Connect your own Vanta organization (OAuth2 Client Credentials) to monitor compliance Tests/Controls/Frameworks, manage the Risk Register and Vendor risk inventory, review Policy documents and Personnel compliance status, and get an aggregated audit-readiness health report.
Every capability exposed by Vanta, metered per action and guarded by the two-step safety protocol.
connect_vantawriteConnect a Vanta organization via OAuth2 Client Credentials (API application), after verifying connectivity.
disconnect_vantawriteDisconnect a Vanta organization: deletes only the saved credentials. Nothing in Vanta itself is changed.
list_connectionsreadList the connected Vanta organizations.
list_testsreadList automated compliance Tests (control checks) with their status (OK/FAIL/DISABLED/OUTDATED/NOT_APPLICABLE).
get_testreadRead one compliance Test in full by id.
dismiss_testwriteDismiss a failing Test with a documented reason -- records an explicit exception/justification in Vanta rather than silently ignoring the failure.
list_controlsreadList Controls (named requirements mapped to one or more frameworks, each backed by 1+ Tests).
get_controlreadRead one Control in full by id.
list_frameworksreadList compliance Frameworks enabled on the connected organization (SOC 2, ISO 27001, HIPAA, etc.).
list_risksreadList Risk Register entries.
get_riskreadRead one Risk Register entry in full by id.
create_riskwriteCreate a new Risk Register entry.
update_riskwriteUpdate selected fields of an existing Risk Register entry (status, treatment plan). Only given fields change.
list_risk_scenariosreadList Risk Scenarios (the named risk categories Risk Register entries can be tied to).
list_vendorsreadList Vendor risk inventory (third-party risk management) entries.
get_vendorreadRead one Vendor risk record in full by id.
create_vendorwriteRegister a new Vendor for risk tracking.
update_vendorwriteUpdate selected fields of an existing Vendor (risk tier, review status). Only given fields change.
list_documentsreadList Policy Documents tracked in Vanta (with review status/dates).
get_documentreadRead one Policy Document in full by id.
list_peoplereadList Personnel records with security-training and offboarding compliance status.
get_personreadRead one Personnel record in full by id.
list_integrationsreadList connected data-source Integrations (cloud/IdP/HR/ticketing) Vanta pulls evidence from, with their sync status.
list_groupsreadList Groups (Vanta's grouping of resources/people for scoping tests).
list_monitored_computersreadList employee computers Vanta monitors for device-compliance (disk encryption, screen lock, AV, OS updates).
audit_compliance_posturereadBuild one aggregated audit-readiness health report: failing tests, overdue risks, overdue vendor reviews, and documents past their review date.
More extensions in Compliance & Audit ready to enable in one click.
Enable Vanta in your Imperal workspace in one click - 10,000 free starter credits included.