Skip to main content

Drata

Compliance automation with real-time risk reporting and GRC intelligence

Tools

38 available tools

Search the tool definitions captured from the MCP server. The live list can vary with version, deployment, and credentials.

38 tools found.

  • Create background check

    Tool name: Drata_createBackgroundCheck

    File a Background Check for a personnel record, evidenced by a URL.

  • Create control

    Tool name: Drata_createControl

    Create a new compliance control in a workspace.

  • Create evidence

    Tool name: Drata_createEvidence

    Register a new evidence bucket in Drata's reusable Evidence Library.

  • Create risk

    Tool name: Drata_createRisk

    Create a new custom risk in a risk register.

  • Create vendor

    Tool name: Drata_createVendor

    Create a new third-party vendor for the account (TPRM).

  • Delete evidence

    Tool name: Drata_deleteEvidence

    Permanently delete an ENTIRE evidence bucket -- the folder AND every file in it, plus all version history and control linkages.

  • Delete evidence artifact

    Tool name: Drata_deleteEvidenceArtifact

    Permanently delete ONE file from an evidence bucket, including that file's entire version history.

  • Delete risk

    Tool name: Drata_deleteRisk

    Permanently delete a single risk from a risk register.

  • Delete vendor

    Tool name: Drata_deleteVendor

    Permanently delete a vendor from the account (account-scoped; no workspace ID).

  • Get company

    Tool name: Drata_getCompany

    Get the account's own company information -- the organization's profile in Drata.

  • Get evidence

    Tool name: Drata_getEvidence

    Get ONE evidence bucket by name or id.

  • Get vendor

    Tool name: Drata_getVendor

    Get a single vendor by ID, with optional expanded subcollections.

  • List devices

    Tool name: Drata_listDevices

    List a person's DEVICES and each device's per-monitor compliance checks -- the same view as the personnel 'Devices' tab in Drata.

  • List evidence

    Tool name: Drata_listEvidence

    List or search evidence buckets in Drata's Evidence Library.

  • List evidence artifacts

    Tool name: Drata_listEvidenceArtifacts

    List the individual files inside ONE evidence bucket.

  • List personnel

    Tool name: Drata_listPersonnel

    List or look up personnel -- employee/contractor compliance records, one per Drata user (distinct from Drata_listUsers, which returns auth identities).

  • List personnel groups

    Tool name: Drata_listPersonnelGroups

    List the personnel groups -- the teams / departments / identity-provider groups that personnel belong to (e.g. 'Engineering', 'Accounting').

  • List policies

    Tool name: Drata_listPolicies

    List all account policies.

  • List requirements

    Tool name: Drata_listRequirements

    List or search framework requirements in a workspace.

  • List risk registers

    Tool name: Drata_listRiskRegisters

    List all risk registers for the account.

  • List vendor documents

    Tool name: Drata_listVendorDocuments

    List the documents attached to a vendor (e.g. SOC reports, compliance reports, bridge letters, questionnaire attachments).

  • List vendor security reviews

    Tool name: Drata_listVendorSecurityReviews

    List the security reviews for a vendor.

  • List vendors

    Tool name: Drata_listVendors

    List third-party vendors for the account.

  • List workspaces

    Tool name: Drata_listWorkspaces

    List all workspaces accessible to the authenticated user.

  • Lookup user identity

    Tool name: Drata_lookupUserIdentity

    Look up a Drata account (login identity) and its roles / SSO identities / background-check documents.

  • Search controls

    Tool name: Drata_searchControls

    Search or list compliance controls for a workspace.

  • Search device compliance

    Tool name: Drata_searchDeviceCompliance

    Find personnel by a SPECIFIC device-level compliance reason -- agent installed, password manager, disk encryption, antivirus, auto-updates, or lock screen.

  • Search monitoring tests

    Tool name: Drata_searchMonitoringTests

    Search or list monitoring tests for a workspace.

  • Search personnel compliance

    Tool name: Drata_searchPersonnelCompliance

    Find personnel by a SPECIFIC person-level compliance reason -- accepted policies, background check, identity MFA, security/HIPAA/NIST-AI training, or offboarding.

  • Search policies

    Tool name: Drata_searchPolicies

    AI search over the policies ASSIGNED TO YOU (the authenticated user), using semantic or keyword search -- requires a search query.

  • Search risks

    Tool name: Drata_searchRisks

    Search or list risks from the risk register.

  • Update control

    Tool name: Drata_updateControl

    Update an existing compliance control in a workspace.

  • Update evidence

    Tool name: Drata_updateEvidence

    Update an evidence BUCKET's own details -- name, description, implementation guidance, owner, control mapping, renewal.

  • Update evidence artifacts

    Tool name: Drata_updateEvidenceArtifacts

    Change the FILES inside an evidence bucket -- upload, attach links, replace, archive, restore.

  • Update personnel

    Tool name: Drata_updatePersonnel

    Update a person's employment record in Drata.

  • Update risk

    Tool name: Drata_updateRisk

    Update an existing risk.

  • Update vendor

    Tool name: Drata_updateVendor

    Update an existing vendor (account-scoped; no workspace ID).

  • Upload personnel document

    Tool name: Drata_uploadPersonnelDocument

    File personnel compliance documents for one person -- security or HIPAA training evidence, MFA evidence, or offboarding evidence.

Compatibility

Connect Drata to the clients your teams already use

27 AI clients can connect to Drata through Runlayer. Pick one for its setup steps and controls.

Why Runlayer

Why connect Drata through Runlayer?

One approved path

Approve Drata once and everyone gets it in the AI clients they already use. Runlayer holds the credentials, so nothing sits in client configuration.

Fine-grained policy

Control who can use each server, tool, and resource, and under which runtime conditions.

Runtime security

Scan tool inputs and outputs for prompt injection, credential exposure, PII, and data exfiltration, then alert, mask, or block.

Audit and observability

Trace every request across users, clients, tools, policies, scanner decisions, and downstream systems.

Frequently asked questions