Vanta for AI agents
Compliance monitoring, controls, and evidence. Add an API key once and every agent you run can use it.
- Connects with an API key
- Any MCP client
- No card required
The route from an agent to Vanta
Once Vanta is set up in your workspace, any agent you run can reach it: a Spinrun agent, or Claude, ChatGPT and Cursor through one MCP endpoint. Every call passes through the Spinrun gateway, which sorts it by risk and writes it to the activity log.
By default, every change an agent makes in a connected app waits for your approval, on every plan. Enhanced Control adds per-app read, write and destructive rules at the gateway on Free and Pro.
Vanta in the catalog
Compliance monitoring, controls, and evidence. · IT & Security
- An agent gets a jobFrom chat, a schedule, or your own AI client
- Spinrun checks the callSorted as a read, a write or a destructive call
- Vanta does the workThrough the connection you set up in your workspace
- Every call is loggedTool, outcome and duration, in one activity log
From Spinrun recipes
Jobs to hand an agent in Vanta
Each one is a real prompt from a Spinrun recipe or team page, ready to adapt to your own work.
“Our auditor wants SOC2 evidence for Q1: put the WAF settings from Cloudflare and the access reviews on one Notion page.”
Audit pack
Three steps
From connection to first call
Connect an app once
Sign in from your workspace with OAuth or an API key. Spinrun keeps the credential in an encrypted vault, never in an agent's config.
Decide what it may do
By default, every change an agent makes in a connected app waits for your approval, on every plan. Enhanced Control adds per-app rules for reads, writes and destructive calls on Free and Pro.
Let any agent use it
Claude, ChatGPT, Cursor or a Spinrun agent reach the app through one MCP endpoint, and every call is written to the same activity log.
What it can do
Every Vanta action, sorted by risk
Spinrun sorts every Vanta action into one of three tiers. By default, agents ask before a write; on Free and Pro, the rules you set decide which tiers run.
- Reads
Read actions
Fetch and search. Cannot change anything.
- Writes
Write actions
Create and update. Changes data but does not remove it.
- Destructive
Destructive actions
Delete, revoke, or overwrite. Hard or impossible to undo.
Paired in recipes
Apps agents use with Vanta
These appear next to Vanta in Spinrun's templates, recipes and team pages.
Questions about Vanta
You paste an Vanta API key once. Spinrun keeps it in an encrypted vault rather than in an agent's config, and you can revoke it in one click.
Put Vanta to work. Start free.
Connect Vanta, decide what it may do, and give an agent its first job.