Vanta

List all vendor risk attributes in your Vanta account. Returns attribute IDs, names, categories, and risk scoring criteria for vendor risk assessment. Use this to see all available risk attributes for evaluating vendor relationships.

list_vendor_risk_attributes

List vendor security review's documents. Get all documents associated with a specific vendor security review.

list_vendor_security_review_documents

Access people in your Vanta account. Provide personId to get a specific person, or omit to list all people. Returns person IDs, names, email addresses, and organizational information for identity and access management.

people

Access continuous monitoring tests in your Vanta account. Provide testId to get a specific test, or omit to list all tests. Returns test IDs, names, types, schedules, current status, and detailed configuration for compliance monitoring.

tests

Access vendor compliance data including documents, findings, and security reviews. Specify complianceType to get the specific type of compliance information for a vendor. Use this to explore vendor compliance documentation, security findings, and assessment history.

vendor_compliance

Access vendors in your Vanta account. Provide vendorId to get a specific vendor, or omit to list all vendors. Returns vendor details, risk levels, and management status for third-party risk assessment.

vendors

Access vulnerabilities in your Vanta account. Provide vulnerabilityId to get a specific vulnerability, or omit to list all vulnerabilities. Returns vulnerability details, severity levels, and status for security monitoring.

vulnerabilities

Create a new risk scenario or update an existing one. Provide riskScenarioId to update an existing risk scenario (by custom ID or Mongo ID). Omit riskScenarioId to create a new risk scenario (description is required for creation). Returns the created or updated risk scenario.

Returns a pre-signed URL for a policy document

Fix, remediate, or resolve a failing Vanta compliance test. Use this tool when a user wants to fix a test, remediate a failure, understand why a test is failing, or asks about a test by ID or Vanta URL. Returns detailed remediation instructions with test-specific context, failing entities, and actionable fix guidance. Always call this before attempting any fix. Extract the test ID from a Vanta URL's last path segment, e.g. from https://app.vanta.com/c/example.com/tests/nosql-database-monitored-and-alarmed-config-read the testId is 'nosql-database-monitored-and-alarmed-config-read'.

Retrieve the requirements for a specific framework. frameworkId must be a canonical id from listFrameworks (e.g. 'pciDss4', 'iso27001'); call listFrameworks first if unsure.

List all available security/privacy/compliance frameworks in Vanta, indicating which ones are in USER's program

List all policies types in the Vanta platform

Access risk scenarios in your Vanta account. Provide riskId to get a specific risk scenario, or omit to list all risks with optional filtering and pagination. Returns risk details, impact assessments, and mitigation strategies for compliance reporting.

Uploads a document to a policy. Uses an existing draft version if one exists, or creates a new one.