta by id. Returns fields such as id, ownerId, category, isSensitive, title, uploadStatus, uploadStatusDate, url, description, deactivatedStatus, note, nextRenewalDate, renewalCadence, reminderWindow, and subscribers. - **Delete a Vanta document by ID** (Delete). Delete a document by id in Vanta. Returns no content on success. Requires id. - **Create a Vanta document** (Create). Create a custom document in Vanta. Requires title, description, timeSensitivity, cadence, reminderWindow, and isSensitive. Returns id, ownerId, category, isSensitive, title, uploadStatus, uploadStatusDate, and url in the response. - **Vanta documents submit** (Action). Submit a document collection in Vanta. Requires id. Returns a 204 status on success with no content. - **List all Vanta document files** (List). List uploaded files for a document in Vanta. Requires id. Returns id, fileName, title, description, mimeType, uploadedBy, creationDate, updatedDate, deletionDate, effectiveDate, and url for each uploaded file. - **Vanta document files download** (Download). Download a specific document-file in Vanta by document_id and id. The response returns the 'readable' field indicating if the file stream can be read. - **Create a Vanta document file** (Create). Upload a file for a document in Vanta. Requires id. Returns id, fileName, title, description, mimeType, uploadedBy, creationDate, updatedDate, deletionDate, effectiveDate, and url for the uploaded document. - **Delete a Vanta document file by ID** (Delete). Delete a document-file in Vanta. Requires document_id and id. No content is returned in the response. - **List all Vanta frameworks** (List). List frameworks in Vanta. Returns fields: id, displayName, shorthandName, description, numControlsCompleted, numControlsTotal, numDocumentsPassing, numDocumentsTotal, numTestsPassing, numTestsTotal for each framework. - **Get single Vanta framework by ID** (Get). Get details about a specific framework in Vanta using id. Returns fields such as id, displayName, shorthandName, description, numControlsCompleted, numControlsTotal, numDocumentsPassing, numDocumentsTotal, numTestsPassing, numTestsTotal, and requirementCategories where requirementCategories include id, name, shorthand, and requirements with their controls. - **List all Vanta framework controls** (List). List controls for a specific framework in Vanta. Requires framework_id. Returns id, externalId, name, description, source, domains, owner, role, and customFields for each control. - **List all Vanta groups** (List). List groups in Vanta. Returns id, name, and creationDate fields for each group. - **Get single Vanta group by ID** (Get). Get group details by id in Vanta. Returns id, name, and creationDate fields in the response. - **Create a Vanta group person** (Create). Add people to a group in Vanta. Requires id. Returns an array of results for each person, including id, status ('SUCCESS' or 'ERROR'), and an error message if applicable. - **Delete a Vanta group person by ID** (Delete). Remove people from a group in Vanta. Requires id. Returns the results array with each person's id, status (either SUCCESS or ERROR), and an optional error message per person. - **List all Vanta group people** (List). List people in a group in Vanta. Requires group_id. Returns id, emailAddress, employment status and dates, leaveInfo, groupIds, name, sources of information, and detailed tasksSummary for each person. - **List all Vanta integrations** (List). List all integrations connected to a Vanta instance. Returns integrationId, displayName, resourceKinds, and details about installed connections including connectionId, isDisabled status, and connectionErrorMessage. - **Get single Vanta integration by ID** (Get). Get details of a specific integration in Vanta. Requires id. Returns integrationId, displayName, resourceKinds (resource types ingested), and connections (connectionId, isDisabled, connectionErrorMessage) in the response. - **List all Vanta integration resource kinds** (List). List integration resource kinds in Vanta for a specific integration_id. Returns integrationId (the integration identifier), resourceKind (resource type), isScopable (audit scoping eligibility), canUpdateDescription, and canUpdateOwner for each kind. - **Get single Vanta integration resource kind by ID** (Get). Get details for a specific integration-resource-kinds in Vanta. Requires integration_id and id. Returns integrationId, resourceKind, isScopable, canUpdateDescription, canUpdateOwner, numResources, numInScope, numOwned, numWithDescription. - **List all Vanta resources** (List). List resources for a specific integration and resourceKind in Vanta. Requires integration_id and resource_kind. Returns fields including responseType, resourceKind, resourceId, displayName, owner, inScope, creationDate, and more. - **Get single Vanta resource by ID** (Get). Get detailed information about a specific resource in Vanta using integration_id, resource_kind, and id. Returns key fields such as responseType, resourceKind, resourceId, connectionId, displayName, owner, inScope, description, creationDate, and additional resource-specific fields. - **Update a Vanta resource by ID** (Update). Update metadata for a specific resource in Vanta. Requires integration_id, resource_kind, and id. Returns no content on success. - **Vanta resources update many** (Update). Update metadata for multiple resources in Vanta. Requires integration_id and resource_kind. Returns results array with id, status (SUCCESS or ERROR), and error message for each resource updated. - **List all Vanta monitored computers** (List). List monitored computers in Vanta. Returns id, integrationId, lastCheckDate, screenlock, diskEncryption, passwordManager, antivirusInstallation, operatingSystem, owner, serialNumber, and udid fields for each computer. - **Get single Vanta monitored computer by ID** (Get). Get a monitored computer in Vanta by id. Requires id. Returns id, integrationId, lastCheckDate, screenlock, diskEncryption, passwordManager, antivirusInstallation, operatingSystem, owner, serialNumber, and udid fields in the response. - **List all Vanta people** (List). List people in Vanta. Returns id, emailAddress, employment (status, startDate, jobTitle, endDate), leaveInfo, groupIds, name, sources, and tasksSummary (status, dueDate, completionDate, details) for each person. - **Get single Vanta person by ID** (Get). Get person in Vanta using id. Returns fields including id, emailAddress, employment (status, startDate, jobTitle, endDate), leaveInfo, groupIds, name, sources, and tasksSummary. - **Update a Vanta person by ID** (Update). Update a person's metadata in Vanta using id. Returns id, emailAddress, employment details, leaveInfo, groupIds, name, sources, and tasksSummary in the response. - **Delete a Vanta person by ID** (Delete). Offboard a list of people in Vanta. Requires each update to include acknowledgerId and id. Returns results array with each person's id, status (SUCCESS or ERROR), and error message if applicable. Eligibility depends on ex-employee status, monitored accounts deactivated, and all custom offboarding tasks completed. Unmonitored accounts are marked deactivated. Offboarding fails if unfinished tasks remain. - **Vanta people mark as not** (Action). Mark a set of accounts as 'not a person' in Vanta by providing the required updates array with id and reason. Returns the id, status, and, if any error occurs, the message for each account processed. - **Vanta people mark as** (Action). Mark a set of accounts as people in Vanta. Requires updates. Returns for each id: status indicating SUCCESS or ERROR, and message on error. - **Vanta people clear leave** (Clear). Remove leave information for a specific person in Vanta using id. Returns fields including id, emailAddress, employment details, leaveInfo, groupIds, name, sources, and tasksSummary. - **Vanta people set leave** (Set). Set leave information for a person in Vanta. Requires id, startDate, and endDate (nullable). Response returns id, emailAddress, employment, leaveInfo, groupIds, name, sources, and tasksSummary. Existing leaveInfo will be replaced. - **Get single Vanta trust center by ID** (Get). Get a Trust Center in Vanta by id. Requires id. Returns id, title, companyDescription, privacyPolicy, customDomain, isPublic, bannerSetting, customTheme, creationDate, and updatedDate fields in the response. - **Update a Vanta trust center by ID** (Update). Update a Trust Center in Vanta using id. Returns id, title, companyDescription, privacyPolicy, customDomain, isPublic, bannerSetting, customTheme, creationDate, and updatedDate fields in the response. - **List all Vanta trust center documents** (List). Use this endpoint to retrieve a list of documents published in a specific Trust Center. These documents typically include security policies, compliance reports, certifications, and other trust-related resources shared by an organization. - **List all Vanta controls library** (List). List controls-library resources in Vanta. Returns id, externalId, name, description, source, domains, owner, role, and customFields for each control. - **List all Vanta discovered vendors** (List). List discovered vendors in Vanta. Returns for each vendor: id, name, normalizedName, category, source, discoveredDate, numberOfAccounts, ignored, and rejected fields. - **Vanta discovered vendors managed vendor** (Action). Add a discovered vendor to managed vendor in Vanta. Requires id. Returns key fields: id (unique vendor ID), name, websiteUrl, accountManagerName, servicesProvided, additionalNotes, securityOwnerUserId, status, inherentRiskLevel, residualRiskLevel, contract dates, contractAmount, authentication details, and riskAttributeIds in the response. - **List all Vanta discovered vendor accounts** (List). List discovered vendor accounts in Vanta for a given discovered_vendor_id. Returns id, displayName, type, and for COMPUTER type, also owner details (id, email, displayName, type) in the response. - **List all Vanta document controls** (List). List controls associated with a document in Vanta. Requires id. Returns fields: id, externalId, name, description, source, domains, owner, role, and customFields for each control. - **List all Vanta document links** (List). List uploaded links for a specific document in Vanta. Requires id. Returns id, creationDate, effectiveDate, title, url, and description for each link in the response. - **Create a Vanta document link** (Create). Create document link in Vanta for a specific document using id. Returns id, creationDate, effectiveDate, title, url, and description for the created link. - **Delete a Vanta document link by ID** (Delete). Delete a specific document link in Vanta. Requires document_id and id. No content is returned in the response. - **Create a Vanta document owner** (Create). Set the owner of a document in Vanta. Requires id. Returns id, ownerId, category, isSensitive, title, uploadStatus, uploadStatusDate, and url for the document in the response. - **List all Vanta policies** (List). List policies in Vanta. Returns id, name, description, status, approvedAtDate, and latestVersion.status for each policy. - **Get single Vanta policy by ID** (Get). Get a policy in Vanta by id. Returns id, name, description, status, approvedAtDate, and latestVersion fields in the response. Policy ids can be found in Vanta in the URL bar after /policies/. - **List all Vanta risk scenarios** (List). List risk scenarios in Vanta. Returns riskId, description, isSensitive, likelihood, impact, residualLikelihood, residualImpact, categories, ciaCategories, treatment, owner, note, customFields, isArchived, and reviewStatus for each scenario. - **Get single Vanta risk scenario by ID** (Get). Get a risk scenario in Vanta using id. Returns riskId, description, isSensitive, likelihood, impact, residualLikelihood, residualImpact, categories, ciaCategories, treatment, owner, note, customFields, isArchived, and reviewStatus. - **Create a Vanta risk scenario** (Create). Create a risk scenario in Vanta. Requires description. Returns riskId, description, isSensitive, likelihood, impact, residualLikelihood, residualImpact, categories, ciaCategories, treatment, owner, note, customFields, isArchived, and reviewStatus. - **Update a Vanta risk scenario by ID** (Update). Update a risk scenario in Vanta. Requires id. Returns riskId, description, isSensitive, likelihood, impact, residualLikelihood, residualImpact, categories, ciaCategories, treatment, owner, note, customFields, isArchived, and reviewStatus fields in the response. - **List all Vanta tests** (List). List tests in Vanta. Returns fields such as id, name, lastTestRunDate, latestFlipDate, description, failureDescription, remediationDescription, version, category, integrations, status, deactivatedStatusInfo, remediationStatusInfo, and owner in the response. - **Get single Vanta test by ID** (Get). Get a test by id in Vanta. Requires id. Returns id for the test, name, lastTestRunDate, latestFlipDate, description, failureDescription, remediationDescription, version, category, integrations, status, deactivatedStatusInfo, remediationStatusInfo, and owner. - **List all Vanta test entities** (List). List test entities in Vanta for a specific test_id. Returns id, entityStatus, displayName, responseType, deactivatedReason, lastUpdatedDate, and createdDate fields for each entity in the response. - **Vanta test entities deactivate** (Test). Deactivate a specific test-entity in Vanta. Requires test_id and id. Returns deactivation request acceptance status. There may be a delay until the next test run. - **Vanta test entities reactivate** (Test). Reactivate a test-entity in Vanta. Requires test_id and id. Returns confirmation that the reactivation request has been accepted. Reactivation may be delayed until the next test run. - **List all Vanta vendor risk attributes** (List). List vendor risk attributes in Vanta. Returns id, name, description, vendorCategories, enabled, and riskLevel fields for each risk attribute in the response. - **List all Vanta vulnerabilities** (List). List vulnerabilities in Vanta. Returns id, name, description, integrationId, packageIdentifier, vulnerabilityType, targetId, severity, scores, dates, fixability, relatedVulns, relatedUrls, externalURL, scanSource, and deactivateMetadata fields. - **Get single Vanta vulnerability by ID** (Get). Get a vulnerability in Vanta by id. Returns id, name, description, integrationId, packageIdentifier, vulnerabilityType, targetId, firstDetectedDate, sourceDetectedDate, lastDetectedDate, severity, cvssSeverityScore, scannerScore, isFixable, remediateByDate, relatedVulns, relatedUrls, externalURL, scanSource, deactivateMetadata fields in the response. - **Vanta vulnerability monitoring reactivate** (Reactivate). Reactivate vulnerability monitoring in Vanta for specified vulnerabilities by providing their id values. Returns id, status (SUCCESS or ERROR), and message (if ERROR) for each processed vulnerability in the response. - **Vanta vulnerability monitoring deactivate** (Deactivate). Deactivate vulnerability monitoring in Vanta. Requires updates with id, deactivateReason, and shouldReactivateWhenFixable. Returns results for each id with status and, if an error occurs, a message. - **List all Vanta vulnerability remediations** (List). List vulnerability remediations in Vanta. Returns id, vulnerabilityId, vulnerableAssetId, severity, detectedDate, slaDeadlineDate, and remediationDate for each remediation. - **Create a Vanta SLA miss acknowledgment** (Create). Acknowledge SLA miss for vulnerability remediation in Vanta. Requires updates with id and slaViolationComment. Returns results array with id, status (SUCCESS or ERROR), and message for errors. - **List all Vanta vulnerabilities assets** (List). List assets associated with vulnerabilities in Vanta. Returns id, name, assetType, hasBeenScanned, imageScanTag, and scanners fields for each asset. - **Get single Vanta vulnerabilities asset by ID** (Get). Get vulnerable asset in Vanta by id. Returns id, name, assetType, hasBeenScanned, imageScanTag, and scanners (with integration and asset details) in the response. - **List all Vanta vendors** (List). List vendors in Vanta. Returns key fields such as id, name, websiteUrl, accountManagerName, accountManagerEmail, servicesProvided, status, risk levels, contract dates, authDetails, headquarters, contractAmount, category, and customFields. - **Get single Vanta vendor by ID** (Get). Get vendor in Vanta by id. Returns id, name, websiteUrl, accountManagerName, accountManagerEmail, servicesProvided, additionalNotes, securityOwnerUserId, businessOwnerUserId, contract dates, isVisibleToAuditors, isRiskAutoScored, riskAttributeIds, category, authDetails, status, risk levels, vendorHeadquarters, contractAmount, and customFields in the response. - **Create a Vanta vendor** (Create). Create a vendor in Vanta. Returns id, name, websiteUrl, accountManagerName, accountManagerEmail, servicesProvided, additionalNotes, securityOwnerUserId, businessOwnerUserId, contractStartDate, contractRenewalDate, contractTerminationDate, nextSecurityReviewDueDate, lastSecurityReviewCompletionDate, isVisibleToAuditors, isRiskAutoScored, riskAttributeIds, category, authDetails, status, inherentRiskLevel, residualRiskLevel, vendorHeadquarters, contractAmount, customFields in the response. - **Update a Vanta vendor by ID** (Update). Update a vendor in Vanta by id. Returns id, name, websiteUrl, accountManagerName, accountManagerEmail, servicesProvided, additionalNotes, securityOwnerUserId, businessOwnerUserId, contractStartDate, contractRenewalDate, contractTerminationDate, nextSecurityReviewDueDate, lastSecurityReviewCompletionDate, isVisibleToAuditors, isRiskAutoScored, riskAttributeIds, category, authDetails, status, inherentRiskLevel, residualRiskLevel, vendorHeadquarters, contractAmount, and customFields in the response. - **Delete a Vanta vendor by ID** (Delete). Delete a vendor in Vanta by id. No content is returned in the response. - **List all Vanta vendor documents** (List). List vendor documents in Vanta. Requires vendor_id. Returns id, fileName, title, description, mimeType, uploadedBy, creationDate, updatedDate, deletionDate, type, and url fields for each document. - **Create a Vanta vendor document** (Create). Add document to a vendor in Vanta. Requires vendor_id, file, and type. Returns fields: id (document identifier), fileName (file name), title, description, mimeType, uploadedBy (actor who uploaded), creationDate, updatedDate, deletionDate, type, and url (document link) in the response. - **List all Vanta vendor findings** (List). List vendor findings in Vanta for a specific vendor_id. Returns id, vendorId, securityReviewId, documentId, content, riskStatus, and remediation fields for each finding. - **Create a Vanta vendor finding** (Create). Create a vendor finding in Vanta for a given vendor_id. Returns id, vendorId, securityReviewId, documentId, content, riskStatus, and remediation fields describing the finding and its status. - **Update a Vanta vendor finding by ID** (Update). Update a vendor finding in Vanta. Requires vendor_id and id. Returns id, vendorId, securityReviewId, documentId, content, riskStatus, and remediation fields describing the updated finding. - **Delete a Vanta vendor finding by ID** (Delete). Delete a specific vendor-finding in Vanta. Requires vendor_id and id. No content is returned in the response. - **Get single Vanta security review by ID** (Get). Get a security review in Vanta. Requires vendor_id and id. Returns fields including id, vendorId, decisionNotes, comments, completedByUserId, startDate, dueDate, overrideDueDate, completionDate, and decision object for review status and timestamps. - **List all Vanta vendor security review** (List). List security reviews for a vendor in Vanta. Requires vendor_id. Returns id, vendorId, decisionNotes, comments, completedByUserId, startDate, dueDate, overrideDueDate, completionDate, and decision fields for each security review. - **List all Vanta security review documents** (List). List security review documents in Vanta for a given vendor_id and security_review_id. Returns id, fileName, title, description, mimeType, uploadedBy, creationDate, updatedDate, deletionDate, type, and url fields for each document. - **Create a Vanta security review document** (Create). Add a document to a security review in Vanta. Requires vendor_id and security_review_id. Returns id, fileName, title, description, mimeType, uploadedBy, creationDate, updatedDate, deletionDate, type, and url fields for the created document. - **Delete a Vanta security review document by ID** (Delete). Delete a security review document in Vanta. Requires vendor_id, security_review_id, and id. Returns no content in the response. - **Create a Vanta vendor status** (Create). Set status for a vendor in Vanta. Requires id and status. Returns fields such as id, name, websiteUrl, accountManagerName, accountManagerEmail, servicesProvided, additionalNotes, securityOwnerUserId, businessOwnerUserId, contractStartDate, contractRenewalDate, contractTerminationDate, nextSecurityReviewDueDate, lastSecurityReviewCompletionDate, isVisibleToAuditors, isRiskAutoScored, riskAttributeIds, category, authDetails, status, inherentRiskLevel, residualRiskLevel, vendorHeadquarters, contractAmount, and customFields providing the vendor's profile, risk, contract, and authentication details. - **List all Vanta trust center access requests** (List). List Trust Center access requests in Vanta for a specified slug_id. Returns id, email, name, companyName, reason, requestedResources, accessLevel, creationDate, and updatedDate fields for each access request in the response. - **Get single Vanta trust center access request by ID** (Get). Get a specific Trust Center access request in Vanta using slug_id and id. Returns id, email, name, companyName, reason, requestedResources, accessLevel, creationDate, and updatedDate in the response. - **Vanta trust center access requests approve** (Approve). Approve a trust-center-access-requests in Vanta. Requires slug_id and id. Returns no content in the response. - **Vanta trust center access requests deny** (Action). Deny an access request for a Trust Center in Vanta. Requires slug_id and id. No content is returned in the response. - **List all Vanta trust center activity events** (List). List Trust Center viewer activity events in Vanta. Requires slug_id. Returns id, date, eventType, details (varies by event type), viewerId, viewerEmail, city, and countryCode for each event. - **List all Vanta trust center control categories** (List). List control categories for a Trust Center in Vanta. Requires slug_id. Returns id and name fields for each control category in the response. - **Get single Vanta trust center control category by ID** (Get). Get a specific control category in Vanta Trust Center. Requires slug_id and id. Returns id (unique identifier) and name (category name) in the response. - **Create a Vanta trust center control category** (Create). Create a control category in Vanta Trust Center. Requires slug_id and name. Returns id and name of the created control category in the response. - **Update a Vanta trust center control category by ID** (Update). Update a specific Trust Center control category in Vanta. Requires slug_id and id. Returns id and name fields representing the updated control category. - **Delete a Vanta trust center control category by ID** (Delete). Delete a control category in Vanta Trust Center, along with all controls in the category. Requires slug_id and id. No content returned in response. - **List all Vanta trust center controls** (List). List controls for a Trust Center in Vanta. Requires slug_id. Returns id, name, description, and categories (id and name) for each control. - **Get single Vanta trust center control by ID** (Get). Get a specific Trust Center control in Vanta. Requires slug_id and id. Returns id (unique identifier), name (control summary), description, and categories (array of category ids and names) in the response. - **Create a Vanta trust center control** (Create). Add a control to a Trust Center in Vanta. Requires slug_id, controlId, and categoryIds. Returns id, name, description, and categories (with id and name) for the created control in the response. - **Delete a Vanta trust center control by ID** (Delete). Delete a specific trust-center-controls resource in Vanta. Requires slug_id and id. No content returned in the response. - **List all Vanta trust center faqs** (List). List Trust Center FAQs in Vanta. Requires slug_id. Returns id, question, and answer fields for each FAQ in the response. - **Get single Vanta trust center faq by ID** (Get). Get a specific Trust Center FAQ in Vanta. Requires slug_id and id. Returns id (FAQ identifier), question (FAQ question), and answer (FAQ answer) in the response. - **Create a Vanta trust center faq** (Create). Create a Trust Center FAQ in Vanta. Requires slug_id, question, and answer. Returns id (unique identifier), question, and answer in the response. - **Update a Vanta trust center faq by ID** (Update). Update a specific trust-center-faqs in Vanta. Requires slug_id and id. Returns id (unique FAQ identifier), question (FAQ question), and answer (FAQ answer) in the response. - **Delete a Vanta trust center faq by ID** (Delete). Delete a specific FAQ from the Trust Center in Vanta. Requires slug_id and id. No content is returned in the response. - **List all Vanta trust center resources** (List). List Trust Center resources in Vanta. Requires slug_id. Returns id, fileName, title, description, mimeType, creationDate, updatedDate, and isPublic fields for each resource. - **Get single Vanta trust center document by ID** (Get). Get a specific Trust Center document in Vanta. Requires slug_id and id. Returns id, fileName, title, description, mimeType, creationDate, updatedDate, and isPublic fields in the response. - **Create a Vanta trust center document** (Create). Create Trust Center document in Vanta. Requires slug_id. Returns id, fileName, title, description, mimeType, creationDate, updatedDate, and isPublic fields for the new document. - **Update a Vanta trust center document by ID** (Update). Update a specific Trust Center document in Vanta. Requires slug_id and id. Returns id, fileName, title, description, mimeType, creationDate, updatedDate, and isPublic fields in the response. - **Delete a Vanta trust center document by ID** (Delete). Delete a specific Trust Center document in Vanta. Requires slug_id and id. No content is returned in the response. - **List all Vanta trust center subprocessors** (List). List subprocessors for a Trust Center in Vanta. Requires slug_id. Returns id, name, description, location, purpose, and url fields for each subprocessor in the response. - **Get single Vanta trust center subprocessor by ID** (Get). Get a specific Trust Center subprocessor in Vanta. Requires slug_id and id. Returns id (unique identifier), name, description, location, purpose, and url of the subprocessor. - **Create a Vanta trust center subprocessor** (Create). Create a Trust Center subprocessor in Vanta. Requires slug_id and request body with name. Returns id, name, description, location, purpose, and url of the created subprocessor in the response. - **Update a Vanta trust center subprocessor by ID** (Update). Update a specific Trust Center subprocessor in Vanta. Requires slug_id and id. Returns id, name, description, location, purpose, and url fields for the updated subprocessor in the response. - **Delete a Vanta trust center subprocessor by ID** (Delete). Delete a specific subprocessor from a Trust Center in Vanta. Requires slug_id and id. Returns no content (204) in the response upon successful deletion. - **List all Vanta trust center updates** (List). List updates for a Trust Center in Vanta. Requires slug_id. Returns id, title, description, category, creationDate, updatedDate, visibilityType, and notifiedEmails for each update. - **Get single Vanta trust center update by ID** (Get). Get a specific Trust Center update in Vanta using slug_id and id. Returns id, title, description, category, creationDate, updatedDate, visibilityType, and notifiedEmails in the response. - **Create a Vanta trust center update** (Create). Create a Trust Center update in Vanta for a specified slug_id. Returns id, title, description, category, creationDate, updatedDate, visibilityType, and notifiedEmails in the response. - **Update a Vanta trust center update by ID** (Update). Update a Trust Center update in Vanta. Requires slug_id and id. Returns id, title, description, category, creationDate, updatedDate, visibilityType, and notifiedEmails fields in the response. - **Delete a Vanta trust center update by ID** (Delete). Delete a Trust Center update in Vanta. Requires slug_id and id. No content is returned in the response. - **Vanta trust center updates notify all subscribers** (Action). Send notifications for a specific trust-center-updates resource in Vanta. Requires slug_id and id. No content is returned in the response. - **List all Vanta trust center viewers** (List). List Trust Center viewers in Vanta for a given slug_id. Returns id, email, name, companyName, resourceIds, accessLevel, ndaInfo, externalServiceAssociations, creationDate, updatedDate, expirationDate, and addedByUser for each viewer. - **Get single Vanta trust center viewer by ID** (Get). Get a Trust Center viewer in Vanta by slug_id and id. Returns id, email, name, companyName, resourceIds, accessLevel, ndaInfo, externalServiceAssociations, creationDate, updatedDate, expirationDate, and addedByUser fields. - **Create a Vanta trust center viewer** (Create). Add a Trust Center viewer in Vanta. Requires slug_id, email, name, companyName, isNdaRequired, and accessLevel. Returns id, email, name, companyName, resourceIds, accessLevel, ndaInfo, externalServiceAssociations, creationDate, updatedDate, expirationDate, and addedByUser. - **Delete a Vanta trust center viewer by ID** (Delete). Remove a viewer from a Trust Center in Vanta. Requires slug_id for the Trust Center and id for the viewer. No content is returned in the response. - **List all Vanta trust center subscribers** (List). List Trust Center subscribers in Vanta using slug_id. Returns fields id (subscriber identifier), email, isEmailVerified (verification status), and creationDate (subscriber creation date) for each subscriber. - **Get single Vanta trust center subscriber by ID** (Get). Get a specific Trust Center subscriber in Vanta using slug_id and id. Returns id, email, isEmailVerified, and creationDate fields in the response. - **Create a Vanta trust center subscriber** (Create). Create a Trust Center subscriber in Vanta. Requires slug_id and email. Returns id, email, isEmailVerified (whether the email is verified), and creationDate (subscriber creation timestamp) in the response. - **Delete a Vanta trust center subscriber by ID** (Delete). Delete a Trust Center subscriber in Vanta. Requires slug_id and id. Returns no content in the response. - **List all Vanta trust center subscriber groups** (List). List Trust Center subscriber groups in Vanta by slug_id. Returns id, name, subscriberIds, and creationDate for each group in the response. - **Get single Vanta trust center subscriber group by ID** (Get). Get a specific Trust Center subscriber group in Vanta. Requires slug_id and id. Returns id, name, subscriberIds, and creationDate to identify the group, its subscribers, and when it was created. - **Create a Vanta trust center subscriber group** (Create). Create a Trust Center subscriber group in Vanta using slug_id. Returns id, name, subscriberIds, and creationDate for the new subscriber group. - **Delete a Vanta trust center subscriber group by ID** (Delete). Delete a Trust Center subscriber group in Vanta. Requires slug_id and id. No content is returned in the response. - **List all Vanta endpoint vulnerabilities connectors** (List). List API Endpoint Vulnerabilities in Vanta for the specified resource_id. Returns displayName, uniqueId, externalUrl, occurrences, severity, vulnerableComponentUniqueId, description, remediationInstructions, url, and httpMethod fields in the response. - **Vanta endpoint vulnerabilities connectors sync all** (Sync). Sync all API Endpoint Vulnerabilities in Vanta. Requires resourceId and resources. Replaces all existing resources for the given app and source_id. Response returns success indicating operation status. Must sync VulnerableComponent resources first. - **List all Vanta custom resources** (List). List all custom-resources in Vanta for a given resource_id. Returns displayName, uniqueId, and externalUrl for each resource in the response. - **Vanta custom resources sync all** (Sync). Sync all Custom Resources in Vanta by providing resourceId and resources. This operation replaces ALL existing custom resources for the given resourceId. Returns success indicating if the sync was successful. - **List all Vanta macos user computers** (List). List MacOS User Computers in Vanta for a specified resource_id. Returns displayName, uniqueId, externalUrl, collectedTimestamp, osName, osVersion, hardwareUuid, serialNumber, applications, browserExtensions, drives, users, systemScreenlockPolicies, isManaged, and autoUpdatesEnabled for each computer. - **Vanta macos user computers sync all** (Sync). Sync all macOS user computers in Vanta. Requires resourceId and resources. This replaces all existing MacosUserComputer resources for the given app and source; missing resources will be deleted. Returns success indicating sync status. - **List all Vanta package vulnerabilities** (List). List package vulnerabilities in Vanta. Requires resourceId. Returns displayName, uniqueId, externalUrl, packageName, packageVersion, severity, vulnerableComponentUniqueId, description, isResolvable, and remediationInstructions for each vulnerability. - **Vanta package vulnerabilities sync** (Sync). Sync all package-vulnerabilities in Vanta. Requires resourceId and resources. Must first sync VulnerableComponent resources and reference their uniqueId. Response returns success indicating sync status. All previous resources are replaced. - **List all Vanta secrets** (List). List secrets in Vanta for the given resourceId. Returns displayName, uniqueId, externalUrl, name, description, createdTimestamp, creator, owner, updatedTimestamp, lastAccessedTimestamp, and expiresTimestamp for each secret. Requires resourceId. - **Vanta secrets sync all** (Sync). Sync all secrets in Vanta. Requires resourceId and resources array with details such as displayName, uniqueId, externalUrl, name, description, createdTimestamp, creator, and owner. Updates all existing secrets. Returns success indicating sync status. - **List all Vanta static code vulnerability connectors** (List). List all static-code-vulnerability-connectors in Vanta. Requires resourceId. Returns displayName, uniqueId, externalUrl, occurrences, severity, confidence, isResolvable, vulnerableComponentUniqueId, description, remediationInstructions, cveId, cvss3Vector, and cvss3Score for each vulnerability. - **Vanta static code vulnerability connectors sync all** (Sync). Sync all Static Code Analysis Vulnerabilities in Vanta. Requires resourceId and resources. Returns success indicating if the sync operation was successful. Must sync VulnerableComponent resources first; references to vulnerableComponentUniqueId must be valid. - **List all Vanta user accounts** (List). List user accounts in Vanta for a specific resource_id. Returns displayName, uniqueId, externalUrl, fullName, accountName, email, permissionLevel, createdTimestamp, status, mfaEnabled, mfaMethods, authMethod, and other fields for each account. - **Vanta user accounts sync all** (Sync). Sync all user-accounts in Vanta. Requires resourceId and resources. The response returns the success status indicating if user-accounts were synced. All existing user-accounts for the app and source will be replaced. - **List all Vanta user security training statuses** (List). List user security training statuses in Vanta. Requires resource_id. Returns displayName, uniqueId, externalUrl, trainingId, trainingName, frameworksFulfilled, traineeFullName, traineeAccountName, traineeEmail, status, trainingCreatedTimestamp, trainingDueTimestamp, and trainingCompletedTimestamp for each user. - **Vanta user security training statuses sync all** (Sync). Sync all user security training statuses in Vanta. Requires resourceId and resources. Replaces all existing user security training statuses for the app and source_id. Returns success indicating sync status. - **List all Vanta vulnerable components** (List). List all vulnerable-components in Vanta for a given resource_id. Returns displayName, uniqueId, externalUrl, collectedTimestamp, name, description, and targetType fields in the response. - **Vanta vulnerable components sync** (Sync). Sync all vulnerable-components in Vanta. Requires resourceId and resources. The call replaces all existing resources for the given app and source_id. Returns success boolean indicating if the operation was successful. - **List all Vanta windows user computers** (List). List all Windows User Computers in Vanta for a given resource_id. Returns displayName, uniqueId, externalUrl, collectedTimestamp, osName, osVersion, hardwareUuid, serialNumber, and other computer properties for each computer. - **Vanta windows user computers sync all** (Sync). Sync all Windows User Computers in Vanta. Requires resourceId and resources. Returns success indicating whether Windows User Computers were synced for the integration. - **List all Vanta audits** (List). List audits in Vanta. Returns a paginated list with fields: id (audit identifier), customerOrganizationName, customerDisplayName, customerOrganizationId, audit window dates, framework, auditor details, creation and completion timestamps, and auditFocus. - **List all Vanta audit comments** (List). List audit comments in Vanta. Requires audit_id. Returns id, auditEvidenceId, text, creationDate, modificationDate, deletionDate, and email for each comment. - **List all Vanta audit controls** (List). List audit-controls for a specific audit in Vanta. Requires audit_id. Returns id, externalId, name, description, source, domains, owner, role, customFields, framework, and sections for each audit-control. - **List all Vanta audit evidence** (List). List audit evidence for a specific audit in Vanta. Requires audit_id. Returns fields such as id, externalId, status, name, creationDate, deletionDate, statusUpdatedDate, testStatus, evidenceType, evidenceId, relatedControls, and description for each evidence. - **Update a Vanta audit evidence by ID** (Update). Update audit evidence in Vanta. Requires audit_id and id. Returns id (Vanta reference), externalId (UUID mapping), status (current evidence status), name, deletionDate, creationDate, statusUpdatedDate, testStatus, evidenceType, evidenceId, relatedControls, and description fields in the response. - **List all Vanta audit evidence URL** (List). List all evidence urls for a specific audit evidence in Vanta. Requires audit_id and audit_evidence_id. Returns id (evidence reference), url (pre-signed S3 URL), filename, and isDownloadable fields in the response. - **List all Vanta audit monitored computers** (List). List monitored computers in Vanta for a specified audit_id. Returns id, integrationId, lastCheckDate, screenlock, diskEncryption, passwordManager, antivirusInstallation, operatingSystem, owner, serialNumber, and udid fields in the response. - **List all Vanta audit people** (List). List people in scope for a specific audit in Vanta. Requires audit_id. Returns fields: id, emailAddress, employment details (status, startDate, endDate, jobTitle), leaveInfo, groupIds, name, sources of info, and tasksSummary for each person. - **List all Vanta audit vulnerability remediations** (List). List vulnerability remediations in Vanta for a specific audit. Requires audit_id. Returns id, vulnerabilityId, vulnerableAssetId, severity, detectedDate, slaDeadlineDate, and remediationDate for each remediation. - **List all Vanta audit vulnerable assets** (List). List assets associated with vulnerabilities in Vanta for an audit. Requires audit_id. Returns fields including id, name, assetType, hasBeenScanned, imageScanTag, and scanners array with scanner details for each asset. - **List all Vanta audit vulnerabilities** (List). List vulnerabilities within the scope of a given audit in Vanta. Requires audit_id. Returns an array of vulnerabilities with fields including id, name, description, integrationId, packageIdentifier, vulnerabilityType, targetId, detection dates, severity, scores, isFixable, remediateByDate, relatedVulns, relatedUrls, externalURL, scanSource, and deactivateMetadata. - **List all Vanta audit vendors** (List). List vendors in scope for a specific audit in Vanta. Requires audit_id. Returns id, name, websiteUrl, accountManagerName, accountManagerEmail, servicesProvided, additionalNotes, key contract and security fields for each vendor. - **Create a Vanta auditor** (Create). Create an auditor in Vanta by providing email, givenName, and familyName. Returns id, organizationId, email, givenName, and familyName fields in the response. - **Create a Vanta group person** (Create). Add a person to a group in Vanta. Requires group_id and id. Returns fields such as id, emailAddress, employment (status, startDate, jobTitle, endDate), leaveInfo, groupIds, name (first, last, display), sources, and tasksSummary with task details in the response. - **Delete a Vanta group person by ID** (Delete). Remove a person from a group in Vanta. Requires group_id and id. Returns id, emailAddress, employment, leaveInfo, groupIds, name, sources, and tasksSummary fields for the person in the response. - **List all Vanta historical access requests** (List). List historical access requests for a Trust Center in Vanta. Requires slug_id. Returns id, email, name, companyName, reason, requestedResources, accessLevel, creationDate, updatedDate, and outcome for each request. - **List all Vanta background checks** (List). List all background checks in Vanta for the specified resource_id. Returns resources with displayName, uniqueId, externalUrl, fullName, email, status, and optional completionDate fields in the response. - **Vanta background checks sync all** (Sync). Sync all background-checks resources in Vanta. Requires resourceId and resources with displayName, uniqueId, externalUrl, fullName, email, and status. Returns success indicating if the background checks were synced.