Vanta Connection

Connects your agent to Vanta for compliance automation data. Pull control status, automated test results, evidence collection progress, integration health, and policy documents. Read-only access.

Authentication

API token.

• api_token — Vanta API token from Settings > API

Endpoints

Controls

• GET /v1/controls — List controls with status (passing, failing, needs attention)
• GET /v1/controls/{id} — Get control detail with linked tests and evidence

Tests

• GET /v1/tests — List automated tests with pass/fail status
• GET /v1/tests/{id} — Get test detail with last run timestamp and result

Evidence

• GET /v1/evidence — List evidence items with collection status
• GET /v1/evidence/{id} — Get evidence detail with linked control

Integrations

• GET /v1/integrations — List connected integrations with health status

Monitors

• GET /v1/monitors — List continuous monitors (vulnerability, access, config)
• GET /v1/monitors/{id} — Get monitor detail with alert history

Policies

• GET /v1/policies — List published policies with review dates

Rules

• Rate limit: 100 requests/minute
• Read-only — Vanta configuration managed through Vanta UI
• The agent maps Vanta controls to framework requirements (SOC 2, ISO 27001, HIPAA)
• Failing controls are prioritized by framework impact (how many requirements affected)
• The agent calculates evidence collection completeness percentage