Skip to content

Vanta MCP connector

Connecting Vanta to Elaichi lets Claude, ChatGPT, Cursor, Microsoft Copilot, and any other MCP client read and update your controls, documents, tests, and frameworks, with each person signed in as themselves and every action recorded in an audit log.

  • App credentials
  • Free 14-day trial
  • No credit card
ChatGPT Elaichi connected

Which Vanta controls have failing control tests this week?

Working in Vanta with Elaichi

  • List all Vanta controls
  • Get single Vanta control by ID
  • List all Vanta control documents
Ask anything…
Governance / Audit log Last 24 hours
Vanta List all Vanta control documents Emily Carter · ChatGPT · 9:41 AM Done
Vanta Get single Vanta control by ID Emily Carter · ChatGPT · 9:41 AM Done
Vanta List all Vanta controls Emily Carter · ChatGPT · 9:41 AM Done
Vanta Create a Vanta control Megan Brooks · Claude · 9:38 AM Done
Vanta Update a Vanta control by ID Ryan Hayes · Cursor · 9:35 AM Done

How to connect Vanta to Claude, ChatGPT, Cursor or Microsoft Copilot

Step by step, for each AI app

Vanta MCP connector for Claude

  1. 1

    Open Customize, then Connectors.

  2. 2

    Press Add.

  3. 3

    Name it, paste the MCP server URL, then Continue.

    https://api.elaichi.ai/mcp
  4. 4

    Sign in and approve.

On Team and Enterprise, an Owner adds it once. Everyone else turns it on for themselves.

Vanta MCP connector for Claude Code

  1. 1

    In a terminal, run claude mcp add with the endpoint.

    https://api.elaichi.ai/mcp
  2. 2

    Start Claude Code and run /mcp.

  3. 3

    Pick elaichi, then sign in and approve in the browser.

Terminal

$ claude mcp add --transport http elaichi --scope user https://api.elaichi.ai/mcp

Use --scope project instead to share it with the repository through .mcp.json.

Vanta MCP connector for ChatGPT

  1. 1

    Open Plugins, then press the + button.

  2. 2

    Name it and paste the endpoint into Server URL.

    https://api.elaichi.ai/mcp
  3. 3

    Leave Authentication on OAuth, then tick the risk acknowledgement.

  4. 4

    Press Create, then sign in and approve.

Works on the web. The plugin directory lives at chatgpt.com/plugins.

Vanta MCP connector for Cursor

  1. 1

    Open ~/.cursor/mcp.json.

  2. 2

    Add the endpoint under mcpServers.

    https://api.elaichi.ai/mcp
  3. 3

    Reload Cursor, then sign in and approve.

~/.cursor/mcp.json

{
  "mcpServers": {
    "elaichi": {
      "url": "https://api.elaichi.ai/mcp"
    }
  }
}

Set up per machine, so repeat it on each computer you work from.

Vanta MCP connector for Microsoft Copilot

  1. 1

    In Copilot Studio, open your agent, then Tools, Add a tool, New tool and Model Context Protocol.

  2. 2

    Paste the endpoint into Server URL, choose OAuth 2.0, then Dynamic discovery, and press Create.

    https://api.elaichi.ai/mcp
  3. 3

    Create a new connection, sign in and approve, then press Add to agent.

  4. 4

    Under Channels, open Teams and Microsoft Copilot and make the agent available in Microsoft Copilot.

Server URL
https://api.elaichi.ai/mcp
Authentication
OAuth 2.0
Type
Dynamic discovery

Microsoft Copilot was called Microsoft 365 Copilot. Keep the tool on end-user credentials, so each person signs in as themselves.

Connect Vanta to any MCP client

  1. 1

    Add the endpoint as a remote MCP server.

    https://api.elaichi.ai/mcp
  2. 2

    Sign in and approve.

{
  "mcpServers": {
    "elaichi": {
      "url": "https://api.elaichi.ai/mcp"
    }
  }
}

The Elaichi Agent already has these tools, with nothing to set up.

What teams do with Vanta through Elaichi

Ask in plain English. Each person’s AI can do only what they’re allowed to, and every action it takes in Vanta is logged.

  • Compliance

    Find every control still missing an owner

    Ask which Vanta controls have no owner assigned, then set the right person on each one without opening every record by hand.

  • Security

    Attach evidence after a fix ships

    Once a gap is closed, add the screenshot or export as a control document in Vanta so the control shows evidence before the auditor asks.

  • IT

    Upload a policy and submit it

    Create the document in Vanta, attach the signed policy file, and submit it for review in one conversation instead of three clicks and an email.

  • Compliance

    See what a new framework will require

    List the frameworks in your Vanta account, pull one up in detail, and add the controls you still need from the library.

  • Engineering

    Add a test to a control

    When a control is verified by a check your team already runs, record that test against the Vanta control so it stays visible to the compliance team.

  • Legal

    Pull the file an auditor asked for

    Ask for the current version of a Vanta document by name, download the attached file, and hand it over without searching folders.

Try asking

  • “Which Vanta controls have failing control tests this week?”
  • “List Vanta controls with no owner set.”
  • “Show control documents uploaded in Vanta this month.”

See all 182 Vanta tools →

What connecting Vanta gets you

6 screens from Elaichi, each doing one job for your Vanta account.

Elaichi Agent

Ask Elaichi to work across your apps.

Which Vanta controls have failing control tests this week?

List Vanta controls with no owner set.

Show control documents uploaded in Vanta this month.

Also runs in Claude, ChatGPT, Cursor or Microsoft Copilot

The agent

Ask about controls, get answers from Vanta.

Plain language questions return live Vanta controls, tests and documents.

ElaichiAI apps
Claude ChatGPT Cursor Microsoft Copilot

Copy the endpoint

https://api.elaichi.ai/mcp
Client Connected by Status Last used
Claude
E

Emily Carter

• Connected 4 minutes ago
Cursor
M

Megan Brooks

• Connected 2 hours ago
ChatGPT
R

Ryan Hayes

• Connected Yesterday

AI apps

One Vanta endpoint for every MCP client.

Claude, ChatGPT, Cursor and Microsoft Copilot connect over OAuth, no SDK, no shared key.

ElaichiTools
Tool Action Description
List all Vanta controls List List controls in Vanta. Returns id, externalId, name, description, source, domains, owner, role, and customFields for each control.
Get single Vanta control by ID Get Get a control in Vanta by id. Returns fields such as id, externalId, name, description, source, domains, owner, customFields, numDocumentsPassing, numDocumentsTotal, numTestsPassing, numTestsTotal, status, role, and note.
Create a Vanta control Create Create a custom control in Vanta. Requires externalId, name, description, effectiveDate, and domain as parameters. Returns id, externalId, name, description, source, domains, owner, role, and customFields, which include information about the newly created control.
Update a Vanta control by ID Update Update a control's metadata in Vanta using id. Returns id (control's unique ID), externalId (external control ID), name, description, source, domains, owner, role, and customFields in the response.
Delete a Vanta control by ID Delete Delete a specific control in Vanta using id. No content is returned in the response when the control is successfully removed.

Tool catalog

182 Vanta tools ready without custom code.

Controls, control tests, control documents and documents, each with full methods.

ElaichiToolboxes
Name Source template Tools Created

Security toolbox

Vanta · controls and control tests

Vanta starter 18 Mar 4, 2026

Compliance toolbox

Vanta · frameworks and evidence documents

— 9 Mar 2, 2026

Engineering toolbox

Vanta · failing tests and remediation

— 24 Feb 27, 2026

IT Operations toolbox

Vanta · control owners and policies

Vanta starter 6 Feb 19, 2026

Legal toolbox

Vanta · documents and attestations

— 31 Jan 30, 2026

Audit toolbox

Vanta · read only control history

— 12 Jan 22, 2026

Toolboxes

Every team gets its own Vanta toolbox.

Curate one toolbox per team and scope it to the Vanta work they own.

ElaichiConnections
Connection Scope Status Access
VA

Vanta (Security)

Connected by Emily Carter

Personal • Active 1 team · 6 members
VA

Vanta (Compliance)

Connected by Jake Morgan

Organization • Active 3 teams · 24 members
VA

Vanta (Engineering)

Connected by Megan Brooks

Organization • Active 2 teams · 11 members
VA

Vanta (IT Operations)

Connected by Tyler Reed

Personal • Needs re-auth 1 team · 3 members
VA

Vanta (Legal)

Connected by Ryan Hayes

Personal • Active Not shared
VA

Vanta (Audit)

Connected by Ashley Parker

Personal • Active 2 teams · 9 members

Shared connections

Teammates use Vanta without seeing a credential.

See who connected each Vanta account and which teams and members it reaches.

ElaichiAudit log
When Who What happened Type

2 minutes ago

Mar 6, 2026, 3:10 PM

E

Emily Carter

[email protected]

Restriction Created Access

8 minutes ago

Mar 6, 2026, 3:04 PM

J

Jake Morgan

[email protected]

Restriction Updated Access

14 minutes ago

Mar 6, 2026, 2:58 PM

M

Megan Brooks

[email protected]

Role Assigned Access

20 minutes ago

Mar 6, 2026, 2:52 PM

T

Tyler Reed

[email protected]

Vanta Users Updated MCP

26 minutes ago

Mar 6, 2026, 2:46 PM

R

Ryan Hayes

[email protected]

Vanta Controls Created MCP

32 minutes ago

Mar 6, 2026, 2:40 PM

A

Ashley Parker

[email protected]

Vanta Controls List Toolbox

Audit log

Every Vanta call is on the record.

When, who, what happened, type and resource for each control and document change.

From answering questions to doing the work

A trigger starts the work, inside the same permissions and the same audit log as everything else. Automations, collections and live dashboards come with the Black plan.

Vanta digest

Run 418 · started 2 minutes ago · on behalf of Emily Carter

  1. ✓

    Schedule

    Every weekday at 8:00 AM

    0.2s
  2. ✓

    Fetch controls

    Vanta

    1.4s
  3. ✓

    Group by owner

    Transform

    0.1s
  4. ✓

    Draft the digest

    Agent step

    Ran with 4 tools, returned a structured summary

    6.2s
  5. Approve the digest

    Needs approval

    Assigned to Jake Morgan

    Approve
  6. Post the digest

    Vanta

    Queued

Automations

A schedule fires and Vanta work finishes.

Fetch controls, group them, draft a digest, get approval, post back to Vanta.

Vanta health

Refreshed 4 minutes ago · every 15 minutes · from the controls collection

Live

Controls

1,284 ↓ 12%

Control tests

96 ↓ 8%

Needs attention

3 ↑ 2

Updated this week

412 ↑ 9%

Controls created

Last 14 days

By team

Share of activity

Security 34%

Compliance 27%

Engineering 21%

IT Operations 18%

Collections and dashboards

Vanta compliance numbers, counted not generated.

Four metrics, 14 days of controls created, split by team, refreshed on schedule.

For IT and engineering

Elaichi vs Zapier MCP vs Composio for Vanta

All three can connect Vanta to an AI assistant, and all three have admin controls. They differ in where access lives and how you pay.

Elaichi compared with Zapier MCP and Composio for Vanta, by what to check
What to check Elaichi Zapier MCP Composio
Where the AI connects One address for the whole organization. https://api.elaichi.ai/mcp A server per member, created at sign-in. An MCP endpoint per team, or an SDK.
Control over Vanta tools Allow or restrict single Vanta tools, per role or user. App and action restrictions on the account. Role permissions, down to the action.
Record of calls One audit entry per Vanta call. A History tab of tool calls. A log of every tool call.
Single sign-on SAML or OIDC, plus SCIM, on Gold. SAML on Enterprise. SAML and OIDC on Enterprise.
Price Free for one person; $15 per user per month on Gold. 2 tasks per successful call. Billed per tool call.

Sources: Zapier MCP docs, security, usage; Composio docs, gateway, enterprise, pricing. Checked September 2026.

Longer take: Zapier MCP alternative and when you don't need an MCP gateway.

Vanta tools for your AI agents

182 tools are ready to call through Elaichi's MCP endpoint the moment you connect Vanta, governed by the same roles, restrictions, and audit log as everything else in Elaichi.

Questions, answered

How do I connect Vanta to Claude?

Two steps. In Elaichi, add the Vanta connector and enter your Vanta app credentials, then paste https://api.elaichi.ai/mcp into Claude under Customize, then Connectors, then Add. There is no OAuth application to register in Vanta and no client ID or secret to generate. It takes a few minutes.

Does Vanta work with ChatGPT and Cursor as well as Claude?

Yes. Once Vanta is connected in Elaichi, the same https://api.elaichi.ai/mcp endpoint works in Claude, ChatGPT, Cursor, Microsoft Copilot, any other MCP client, and the Elaichi Agent. You connect Vanta once and every client uses that one connection.

What can an AI agent actually do with my Vanta data?

It can list your Vanta controls, find the ones with no owner and assign one, add controls from the library, and create or remove controls and their tests. It can also create and submit documents, attach or download the files behind them, and look up the frameworks your Vanta account tracks. Because Vanta exposes a lot of actions, short concrete asks like "show controls without an owner" work better than long paragraphs.

Does connecting Vanta give the AI access to everything in my Vanta account?

No. Every call to Vanta runs inside the access of the person who signed in, so the agent sees only the controls, documents, and frameworks that person could already see in Vanta. Elaichi can narrow that access further with restrictions, and it can never widen it beyond what Vanta itself allows.

Can my team share one Vanta connection?

Yes. One person connects Vanta in Elaichi and shares the connection with a team, and nobody else ever handles the Vanta credentials. Each teammate still signs in to Elaichi as themselves, so the audit log records who assigned an owner or submitted a document, not just that the shared connection did.

Can I stop an agent from deleting or changing things in Vanta?

Yes. Restrictions in Elaichi apply per action, so you can allow reading Vanta controls and documents while restricting deletes, updates, or submissions. A restricted action still appears in Elaichi's tool search, flagged as restricted, but Claude, ChatGPT, Cursor, Microsoft Copilot, or any other client cannot run it, whatever the prompt says.

What happens to a Vanta connection when someone leaves?

Offboarding that person in Elaichi ends their access to Vanta through every client at once. If they connected Vanta and shared it, the connection keeps working for everyone else on the team. If you ever want Vanta gone entirely, disconnecting it once in Elaichi removes it from Claude, ChatGPT, Cursor, Microsoft Copilot, and every other client together.

Does the Vanta MCP connector work with Gemini, Codex, Claude Code or other MCP clients?

Yes. Vanta is reached over the same MCP endpoint every client uses, so anything that speaks MCP can call it — Gemini, Codex, Claude Code, Windsurf, Cline, Zed and OpenCode among them — alongside Claude, ChatGPT, Cursor, Microsoft Copilot, and the Elaichi Agent. The tools on offer and the access behind them are identical whichever client asks. Only the setup screen differs.

Is Elaichi an alternative to Zapier MCP for Vanta?

Yes. Both let Claude, ChatGPT or Cursor use Vanta. Zapier MCP fits a team that already automates in Zapier, since each person signs in and acts as themselves in that account. Elaichi fits when IT wants one address for the whole company, per-tool rules by role, and a record of every Vanta call.

How is Elaichi different from Composio for Vanta?

Composio gives AI agents tools and sign-in handling across 1,000+ apps, for developers building agents or people using an assistant, billed per tool call. Elaichi gives a company's own people governed access to Vanta: one address, restrictions per role or user, and $15 per user per month. Both have role permissions and a log of every call.

Put Vanta in front of your team

14 days of Black, no credit card. Connect it once and pick what each team can call.

When the trial ends, nothing is deleted. You move to the free Personal plan, and connections, roles and the audit log stay where they are.

Add one link to your AI app

The same link for everyone on your team.

https://api.elaichi.ai/mcp
  • ChatGPT
  • Claude
  • Cursor
  • Microsoft Copilot