Skip to content
VS Code

Vanta for VS Code

io.github.mindstone/mcp-server-vanta

Vanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs

client:VS Code transport:stdio runtime:npm

Install Vanta in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "vanta-client-id",
      "description": "VANTA_CLIENT_ID",
      "password": true
    },
    {
      "type": "promptString",
      "id": "vanta-client-secret",
      "description": "VANTA_CLIENT_SECRET",
      "password": true
    },
    {
      "type": "promptString",
      "id": "vanta-region",
      "description": "VANTA_REGION",
      "password": true
    },
    {
      "type": "promptString",
      "id": "vanta-request-timeout-ms",
      "description": "VANTA_REQUEST_TIMEOUT_MS",
      "password": true
    }
  ],
  "servers": {
    "mcp-server-vanta": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@mindstone/mcp-server-vanta"
      ],
      "env": {
        "VANTA_CLIENT_ID": "${input:vanta-client-id}",
        "VANTA_CLIENT_SECRET": "${input:vanta-client-secret}",
        "VANTA_REGION": "${input:vanta-region}",
        "VANTA_REQUEST_TIMEOUT_MS": "${input:vanta-request-timeout-ms}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

Vanta in other clients