[rudycelekli]

The Vanta plugin builds its MCP URL as https://${VANTA_MCP_HOST}/mcp, but VANTA_MCP_HOST is not in variables.required. Cursor can save the plugin with no region selected, which leaves a URL it cannot resolve, so the Vanta server never connects.

VANTA_MCP_HOST is now required. The plugin version is 1.1.1 and the changelog records the setup change. The host enum is the same three regional hosts.

Validation: On origin/main, node --test third_party/vanta/mcp-url.test.mjs failed with VANTA_MCP_HOST is interpolated into the server URL but is not required. After this change the same test passes. node scripts/validate-plugins.mjs reported all plugins valid, node scripts/generate-pstack-harness-trees.mjs --check reported the harness tree up to date, and git diff --check was clean.

---

Note

Low Risk
Plugin metadata and a regression test only; no runtime auth or application logic changes.

Overview
Fixes a Vanta plugin setup bug where VANTA_MCP_HOST could be omitted even though the MCP URL is https://${VANTA_MCP_HOST}/mcp, which let Cursor save an unresolved URL and block the connection.

VANTA_MCP_HOST is now listed in variables.required in plugin.json, the plugin is bumped to 1.1.1, and the changelog notes the change. A new mcp-url.test.mjs asserts every variable interpolated into the server URL is required and that the regional host enum is unchanged.

^{Reviewed by Cursor Bugbot for commit 14de572. Bugbot is set up for automated code reviews on this repo. Configure here.}