# Connect the Vanta MCP server to Unblocked to give AI agents live compliance context URL: https://getunblocked.com/integrations/vanta/ Unblocked connects to Vanta’s MCP server so AI coding agents can query your failing tests, controls, and vulnerable assets live — then its Context Engine reconciles what they find with the code, pull requests, and conversations behind them. --- ## Vanta integration details - **Category:** Security & Compliance - **Live-queried data:** controls, tests, frameworks - **Supported products:** Vanta - **Works with:** Claude Code, Cursor, Devin, GitHub Copilot, Codex, OpenCode, VS Code — via one MCP server connection - **Maintained by:** Vanta · verified by Unblocked - **Content reviewed:** October 20, 2026 - **Website:** ## What the Vanta integration adds When a Vanta test fails, the fix almost always lives in code — an infrastructure definition, an access policy, a logging setting — but the failure lives in Vanta, and engineers bounce between the two to work out which resource is out of compliance and why. Vanta’s MCP server exposes tests, controls, and vulnerability data to AI agents, and Unblocked connects to it once so every agent can ask about compliance without its own Vanta setup. This is a third-party MCP server: Vanta hosts and maintains it, and Unblocked connects to it as a verified MCP server. Nothing is ingested or indexed — Unblocked calls the read-only tools you select at the moment a question needs them, so answers reflect your tests and controls as Vanta evaluates them now. Wiring Vanta’s MCP server straight into an agent gives it a list of failing tests. Unblocked’s Context Engine reasons across those results and your other sources — following a failing test to the resource it flags, the infrastructure change that caused it, and the Jira ticket or Slack thread where remediation was discussed — and returns one cited answer. Once connected, any MCP-compatible coding agent — Claude Code, Cursor, Devin, GitHub Copilot, Codex — reaches Vanta context through a single Unblocked MCP server connection. ### What you get - **Live tests, controls, and remediation context** — Agents see which Vanta tests are failing, the resources behind them, and the controls and frameworks they map to, as Vanta evaluates them right now. - **Compliance gaps next to the code** — Vulnerable assets and framework coverage gaps surface where engineers make changes, so a compliance fix starts in the editor instead of a dashboard. - **Read-only, tool-level control** — Tools that upload policy documents or otherwise change Vanta are never offered. You choose which read tools Unblocked may call, and Vanta still applies the signed-in user’s role. Change the selection anytime from Settings → Data Sources. - **Context Engine reasoning** — Vanta results are reconciled with your code, pull requests, tickets, and conversations, so a failing test leads to the change that broke it and the discussion about fixing it — with citations. ## How to connect Vanta to Unblocked Prerequisites: - An Unblocked account (free to start). - An active Vanta user who can sign in through Vanta’s OAuth flow for your Vanta region; some Vanta MCP tools are available only to Vanta Admins. - An MCP-compatible coding agent (Claude Code, Cursor, Devin, etc.) to use the context in your editor. ### Step 1: Connect Vanta to Unblocked 1. In Unblocked, go to Settings → Data Sources → Connect another data source, and under Security & Compliance select Vanta. 2. The Vanta MCP server URL is filled in for you. Choose OAuth, click Connect, and sign in to Vanta to authorize Unblocked. 3. Once Unblocked discovers the server’s tools, select the read-only tools it may use and click Save Settings. ### Step 2: Install the Unblocked MCP server On macOS or Linux, one command auto-detects and configures the supported agents on your machine: ```bash curl -fsSL https://getunblocked.com/install-mcp.sh | bash ``` On Windows, or when you prefer remote MCP, add the server manually using the configuration below or follow the manual install guide: Claude Code — add the remote server, then run /mcp in Claude Code, select unblocked, and log in via OAuth: ```bash claude mcp add -s user --transport http unblocked https://getunblocked.com/api/mcpsse ``` Cursor — open View: Open MCP Settings → Add Custom MCP, add the server, then click Connect to authenticate via OAuth: ```json { "mcpServers": { "unblocked": { "url": "https://getunblocked.com/api/mcpsse" } } } ``` Any MCP-compatible client (Devin, Codex, VS Code, Claude Desktop, and others) can connect to the remote server with OAuth: `https://getunblocked.com/api/mcpsse` ## Connect Vanta to Claude Code, Cursor, and other AI agents To give Claude Code, Cursor, GitHub Copilot, Codex, or another MCP-compatible AI coding agent access to Vanta context, connect Vanta to Unblocked and add the single Unblocked MCP server to your agent. Unblocked acts as the MCP context layer for your Vanta data, searching controls, tests, and frameworks alongside your other connected sources and returning cited results through these tools: - **`context_research`** — Researches a question across your connected sources and calls the Vanta tools you selected when failing tests, controls, or vulnerable assets are relevant, returning a synthesized answer with citations. - **`context_get_urls`** — Fetches the full content behind URLs your agent encounters across connected sources — Jira, Linear, Notion, Confluence, Slack, GitHub, and more. ## Questions to ask an AI agent about Vanta Questions you (or your agent) can ask Unblocked about your Vanta data: - "Which Vanta tests started failing this week, and which infrastructure pull requests merged around then?" - "What resources does the failing encryption test flag, and where are they defined in our Terraform?" - "Which controls for our audit framework have no linked evidence, and is anyone working on them in Jira?" - "Which vulnerable assets is Vanta tracking for the API service, and what did the team decide about them in Slack?" ## Vanta integration FAQ ### What is the Vanta MCP server? The Vanta MCP server is a remote Model Context Protocol server, hosted and maintained by Vanta, that lets AI agents work with your Vanta account — failing tests and the resources behind them, controls and framework mappings, linked evidence, vendors, vulnerabilities, and policies. Unblocked connects to it as a verified MCP server, so every agent reaches it through one Unblocked connection. ### Can Unblocked change my Vanta policies, vendors, or tests? No. Only read-only tools are available for selection, and Unblocked excludes any Vanta tool that might modify data, such as uploading policy documents. Agents can read why a test fails, but the fix happens in your code. ### Can engineers use this without being Vanta Admins? Vanta lets active users connect to its MCP server, and Admins get the full tool set while some tools are restricted to Admins. Which tools a connection can call depends on the Vanta user who authorizes it, plus the read-only tools you select in Unblocked. ### Is this the archived local Vanta MCP server? No. Vanta’s original open-source local MCP server is marked deprecated in favor of its hosted server. Unblocked connects to the hosted Vanta MCP server, which Vanta currently describes as in beta and released to all customers. ### Does Unblocked index my Vanta compliance data? No. Nothing from Vanta is ingested or indexed. Unblocked calls Vanta’s tools while it answers a question, so test results and control status reflect your account at that moment. ## Related integrations - [Snyk](https://getunblocked.com/integrations/snyk/) — AI asset inventory, risk, and policy context from Snyk’s verified MCP server, queried live while Unblocked answers — nothing is ingested or indexed. - [Jira](https://getunblocked.com/integrations/jira/) — Issues and projects from Jira Cloud and Data Center — with sprint-aware answers that connect tickets to the code and PRs behind them. - [GitHub](https://getunblocked.com/integrations/github/) — Repositories, pull requests, issues, discussions, and full code history — indexed, kept in sync on every push, and cited in answers. - [Pulumi](https://getunblocked.com/integrations/pulumi/) — Cloud infrastructure from Pulumi’s verified MCP server, queried live while Unblocked answers — nothing is ingested or indexed. ## Get started with Unblocked - Start a free trial: - Pricing: - All integrations: