Vanta MCP connector
Connecting Vanta to Elaichi lets Claude, ChatGPT, Cursor, Microsoft Copilot, and any other MCP client read and update your controls, documents, tests, and frameworks, with each person signed in as themselves and every action recorded in an audit log.
- App credentials
- Free 14-day trial
- No credit card
Which Vanta controls have failing control tests this week?
Working in Vanta with Elaichi
-
List all Vanta controls
-
Get single Vanta control by ID
-
List all Vanta control documents
How to connect Vanta to Claude, ChatGPT, Cursor or Microsoft Copilot
Step by step, for each AI app
Vanta MCP connector for Claude
-
1
Open Customize, then Connectors.
-
2
Press Add.
-
3
Name it, paste the MCP server URL, then Continue.
https://api.elaichi.ai/mcp -
4
Sign in and approve.
On Team and Enterprise, an Owner adds it once. Everyone else turns it on for themselves.
Vanta MCP connector for Claude Code
-
1
In a terminal, run
claude mcp addwith the endpoint.https://api.elaichi.ai/mcp -
2
Start Claude Code and run
/mcp. -
3
Pick elaichi, then sign in and approve in the browser.
Terminal
$ claude mcp add --transport http elaichi --scope user https://api.elaichi.ai/mcp
Use --scope project instead to share it with the repository through .mcp.json.
Vanta MCP connector for ChatGPT
-
1
Open Plugins, then press the + button.
-
2
Name it and paste the endpoint into Server URL.
https://api.elaichi.ai/mcp -
3
Leave Authentication on OAuth, then tick the risk acknowledgement.
-
4
Press Create, then sign in and approve.
Works on the web. The plugin directory lives at chatgpt.com/plugins.
Vanta MCP connector for Cursor
-
1
Open
~/.cursor/mcp.json. -
2
Add the endpoint under
mcpServers.https://api.elaichi.ai/mcp -
3
Reload Cursor, then sign in and approve.
~/.cursor/mcp.json
{
"mcpServers": {
"elaichi": {
"url": "https://api.elaichi.ai/mcp"
}
}
}
Set up per machine, so repeat it on each computer you work from.
Vanta MCP connector for Microsoft Copilot
-
1
In Copilot Studio, open your agent, then Tools, Add a tool, New tool and Model Context Protocol.
-
2
Paste the endpoint into Server URL, choose OAuth 2.0, then Dynamic discovery, and press Create.
https://api.elaichi.ai/mcp -
3
Create a new connection, sign in and approve, then press Add to agent.
-
4
Under Channels, open Teams and Microsoft Copilot and make the agent available in Microsoft Copilot.
- Server URL
- https://api.elaichi.ai/mcp
- Authentication
- OAuth 2.0
- Type
- Dynamic discovery
Microsoft Copilot was called Microsoft 365 Copilot. Keep the tool on end-user credentials, so each person signs in as themselves.
Connect Vanta to any MCP client
-
1
Add the endpoint as a remote MCP server.
https://api.elaichi.ai/mcp -
2
Sign in and approve.
{
"mcpServers": {
"elaichi": {
"url": "https://api.elaichi.ai/mcp"
}
}
}
The Elaichi Agent already has these tools, with nothing to set up.
What teams do with Vanta through Elaichi
Ask in plain English. Each person’s AI can do only what they’re allowed to, and every action it takes in Vanta is logged.
-
Compliance
Find every control still missing an owner
Ask which Vanta controls have no owner assigned, then set the right person on each one without opening every record by hand.
-
Security
Attach evidence after a fix ships
Once a gap is closed, add the screenshot or export as a control document in Vanta so the control shows evidence before the auditor asks.
-
IT
Upload a policy and submit it
Create the document in Vanta, attach the signed policy file, and submit it for review in one conversation instead of three clicks and an email.
-
Compliance
See what a new framework will require
List the frameworks in your Vanta account, pull one up in detail, and add the controls you still need from the library.
-
Engineering
Add a test to a control
When a control is verified by a check your team already runs, record that test against the Vanta control so it stays visible to the compliance team.
-
Legal
Pull the file an auditor asked for
Ask for the current version of a Vanta document by name, download the attached file, and hand it over without searching folders.
Try asking
- “Which Vanta controls have failing control tests this week?”
- “List Vanta controls with no owner set.”
- “Show control documents uploaded in Vanta this month.”
What connecting Vanta gets you
6 screens from Elaichi, each doing one job for your Vanta account.
Ask Elaichi to work across your apps.
Which Vanta controls have failing control tests this week?
List Vanta controls with no owner set.
Show control documents uploaded in Vanta this month.
Also runs in Claude, ChatGPT, Cursor or Microsoft Copilot
The agent
Ask about controls, get answers from Vanta.
Plain language questions return live Vanta controls, tests and documents.
Copy the endpoint
AI apps
One Vanta endpoint for every MCP client.
Claude, ChatGPT, Cursor and Microsoft Copilot connect over OAuth, no SDK, no shared key.
Tool catalog
182 Vanta tools ready without custom code.
Controls, control tests, control documents and documents, each with full methods.
Toolboxes
Every team gets its own Vanta toolbox.
Curate one toolbox per team and scope it to the Vanta work they own.
Shared connections
Teammates use Vanta without seeing a credential.
See who connected each Vanta account and which teams and members it reaches.
Audit log
Every Vanta call is on the record.
When, who, what happened, type and resource for each control and document change.
From answering questions to doing the work
A trigger starts the work, inside the same permissions and the same audit log as everything else. Automations, collections and live dashboards come with the Black plan.
Vanta digest
Run 418 · started 2 minutes ago · on behalf of Emily Carter
-
✓
Schedule
Every weekday at 8:00 AM
0.2s -
✓
Fetch controls
Vanta
1.4s -
✓
Group by owner
Transform
0.1s -
✓
Draft the digest
Agent step
Ran with 4 tools, returned a structured summary
6.2s -
Approve the digest
Needs approval
Assigned to Jake Morgan
Approve Deny -
Post the digest
Vanta
Queued
Automations
A schedule fires and Vanta work finishes.
Fetch controls, group them, draft a digest, get approval, post back to Vanta.
Vanta health
Refreshed 4 minutes ago · every 15 minutes · from the controls collection
Controls
1,284 ↓ 12%
Control tests
96 ↓ 8%
Needs attention
3 ↑ 2
Updated this week
412 ↑ 9%
Controls created
Last 14 days
By team
Share of activity
Security 34%
Compliance 27%
Engineering 21%
IT Operations 18%
Collections and dashboards
Vanta compliance numbers, counted not generated.
Four metrics, 14 days of controls created, split by team, refreshed on schedule.
For IT and engineering
Elaichi vs Zapier MCP vs Composio for Vanta
All three can connect Vanta to an AI assistant, and all three have admin controls. They differ in where access lives and how you pay.
| What to check | Elaichi | Zapier MCP | Composio |
|---|---|---|---|
| Where the AI connects |
One address for the whole organization.
https://api.elaichi.ai/mcp
|
A server per member, created at sign-in. | An MCP endpoint per team, or an SDK. |
| Control over Vanta tools | Allow or restrict single Vanta tools, per role or user. | App and action restrictions on the account. | Role permissions, down to the action. |
| Record of calls | One audit entry per Vanta call. | A History tab of tool calls. | A log of every tool call. |
| Single sign-on | SAML or OIDC, plus SCIM, on Gold. | SAML on Enterprise. | SAML and OIDC on Enterprise. |
| Price | Free for one person; $15 per user per month on Gold. | 2 tasks per successful call. | Billed per tool call. |
Sources: Zapier MCP docs, security, usage; Composio docs, gateway, enterprise, pricing. Checked September 2026.
Longer take: Zapier MCP alternative and when you don't need an MCP gateway.
Vanta tools for your AI agents
182 tools are ready to call through Elaichi's MCP endpoint the moment you connect Vanta, governed by the same roles, restrictions, and audit log as everything else in Elaichi.
No tools match your search.
Questions, answered
How do I connect Vanta to Claude?
Two steps. In Elaichi, add the Vanta connector and enter your Vanta app credentials, then paste https://api.elaichi.ai/mcp into Claude under Customize, then Connectors, then Add. There is no OAuth application to register in Vanta and no client ID or secret to generate. It takes a few minutes.
Does Vanta work with ChatGPT and Cursor as well as Claude?
Yes. Once Vanta is connected in Elaichi, the same https://api.elaichi.ai/mcp endpoint works in Claude, ChatGPT, Cursor, Microsoft Copilot, any other MCP client, and the Elaichi Agent. You connect Vanta once and every client uses that one connection.
What can an AI agent actually do with my Vanta data?
It can list your Vanta controls, find the ones with no owner and assign one, add controls from the library, and create or remove controls and their tests. It can also create and submit documents, attach or download the files behind them, and look up the frameworks your Vanta account tracks. Because Vanta exposes a lot of actions, short concrete asks like "show controls without an owner" work better than long paragraphs.
Does connecting Vanta give the AI access to everything in my Vanta account?
No. Every call to Vanta runs inside the access of the person who signed in, so the agent sees only the controls, documents, and frameworks that person could already see in Vanta. Elaichi can narrow that access further with restrictions, and it can never widen it beyond what Vanta itself allows.
Can I stop an agent from deleting or changing things in Vanta?
Yes. Restrictions in Elaichi apply per action, so you can allow reading Vanta controls and documents while restricting deletes, updates, or submissions. A restricted action still appears in Elaichi's tool search, flagged as restricted, but Claude, ChatGPT, Cursor, Microsoft Copilot, or any other client cannot run it, whatever the prompt says.
What happens to a Vanta connection when someone leaves?
Offboarding that person in Elaichi ends their access to Vanta through every client at once. If they connected Vanta and shared it, the connection keeps working for everyone else on the team. If you ever want Vanta gone entirely, disconnecting it once in Elaichi removes it from Claude, ChatGPT, Cursor, Microsoft Copilot, and every other client together.
Does the Vanta MCP connector work with Gemini, Codex, Claude Code or other MCP clients?
Yes. Vanta is reached over the same MCP endpoint every client uses, so anything that speaks MCP can call it — Gemini, Codex, Claude Code, Windsurf, Cline, Zed and OpenCode among them — alongside Claude, ChatGPT, Cursor, Microsoft Copilot, and the Elaichi Agent. The tools on offer and the access behind them are identical whichever client asks. Only the setup screen differs.
Is Elaichi an alternative to Zapier MCP for Vanta?
Yes. Both let Claude, ChatGPT or Cursor use Vanta. Zapier MCP fits a team that already automates in Zapier, since each person signs in and acts as themselves in that account. Elaichi fits when IT wants one address for the whole company, per-tool rules by role, and a record of every Vanta call.
How is Elaichi different from Composio for Vanta?
Composio gives AI agents tools and sign-in handling across 1,000+ apps, for developers building agents or people using an assistant, billed per tool call. Elaichi gives a company's own people governed access to Vanta: one address, restrictions per role or user, and $15 per user per month. Both have role permissions and a log of every call.
Put Vanta in front of your team
14 days of Black, no credit card. Connect it once and pick what each team can call.
When the trial ends, nothing is deleted. You move to the free Personal plan, and connections, roles and the audit log stay where they are.
Add one link to your AI app
The same link for everyone on your team.
https://api.elaichi.ai/mcp
ChatGPT
Claude
Cursor
Microsoft Copilot