Vanta for VS Code
io.github.mindstone/mcp-server-vanta
Vanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs
client:VS Code
transport:stdio
runtime:npm
Install Vanta in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "vanta-client-id",
"description": "VANTA_CLIENT_ID",
"password": true
},
{
"type": "promptString",
"id": "vanta-client-secret",
"description": "VANTA_CLIENT_SECRET",
"password": true
},
{
"type": "promptString",
"id": "vanta-region",
"description": "VANTA_REGION",
"password": true
},
{
"type": "promptString",
"id": "vanta-request-timeout-ms",
"description": "VANTA_REQUEST_TIMEOUT_MS",
"password": true
}
],
"servers": {
"mcp-server-vanta": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@mindstone/mcp-server-vanta"
],
"env": {
"VANTA_CLIENT_ID": "${input:vanta-client-id}",
"VANTA_CLIENT_SECRET": "${input:vanta-client-secret}",
"VANTA_REGION": "${input:vanta-region}",
"VANTA_REQUEST_TIMEOUT_MS": "${input:vanta-request-timeout-ms}"
}
}
}
}
VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs