Drata
Compliance automation with real-time risk reporting and GRC intelligence
Tools
38 available tools
Search the tool definitions captured from the MCP server. The live list can vary with version, deployment, and credentials.
38 tools found.
Create background check
Tool name:
Drata_createBackgroundCheckFile a Background Check for a personnel record, evidenced by a URL.
Create control
Tool name:
Drata_createControlCreate a new compliance control in a workspace.
Create evidence
Tool name:
Drata_createEvidenceRegister a new evidence bucket in Drata's reusable Evidence Library.
Create risk
Tool name:
Drata_createRiskCreate a new custom risk in a risk register.
Create vendor
Tool name:
Drata_createVendorCreate a new third-party vendor for the account (TPRM).
Delete evidence
Tool name:
Drata_deleteEvidencePermanently delete an ENTIRE evidence bucket -- the folder AND every file in it, plus all version history and control linkages.
Delete evidence artifact
Tool name:
Drata_deleteEvidenceArtifactPermanently delete ONE file from an evidence bucket, including that file's entire version history.
Delete risk
Tool name:
Drata_deleteRiskPermanently delete a single risk from a risk register.
Delete vendor
Tool name:
Drata_deleteVendorPermanently delete a vendor from the account (account-scoped; no workspace ID).
Get company
Tool name:
Drata_getCompanyGet the account's own company information -- the organization's profile in Drata.
Get evidence
Tool name:
Drata_getEvidenceGet ONE evidence bucket by name or id.
Get vendor
Tool name:
Drata_getVendorGet a single vendor by ID, with optional expanded subcollections.
List devices
Tool name:
Drata_listDevicesList a person's DEVICES and each device's per-monitor compliance checks -- the same view as the personnel 'Devices' tab in Drata.
List evidence
Tool name:
Drata_listEvidenceList or search evidence buckets in Drata's Evidence Library.
List evidence artifacts
Tool name:
Drata_listEvidenceArtifactsList the individual files inside ONE evidence bucket.
List personnel
Tool name:
Drata_listPersonnelList or look up personnel -- employee/contractor compliance records, one per Drata user (distinct from Drata_listUsers, which returns auth identities).
List personnel groups
Tool name:
Drata_listPersonnelGroupsList the personnel groups -- the teams / departments / identity-provider groups that personnel belong to (e.g. 'Engineering', 'Accounting').
List policies
Tool name:
Drata_listPoliciesList all account policies.
List requirements
Tool name:
Drata_listRequirementsList or search framework requirements in a workspace.
List risk registers
Tool name:
Drata_listRiskRegistersList all risk registers for the account.
List vendor documents
Tool name:
Drata_listVendorDocumentsList the documents attached to a vendor (e.g. SOC reports, compliance reports, bridge letters, questionnaire attachments).
List vendor security reviews
Tool name:
Drata_listVendorSecurityReviewsList the security reviews for a vendor.
List vendors
Tool name:
Drata_listVendorsList third-party vendors for the account.
List workspaces
Tool name:
Drata_listWorkspacesList all workspaces accessible to the authenticated user.
Lookup user identity
Tool name:
Drata_lookupUserIdentityLook up a Drata account (login identity) and its roles / SSO identities / background-check documents.
Search controls
Tool name:
Drata_searchControlsSearch or list compliance controls for a workspace.
Search device compliance
Tool name:
Drata_searchDeviceComplianceFind personnel by a SPECIFIC device-level compliance reason -- agent installed, password manager, disk encryption, antivirus, auto-updates, or lock screen.
Search monitoring tests
Tool name:
Drata_searchMonitoringTestsSearch or list monitoring tests for a workspace.
Search personnel compliance
Tool name:
Drata_searchPersonnelComplianceFind personnel by a SPECIFIC person-level compliance reason -- accepted policies, background check, identity MFA, security/HIPAA/NIST-AI training, or offboarding.
Search policies
Tool name:
Drata_searchPoliciesAI search over the policies ASSIGNED TO YOU (the authenticated user), using semantic or keyword search -- requires a search query.
Search risks
Tool name:
Drata_searchRisksSearch or list risks from the risk register.
Update control
Tool name:
Drata_updateControlUpdate an existing compliance control in a workspace.
Update evidence
Tool name:
Drata_updateEvidenceUpdate an evidence BUCKET's own details -- name, description, implementation guidance, owner, control mapping, renewal.
Update evidence artifacts
Tool name:
Drata_updateEvidenceArtifactsChange the FILES inside an evidence bucket -- upload, attach links, replace, archive, restore.
Update personnel
Tool name:
Drata_updatePersonnelUpdate a person's employment record in Drata.
Update risk
Tool name:
Drata_updateRiskUpdate an existing risk.
Update vendor
Tool name:
Drata_updateVendorUpdate an existing vendor (account-scoped; no workspace ID).
Upload personnel document
Tool name:
Drata_uploadPersonnelDocumentFile personnel compliance documents for one person -- security or HIPAA training evidence, MFA evidence, or offboarding evidence.
Compatibility
Connect Drata to the clients your teams already use
27 AI clients can connect to Drata through Runlayer. Pick one for its setup steps and controls.
Why Runlayer
Why connect Drata through Runlayer?
One approved path
Approve Drata once and everyone gets it in the AI clients they already use. Runlayer holds the credentials, so nothing sits in client configuration.
Fine-grained policy
Control who can use each server, tool, and resource, and under which runtime conditions.
Runtime security
Scan tool inputs and outputs for prompt injection, credential exposure, PII, and data exfiltration, then alert, mask, or block.
Audit and observability
Trace every request across users, clients, tools, policies, scanner decisions, and downstream systems.
