68 more MCP tools are now available to non-admins

Jacob G. · 2026-10-12T16:53:19.688Z

:vanta-mcp: 68 (!!) more MCP tools, now open to non-admins :vanta-mcp: No admin badge required. 68 additional MCP tools are now available to non-admins and the agents they connect, so more of your team can pull answers and take action from the AI tools they already use. Each tool follows the permissions of the person who’s connected, so everyone sees and does only what their role allows. See thread for list of updated capabilities 🧵 --- Availability: Customers with the MCP connected (https://help.vanta.com/en/articles/14094979-connecting-to-vanta-mcp)

1 comment

· Sorted by Oldest

Jacob G.
·
·
Frameworks & Controls
Read frameworks, framework requirements, and associated controls.
Read controls and associated documents and tests.
Create, update, deactivate, and reactivate controls, and manage control custom fields.
Map and unmap tests and documents to controls.
Read, create, and update common controls and their mappings to framework controls. (admin-only)
Tests & Remediation
Read tests and associated entities.
Generate prompts for remediating failing compliance tests.
Read per-resource evidence for automated tests.
Assign test owners, trigger test reruns, and deactivate or reactivate tests and individual test entities.
Read and update remediation SLA settings.
Policies & Documents
Read, upload, and download policies and other documents.
Generate draft policy content from templates.
Search policy contents and read policy acceptance statistics.
Read controls mapped to policies, including AI-suggested mappings.
Create and delete policies, update policy details, and submit policy drafts for approval.
Map and unmap controls to policies. (admin-only)
Read policy contradictions and SLA inconsistencies across policies.
Create custom documents (recurring evidence requirements).
Read the extracted contents of uploaded evidence documents. (admin-only)
Risk Management
Read, create, and update risk scenarios.
Read, create, update, and delete risk registers.
Vendors & Vendor Risk
Read vendor records and discovered vendors.
Read vendor compliance data (documents, findings, security reviews).
Read vendor risk attributes and security review details.
Read vendor assessment questionnaires, findings, and documentation. (admin-only)
Read vendor assessment configuration: assessment types, rules, automations, and custom fields. (admin-only)
Contracts & Commitments
Read customer contracts and the commitments extracted from them, including gap analysis.
Read the standard commitment library and standard papers.
Personnel & Computers
Read comprehensive details for personnel records. (admin-only)
Read personnel groups, including membership and assigned tasks.
Read computers and devices.
Users & Teams
Look up user accounts and teams, e.g. to assign owners.
Access Management
Read access accounts.
Read access requests, reviews, and detailed review information.
Read access systems.
Read apps in the access program and their access requests.
Retrieve offboarding tasks for terminated employees.
Audits
Read metadata and status details for audits.
Read individual audit requests.
Edit audit observation dates and auditor early-access dates.
Privacy
Read data processing activities and categories.
Read data processing vendors or controllers.
Read details for privacy impact assessments.
Create, update, delete processing activities and categories
Create, update, delete privacy impact assessments of different types (DPIA, LIA, TRA)
Create, update, delete data processing controllers
Link/unlink processing activities to impact assessments
Link/unlink risks to impact assessments
Submit privacy impact assessments for approval.
Upload privacy impact assessments and new assessment versions, and create new in-platform versions.
Read, create, update, and delete data inventory (ROPA) custom fields.
Read, create, and update data subject requests (DSRs), and attach or remove DSR evidence.
Questionnaire Automation & Knowledge Base
Search the trust knowledge base and answer library.
Read details for security questionnaires.
Read knowledge base coverage analysis and insights.
Issues
Read and update issues.
Integrations & Vulnerabilities
Read connected integrations.
Read vulnerabilities in your Vanta account.
Read assets monitored by vulnerability scanners.

Jacob G.
·
·
Frameworks & Controls
Read frameworks, framework requirements, and associated controls.
Read controls and associated documents and tests.
Create, update, deactivate, and reactivate controls, and manage control custom fields.
Map and unmap tests and documents to controls.
Read, create, and update common controls and their mappings to framework controls. (admin-only)
Tests & Remediation
Read tests and associated entities.
Generate prompts for remediating failing compliance tests.
Read per-resource evidence for automated tests.
Assign test owners, trigger test reruns, and deactivate or reactivate tests and individual test entities.
Read and update remediation SLA settings.
Policies & Documents
Read, upload, and download policies and other documents.
Generate draft policy content from templates.
Search policy contents and read policy acceptance statistics.
Read controls mapped to policies, including AI-suggested mappings.
Create and delete policies, update policy details, and submit policy drafts for approval.
Map and unmap controls to policies. (admin-only)
Read policy contradictions and SLA inconsistencies across policies.
Create custom documents (recurring evidence requirements).
Read the extracted contents of uploaded evidence documents. (admin-only)
Risk Management
Read, create, and update risk scenarios.
Read, create, update, and delete risk registers.
Vendors & Vendor Risk
Read vendor records and discovered vendors.
Read vendor compliance data (documents, findings, security reviews).
Read vendor risk attributes and security review details.
Read vendor assessment questionnaires, findings, and documentation. (admin-only)
Read vendor assessment configuration: assessment types, rules, automations, and custom fields. (admin-only)
Contracts & Commitments
Read customer contracts and the commitments extracted from them, including gap analysis.
Read the standard commitment library and standard papers.
Personnel & Computers
Read comprehensive details for personnel records. (admin-only)
Read personnel groups, including membership and assigned tasks.
Read computers and devices.
Users & Teams
Look up user accounts and teams, e.g. to assign owners.
Access Management
Read access accounts.
Read access requests, reviews, and detailed review information.
Read access systems.
Read apps in the access program and their access requests.
Retrieve offboarding tasks for terminated employees.
Audits
Read metadata and status details for audits.
Read individual audit requests.
Edit audit observation dates and auditor early-access dates.
Privacy
Read data processing activities and categories.
Read data processing vendors or controllers.
Read details for privacy impact assessments.
Create, update, delete processing activities and categories
Create, update, delete privacy impact assessments of different types (DPIA, LIA, TRA)
Create, update, delete data processing controllers
Link/unlink processing activities to impact assessments
Link/unlink risks to impact assessments
Submit privacy impact assessments for approval.
Upload privacy impact assessments and new assessment versions, and create new in-platform versions.
Read, create, update, and delete data inventory (ROPA) custom fields.
Read, create, and update data subject requests (DSRs), and attach or remove DSR evidence.
Questionnaire Automation & Knowledge Base
Search the trust knowledge base and answer library.
Read details for security questionnaires.
Read knowledge base coverage analysis and insights.
Issues
Read and update issues.
Integrations & Vulnerabilities
Read connected integrations.
Read vulnerabilities in your Vanta account.
Read assets monitored by vulnerability scanners.