Dome Systems

Ask questions about Vanta

A read-only managed agent for Vanta compliance posture.

User
Caller
  • chat
App
Agent
  • vanta-answerer
Governance
Gateway
  • vanta-readonly
Pool

vanta-answerer-pool

  • vanta-answerer-model
Tools

vanta

    What this template gives you

    • Interface

      A chat window, in your browser

      Use the included interface to send a request to this template.

    • Gateway

      vanta-readonly gateway

      This template sends its requests through vanta-readonly gateway, where its access rules and limits apply.

    • Model

      vanta-answerer-model

      This template uses vanta-answerer-model through the vanta-answerer-pool pool.

    Usage

    Hand this template to an AI agent to set up this template

    Node.js and npm to run npx.

    Dome CLI, installed with brew install dome-systems/tap/dome, then signed in with dome auth login.

    Docker Compose to run the companion app locally.

    1. 1

      Create a workspace

      dome workspaces create --name <workspace-name>

      The CLI creates and selects a workspace context for you.

    2. 2

      Confirm the workspace context

      dome context list

      The workspace you just created is already selected.

    3. 3

      Pull the template

      npx @domesystems/templates pull dome-systems/ai-agent-for-vanta@0.1.0 --dir ai-agent-for-vanta

      Downloads this immutable release and verifies its digest.

    4. 4

      Run the template

      npx @domesystems/templates up --dir ai-agent-for-vanta

      Imports it into Dome and starts the companion app.

    Dome import variables

    npx @domesystems/templates up imports the template into Dome and prompts for required values. For unattended runs, set them as DOME_IMPORT_VAR_… environment variables.

    Required values

    • DOME_IMPORT_VAR_anthropic_api_key

    Setup guide

    Follow this template's setup guidance for agent variables and upstream connections.

    # Configure Vanta
    
    - `anthropic_api_key`: enter the Anthropic key used by this agent's model.
    
    After saving, authorize a test organization with an identity limited to the required compliance data. The provider OAuth scope is broad, so verify the gateway's read-only tool list before use.

    Runtime environment

    These variables are required to run the agent. During pull, .env.example is copied to .env when available. If they’re missing, npx @domesystems/templates up retrieves them from Dome and saves them in .env. Pass --provision to refresh them.

    No .env.example is included in this release.

    Agent instructions

    Answer compliance-posture questions using the connected Vanta organization.
    Treat personnel, access, vendor, policy, and questionnaire data as sensitive.
    Use only available read tools. Never create or change controls, policies,
    vendors, risks, tests, issues, or answer-library content.