Connectors · Identity & security
Vanta MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Vanta and the rest of your systems. It gives your agent 338 Vanta actions (169 reads, 124 writes and 45 that wait for a confirmation) and holds the Vanta credential itself, so the agent never does. It paces Vanta's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "vanta.policies.list", intent: "check which Vanta account is connected"}# List policies · read · 1 upstream call- 338actionsin one signed file
- 169readlook, never change
- 124writecreate and update
- 45wait for a yesdestructive, confirmed first
Set up
Connect Vanta in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Vanta.
Session login. actionlake opens the session and renews it when it expires. actionlake stores what you paste write-only, sealed under your tenant's key.
client_idVanta application client ID (vci_…)client_secretVanta application client secret (vcs_…), shown in the Developer ConsolehostWhere your Vanta lives: your hostscopesYour Vanta scopes
account { op: "connections.requirements", service: "vanta" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "vanta.policies.list" }# list policies · read · 1 upstream callcheck { action: "vanta.documents.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Vanta at a glance
- Sign-in
- Session login. actionlake opens the session and renews it when it expires.
- You provide
client_idclient_secret- Setup fields
hostscopes- Limits we pace to
- 50 calls a minute, per connection
- API covered
- Vanta API v1 (Manage Vanta, Auditor and Build Integrations OpenAPI 3.0)
api.vanta.com/v1 - Built from
- Vanta's documentation, read 22 October 2026developer.vanta.comdeveloper.vanta.comdeveloper.vanta.com
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 168 of 169 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 5, so ask can line Vanta up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Vanta.
338 actions in 125 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 169readlook, never change
- 124writecreate and update
- 45destructivewait for a confirmation
Controls
92 read · 6 write · 1 destructive
List controls · Create custom control · Update a control's metadata · Get control by an ID
Groups
82 read · 4 write · 2 destructive
List groups · Get group by ID · Create group · Import IdP groups
People
82 read · 5 write · 1 destructive
List people · Remove leave information · Get person by ID · Mark as not people
Trust center control categories
82 read · 5 write · 1 destructive
Add Trust Center control category · List Trust Center control categories · Get Trust Center control category · Reorder Trust Center control categories
Audit information requests
72 read · 4 write · 1 destructive
Create a new information request · List information requests for an audit · Accept evidence for an information request · Flag evidence for an information request
Knowledge base resources
72 read · 4 write · 1 destructive
Create webpage resource · List Knowledge Base resources · Get Knowledge Base resource · Update document resource
Questionnaires
72 read · 4 write · 1 destructive
Create website questionnaire · List questionnaires · Approve questionnaire · Complete questionnaire
Trust center updates
72 read · 4 write · 1 destructive
Create Trust Center update · List Trust Center updates · Send Trust Center update notifications to all subscribers · Send Trust Center update notifications to specific subscribers
117 more areas · 277 actions
- Documents 6
- Knowledge base answers 6
- Risk scenarios 6
- Trust center controls 6
- Trust center viewers 6
- Audit information request comments 5
- Audits 5
- Customer trust accounts 5
- Trust center faqs 5
- Trust center resource categories 5
- Trust center subprocessors 5
- Trust center subscriber groups 5
- Trust center subscribers 5
- Vendors 5
- Audit control comments 4
- Audit evidence 4
- Frameworks 4
- Integration resources 4
- Questionnaire responses 4
- Risk scenario controls 4
- Trust center access requests 4
- Trust center compliance frameworks 4
- Trust center faq categories 4
- Trust center resources 4
- Vendor findings 4
- Vulnerabilities 4
- Audit controls 3
- Audit information request evidence 3
- Contracts 3
- Document links 3
- Group people 3
- Risk scenario mappings accounts 3
- Risk scenario mappings custom assets 3
- Risk scenario mappings integrations 3
- Risk scenario mappings issues 3
- Risk scenario mappings vendor findings 3
- Test entities 3
- Audit evidence comments 2
- Audit organization 2
- Business units 2
- Control documents 2
- Control tests 2
- Discovered vendors 2
- Document uploads 2
- Framework exports 2
- Integration push API endpoint vulnerability connectors 2
- Integration push background check connector 2
- Integration push custom resource 2
- Integration push macos user computer 2
- Integration push package vulnerability connectors 2
- Integration push secret 2
- Integration push security task 2
- Integration push static analysis code vulnerability connectors 2
- Integration push user account 2
- Integration push user security training status 2
- Integration push vulnerable component 2
- Integration push windows user computer 2
- Integration resource kinds 2
- Integrations 2
- Issues 2
- Monitored computers 2
- Personnel notification settings 2
- Policies 2
- Program scopes 2
- Questionnaire exports 2
- Tag categories 2
- Tag category product contexts 2
- Tests 2
- Trust center chatbot conversations 2
- Trust center data collected 2
- Trust centers 2
- Users 2
- Vendor assessment types 2
- Vendor assessments 2
- Vendor security review documents 2
- Vendor security reviews 2
- Vulnerability remediations 2
- Vulnerable assets 2
- Audit assets code changes 1
- Audit comments 1
- Audit control information requests 1
- Audit evidence urls 1
- Audit information request activity 1
- Audit integrations 1
- Audit issues items 1
- Audit issues snapshots 1
- Audit managed vendors 1
- Audit monitored computers 1
- Audit people 1
- Audit personnel account access 1
- Audit personnel account access services 1
- Audit personnel groups 1
- Audit personnel people 1
- Audit risks 1
- Audit risks snapshots 1
- Audit vendors 1
- Audit vulnerabilities 1
- Audit vulnerability remediations 1
- Audit vulnerable assets 1
- Auditors 1
- Control library 1
- Custom assets 1
- Customer trust deletion requests 1
- Deactivated controls 1
- Discovered vendor accounts 1
- Document controls 1
- Event logs 1
- Framework controls 1
- Importable idp groups 1
- Organization 1
- Questionnaire assignable users 1
- Risk scenario mappings enterprise risk 1
- Trust center activity 1
- Trust center historical access requests 1
- Trust center videos 1
- Vendor documents 1
- Vendor risk attributes 1
Top actions
The Vanta API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 24 of Vanta's 24 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
vanta.policies.listList policies | List policies. | read | security.policy.list36 connectors |
vanta.users.listList active users | List active users. | read | identity.user.list474 connectors |
vanta.groups.listList groups | List groups. | read | identity.group.list262 connectors |
vanta.documents.listList documents | List documents. | read | content.document.list28 connectors |
vanta.policies.getGet policy by ID | Get policy by ID. | read | security.policy.get30 connectors |
vanta.users.getGet user by ID | Get user by ID. | read | identity.user.get399 connectors |
vanta.documents.createCreate a custom document | Create a custom document. | write | content.document.create29 connectors |
vanta.event_logs.listList event logs | List event logs. | read | security.audit_log.list69 connectors |
vanta.groups.getGet group by ID | Get group by ID. | read | identity.group.get212 connectors |
vanta.documents.deleteDelete document by ID | Delete document by ID. | destructive | content.document.delete28 connectors |
vanta.controls.createCreate custom control | Create custom control. | write | security.control.create3 connectors |
vanta.risk_scenarios.createCreate risk scenario | Create risk scenario. | write | security.risk.create3 connectors |
Try it
Prompts to paste into Claude.
Each one names the Vanta actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Who has access in Vanta? List every user and their role.
calls
vanta.users.list - Writewrite
Create a custom document in Vanta. Show me exactly what you will send before you save it.
calls
vanta.documents.create
Governance for Vanta
Destructive actions wait for a yes.
45 Vanta actions are destructive. The first 10:
- Delete document by ID
vanta.documents.delete - Deactivates a control
vanta.controls.delete - Delete group
vanta.groups.delete - Delete vendor by ID
vanta.vendors.delete - Offboard people
vanta.people.offboard - Delete contract
vanta.contracts.delete - Delete a custom framework
vanta.frameworks.delete - Remove person from a group
vanta.group_people.delete - Remove control from test mapping
vanta.control_tests.delete - Remove people from group
vanta.groups.remove_people
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Delete document by ID?
intent: the user asked me to delete document by ID
account { op: "keys.create", name: "vanta-agent", allowed_actions: ["vanta.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "vanta.documents.delete", approver: "[email protected]" }, { match: "vanta.controls.delete", approver: "[email protected]" }, { match: "vanta.groups.delete", approver: "[email protected]" } ]}Cost
What Vanta costs on actionlake.
Every Vanta action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Vanta refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 338 Vanta actions
- 338actions pageeach page of a long list is one call
- 168reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Vanta action.
338 actions by area: the id your agent calls, what it does, and its effect.
Controls9
vanta.controls.createCreate custom controlwritevanta.controls.getGet control by an IDreadvanta.controls.listList controlsreadvanta.controls.updateUpdate a control's metadatawritevanta.controls.add_documentAdd control to document mappingwritevanta.controls.add_from_libraryAdd control from Vanta librarywrite- and 3 more in this area
Groups8
vanta.groups.createCreate groupwritevanta.groups.getGet group by IDreadvanta.groups.import_from_idpImport IdP groupswritevanta.groups.listList groupsreadvanta.groups.add_peopleAdd people to groupwritevanta.groups.deleteDelete groupdestructive- and 2 more in this area
People8
vanta.people.clear_leaveRemove leave informationwritevanta.people.getGet person by IDreadvanta.people.listList peoplereadvanta.people.mark_as_not_peopleMark as not peoplewritevanta.people.mark_as_peopleMark as peoplewritevanta.people.offboardOffboard peopledestructive- and 2 more in this area
Trust center control categories8
vanta.trust_center_control_categories.createAdd Trust Center control categorywritevanta.trust_center_control_categories.getGet Trust Center control categoryreadvanta.trust_center_control_categories.listList Trust Center control categoriesreadvanta.trust_center_control_categories.reorderReorder Trust Center control categorieswritevanta.trust_center_control_categories.deleteDelete Trust Center control categorydestructivevanta.trust_center_control_categories.reorder_controlsReorder controls in a Trust Center control categorywrite- and 2 more in this area
Audit information requests7
vanta.audit_information_requests.accept_evidenceAccept evidence for an information requestwritevanta.audit_information_requests.createCreate a new information requestwritevanta.audit_information_requests.flag_evidenceFlag evidence for an information requestwritevanta.audit_information_requests.listList information requests for an auditreadvanta.audit_information_requests.deleteDelete an information request for an auditdestructivevanta.audit_information_requests.getGet an information request by IDread- and 1 more in this area
Knowledge base resources7
vanta.knowledge_base_resources.create_webpageCreate webpage resourcewritevanta.knowledge_base_resources.getGet Knowledge Base resourcereadvanta.knowledge_base_resources.listList Knowledge Base resourcesreadvanta.knowledge_base_resources.update_documentUpdate document resourcewritevanta.knowledge_base_resources.deleteDelete Knowledge Base resourcedestructivevanta.knowledge_base_resources.update_webpageUpdate webpage resourcewrite- and 1 more in this area
Questionnaires7
vanta.questionnaires.approveApprove questionnairewritevanta.questionnaires.completeComplete questionnairewritevanta.questionnaires.create_from_websiteCreate website questionnairewritevanta.questionnaires.listList questionnairesreadvanta.questionnaires.deleteDelete questionnairedestructivevanta.questionnaires.getGet questionnaire by IDread- and 1 more in this area
Trust center updates7
vanta.trust_center_updates.createCreate Trust Center updatewritevanta.trust_center_updates.listList Trust Center updatesreadvanta.trust_center_updates.notify_all_subscribersSend Trust Center update notifications to all subscriberswritevanta.trust_center_updates.notify_specific_subscribersSend Trust Center update notifications to specific subscriberswritevanta.trust_center_updates.deleteDelete Trust Center updatedestructivevanta.trust_center_updates.getGet Trust Center updateread- and 1 more in this area
Documents6
vanta.documents.createCreate a custom documentwritevanta.documents.deleteDelete document by IDdestructivevanta.documents.getGet document by IDreadvanta.documents.listList documentsreadvanta.documents.set_ownerSet document ownerwritevanta.documents.submitSubmit document collectionwrite
Knowledge base answers6
vanta.knowledge_base_answers.createCreate Answer Library entrywritevanta.knowledge_base_answers.getGet Answer Library entryreadvanta.knowledge_base_answers.listList Answer Library entriesreadvanta.knowledge_base_answers.updateUpdate Answer Library entrywritevanta.knowledge_base_answers.deleteDelete Answer Library entrydestructivevanta.knowledge_base_answers.verifyVerify Answer Library entrywrite
Risk scenarios6
vanta.risk_scenarios.createCreate risk scenariowritevanta.risk_scenarios.getGet risk scenario by IDreadvanta.risk_scenarios.listList risk scenariosreadvanta.risk_scenarios.updateUpdate risk scenariowritevanta.risk_scenarios.cancel_approval_requestCancel risk scenario approval requestwritevanta.risk_scenarios.submit_for_approvalSubmit risk scenario for approvalwrite
Trust center controls6
vanta.trust_center_controls.add_tagsBulk add tags to Trust Center controlswritevanta.trust_center_controls.createAdd Trust Center controlwritevanta.trust_center_controls.getGet Trust Center controlreadvanta.trust_center_controls.listList Trust Center controlsreadvanta.trust_center_controls.deleteDelete Trust Center controldestructivevanta.trust_center_controls.remove_tagsBulk remove tags from Trust Center controlsdestructive
Trust center viewers6
vanta.trust_center_viewers.createAdd Trust Center viewerwritevanta.trust_center_viewers.getGet Trust Center viewerreadvanta.trust_center_viewers.listList Trust Center viewersreadvanta.trust_center_viewers.send_invite_reminderSend Trust Center viewer invite reminderwritevanta.trust_center_viewers.deleteRemove Trust Center viewerdestructivevanta.trust_center_viewers.updateUpdate Trust Center viewerwrite
Audit information request comments5
vanta.audit_information_request_comments.createCreate a comment for an information requestwritevanta.audit_information_request_comments.getGet an information request comment by IDreadvanta.audit_information_request_comments.listList comments for an information requestreadvanta.audit_information_request_comments.updateUpdate a comment for an information requestwritevanta.audit_information_request_comments.deleteDelete a comment for an information requestdestructive
Audits5
vanta.audits.duplicateDuplicate an IRL auditwritevanta.audits.getGet audit by IDreadvanta.audits.get_framework_codesGet framework codes for an auditreadvanta.audits.listList auditsreadvanta.audits.share_information_request_listShare information request list with customerwrite
Customer trust accounts5
vanta.customer_trust_accounts.createCreate customer trust accountwritevanta.customer_trust_accounts.getGet customer trust accountreadvanta.customer_trust_accounts.listList customer trust accountsreadvanta.customer_trust_accounts.updateUpdate customer trust accountwritevanta.customer_trust_accounts.deleteDelete customer trust accountdestructive
Trust center faqs5
vanta.trust_center_faqs.createCreate Trust Center FAQwritevanta.trust_center_faqs.getGet Trust Center FAQreadvanta.trust_center_faqs.listList Trust Center FAQsreadvanta.trust_center_faqs.updateUpdate Trust Center FAQwritevanta.trust_center_faqs.deleteDelete Trust Center FAQdestructive
Trust center resource categories5
vanta.trust_center_resource_categories.createAdd Trust Center resource categorywritevanta.trust_center_resource_categories.listList Trust Center resource categoriesreadvanta.trust_center_resource_categories.reorderReorder Trust Center resource categorieswritevanta.trust_center_resource_categories.updateUpdate Trust Center resource categorywritevanta.trust_center_resource_categories.deleteDelete Trust Center resource categorydestructive
Trust center subprocessors5
vanta.trust_center_subprocessors.createCreate Trust Center subprocessorwritevanta.trust_center_subprocessors.getGet Trust Center subprocessorreadvanta.trust_center_subprocessors.listList Trust Center subprocessorsreadvanta.trust_center_subprocessors.updateUpdate Trust Center subprocessorwritevanta.trust_center_subprocessors.deleteDelete Trust Center subprocessordestructive
Trust center subscriber groups5
vanta.trust_center_subscriber_groups.createCreate Trust Center subscriber groupwritevanta.trust_center_subscriber_groups.getGet Trust Center subscriber groupreadvanta.trust_center_subscriber_groups.listList Trust Center subscriber groupsreadvanta.trust_center_subscriber_groups.updateEdit Trust Center subscriber groupwritevanta.trust_center_subscriber_groups.deleteDelete Trust Center subscriber groupdestructive
Trust center subscribers5
vanta.trust_center_subscribers.createCreate Trust Center subscriberwritevanta.trust_center_subscribers.getGet Trust Center subscriberreadvanta.trust_center_subscribers.listList Trust Center subscribersreadvanta.trust_center_subscribers.set_groupsSet groups for a Trust Center subscriberwritevanta.trust_center_subscribers.deleteDelete Trust Center subscriberdestructive
Vendors5
vanta.vendors.createCreate a vendorwritevanta.vendors.getGet vendor by IDreadvanta.vendors.listList vendorsreadvanta.vendors.updateUpdate vendor by IDwritevanta.vendors.deleteDelete vendor by IDdestructive
Audit control comments4
vanta.audit_control_comments.createCreate a comment for a control within an auditwritevanta.audit_control_comments.deleteDelete a comment for a control within an auditdestructivevanta.audit_control_comments.listList comments for a control within an auditreadvanta.audit_control_comments.updateUpdate a comment for a control within an auditwrite
Audit evidence4
vanta.audit_evidence.create_custom_requestCreate a custom evidence request for an auditwritevanta.audit_evidence.getGet an audit evidence item by IDreadvanta.audit_evidence.listList audit evidencereadvanta.audit_evidence.updateUpdate audit evidencewrite
Frameworks4
vanta.frameworks.deleteDelete a custom frameworkdestructivevanta.frameworks.getGet framework by IDreadvanta.frameworks.listList available frameworksreadvanta.frameworks.set_variantsSet framework control setswrite
Integration resources4
vanta.integration_resources.getGet resource by IDreadvanta.integration_resources.listList resourcesreadvanta.integration_resources.updateUpdate resource metadatawritevanta.integration_resources.update_manyUpdate resource metadatawrite
Questionnaire responses4
vanta.questionnaire_responses.getGet questionnaire responsereadvanta.questionnaire_responses.listList questionnaire responsesreadvanta.questionnaire_responses.set_ownerUpdate questionnaire response ownerwritevanta.questionnaire_responses.updateUpdate questionnaire response contentwrite
Risk scenario controls4
vanta.risk_scenario_controls.createAdd a control to a risk scenariowritevanta.risk_scenario_controls.deleteRemove a control from a risk scenariodestructivevanta.risk_scenario_controls.listList risk scenario controlsreadvanta.risk_scenario_controls.updateChange a risk scenario control's controlTypewrite
Trust center access requests4
vanta.trust_center_access_requests.approveApprove Trust Center access requestwritevanta.trust_center_access_requests.denyDeny Trust Center access requestwritevanta.trust_center_access_requests.getGet Trust Center access requestreadvanta.trust_center_access_requests.listList Trust Center access requestsread
Trust center compliance frameworks4
vanta.trust_center_compliance_frameworks.createCreate Trust Center compliance frameworkwritevanta.trust_center_compliance_frameworks.deleteDelete Trust Center compliance frameworkdestructivevanta.trust_center_compliance_frameworks.listList Trust Center compliance frameworksreadvanta.trust_center_compliance_frameworks.updateUpdate Trust Center compliance frameworkwrite
Trust center faq categories 4Trust center resources 4Vendor findings 4Vulnerabilities 4Audit controls 3Audit information request evidence 3Contracts 3Document links 3Group people 3Risk scenario mappings accounts 3Risk scenario mappings custom assets 3Risk scenario mappings integrations 3Risk scenario mappings issues 3Risk scenario mappings vendor findings 3Test entities 3Audit evidence comments 2Audit organization 2Business units 2Control documents 2Control tests 2Discovered vendors 2Document uploads 2Framework exports 2Integration push API endpoint vulnerability connectors 2Integration push background check connector 2Integration push custom resource 2Integration push macos user computer 2Integration push package vulnerability connectors 2Integration push secret 2Integration push security task 2Integration push static analysis code vulnerability connectors 2Integration push user account 2Integration push user security training status 2Integration push vulnerable component 2Integration push windows user computer 2Integration resource kinds 2Integrations 2Issues 2Monitored computers 2Personnel notification settings 2Policies 2Program scopes 2Questionnaire exports 2Tag categories 2Tag category product contexts 2Tests 2Trust center chatbot conversations 2Trust center data collected 2Trust centers 2Users 2Vendor assessment types 2Vendor assessments 2Vendor security review documents 2Vendor security reviews 2Vulnerability remediations 2Vulnerable assets 2Audit assets code changes 1Audit comments 1Audit control information requests 1Audit evidence urls 1Audit information request activity 1Audit integrations 1Audit issues items 1Audit issues snapshots 1Audit managed vendors 1Audit monitored computers 1Audit people 1Audit personnel account access 1Audit personnel account access services 1Audit personnel groups 1Audit personnel people 1Audit risks 1Audit risks snapshots 1Audit vendors 1Audit vulnerabilities 1Audit vulnerability remediations 1Audit vulnerable assets 1Auditors 1Control library 1Custom assets 1Customer trust deletion requests 1Deactivated controls 1Discovered vendor accounts 1Document controls 1Event logs 1Framework controls 1Importable idp groups 1Organization 1Questionnaire assignable users 1Risk scenario mappings enterprise risk 1Trust center activity 1Trust center historical access requests 1Trust center videos 1Vendor documents 1Vendor risk attributes 1
This index shows a sample of each area. All 338 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.
Questions
The Vanta MCP server, answered.
Is there a Vanta MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 338 Vanta actions across controls, groups, people and trust center control categories, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Vanta.
What do I need to connect Vanta?
Vanta application client ID (vci_…) and Vanta application client secret (vcs_…), shown in the Developer Console. Plus your host and your scopes. The free call account { op: "connections.requirements", service: "vanta" } lists exactly what to paste.
Can an AI agent delete or change things in Vanta?
Only if its key allows it, and only with an explicit confirmation. 45 Vanta actions are destructive, including delete document by ID, deactivates a control and delete group. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Vanta API limit?
actionlake paces every call to the limits in the Vanta service file: 50 calls a minute per connection. Repeated reads are answered from cache (168 Vanta actions can be), which never reaches Vanta.
What does a Vanta action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (338 Vanta actions page). Cache hits, searches, dry runs and calls Vanta refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Vanta API does it cover?
The Vanta API v1 (Manage Vanta, Auditor and Build Integrations OpenAPI 3.0) at api.vanta.com/v1 by default, or the base URL set when you connect. It is built from Vanta's documentation as read on 22 October 2026. 338 actions in 125 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Vanta data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Vanta credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Vanta today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
