Vanta Tools

Vanta is a security and compliance automation platform. These tools read data from the Vanta API so a workflow can list automated compliance tests, security controls, and tracked vendors, then act on their status (for example, alerting when a SOC 2 test needs attention or summarizing vendor risk).

Overview

Operations

Configuration

vanta_list_tests

vanta_list_controls

vanta_list_vendors

Outputs

vanta_list_tests

• data (json) — Array of Vanta test objects.
• metadata (json) — List metadata, containing:
  • count (number) — Number of items returned.
  • pageInfo (json) — Cursor pagination info.

vanta_list_controls

• data (json) — Array of Vanta control objects.
• metadata (json) — List metadata, containing:
  • count (number) — Number of items returned.
  • pageInfo (json) — Cursor pagination info.

vanta_list_vendors

• data (json) — Array of Vanta vendor objects.
• metadata (json) — List metadata, containing:
  • count (number) — Number of items returned.
  • pageInfo (json) — Cursor pagination info.

YAML Example

vanta_1:
  type: vanta
  name: "Vanta"
  inputs:
    operation: "vanta_list_tests"
    statusFilter: "NEEDS_ATTENTION"
    frameworkFilter: "soc2"
    pageSize: 50
    apiKey: "{{VANTA_API_KEY}}"
  connections:
    outgoing:
      - target: next-block-id

Tips

• Auth setup: Create an API access token in your Vanta account and store it as an environment variable (e.g. VANTA_API_KEY), then reference it as {{VANTA_API_KEY}}. The token is sent as a Bearer token on every request — never paste it directly into shared workflows.
• Status monitoring: Use vanta_list_tests with statusFilter: "NEEDS_ATTENTION" to surface failing compliance checks, then route the {{vanta_1.data}} array into a notification or agent block to summarize what needs remediation.
• Pagination: All three operations cap pageSize at 100 and default to 10. When the result set is large, read {{vanta_1.metadata.pageInfo}} from the response and pass its cursor back in via pageCursor to fetch the next page.
• Multi-value filters: statusMatchesAny (vendors) and frameworkMatchesAny (controls) accept comma-separated lists (e.g. soc2,iso27001); each entry is expanded into a repeated query parameter automatically.