
Connect Drata to ChatGPT, Claude and Gemini
Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Manage security posture and audit readiness through a single chat interface.
Developed, maintained, and hosted by Vinkius.
MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED
Waiting for input…
Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.
Your AI does the work. We keep it safe and sound.
No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.
Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

Each Connector runs inside its own sealed environment.
Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.
One switch stops every agent. Instantly.
One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.
Spending limits that pause instead of surprise.
Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.
Three controls, built into the layer your AI connects through.
Curated set · 10 capabilities
We ship only the actions that matter.
01-04
4 capabilities in this set.
Part of 10 available through Drata.
- 01
Drata get policy
This capability retrieves specific Drata policy details. Use it to check renewal dates, employee acknowledgment rates, and version history for mandatory documents.
- 02
Drata list assets
This capability pulls a list of cloud infrastructure assets like EC2 instances or S3 buckets. It shows their compliance status and encryption settings.
- 03
Drata list controls
This capability lists all compliance controls mapped to frameworks like SOC 2 or HIPAA. It provides the passing or failing status for each requirement.
- 04
Drata get person
This capability fetches the compliance status for a specific employee. It tracks MDM enrollment, background checks, and security training completion.
05-07
3 capabilities in this set.
Part of 10 available through Drata.
- 05
Drata list tests
This capability lists automated continuous compliance tests. It shows real-time monitoring results for integrations like AWS, GitHub, and Okta.
- 06
Drata list frameworks
This capability provides a high-level view of active compliance frameworks. It returns readiness scores and control completion percentages for SOC 2, ISO 27001, and others.
- 07
Drata list policies
This capability lists all security and compliance policies. You can use it to see which documents need review or have low acknowledgment rates.
08-10
3 capabilities in this set.
Part of 10 available through Drata.
- 08
Drata list personnel
This capability returns a list of all tracked personnel. It highlights security training status, device compliance, and background check clearances.
- 09
Drata list vendors
This capability manages your vendor risk inventory. It shows risk classifications and the status of security questionnaires for third-party subprocessors.
- 10
Drata get control
This capability provides deep details on a single control. It shows the specific automated test evidence and the auditor-facing risk language.
Real work
What teams actually run
Audit Readiness Checks
Ask your agent for a readiness score and a list of failing controls before a formal audit begins.
Employee Onboarding Monitoring
Check if new hires have completed all required security training and background checks.
Cloud Security Auditing
Verify that your AWS or Azure resources meet specific encryption and network boundary requirements.
Vendor Risk Management
Quickly review the security posture and SOC 2 status of your third-party subprocessors.
Automate a task
Put Drata to work on one thing.
Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.
One connector, every AI
Drata works with the most popular AI clients.
These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.
Claude
ChatGPT
Gemini
Perplexity
Grok
Microsoft Copilot
Cursor
VS Code
Windsurf
JetBrains
Cline
LangChain
Vercel AI SDK
Lovable
Z.ai
Raycast
Qwen Code
Kimi Code
Le ChatBuilding your own app? The connector is yours to use.
You don't need a client to put Drata to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.
Observed, not estimated
938ms average. Fast in production.
Drata is checked daily against the live service.
- Fastest day
- 778ms
- Slowest day
- 1086ms
- 14-day trend
- Slowing+9%
Connect your client
One URL. Every client.
Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.
Preview access · not provider authentication
The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Drata, so you can see the experience inside your AI.
It does not authenticate your account with Drata. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.
Drata Connector
You're all set. Choose your MCP client and follow the setup instructions.
https://edge.vinkius.com/vk_preview_PzLzOl3HLkJesBjwyD5imrFDq8jv3nHRncdwM61V/mcpClaude Desktop
Follow the steps below to connect in seconds.
- 1In Claude Desktop, open Settings → Connectors.
- 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
- 3Click Add and start a new chat — Drata capabilities are ready to use.
{
"mcpServers": {
"drata-mcp": {
"url": "https://edge.vinkius.com/vk_preview_PzLzOl3HLkJesBjwyD5imrFDq8jv3nHRncdwM61V/mcp"
}
}
}
Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline
Step-by-step instructions for each client are in the guide. How to connect
Guided setup for Claude? Set up Drata in Claude and other AIs
Who it's for
Built for the work Drata owners hand off.
Security and operations professionals who need to monitor compliance without constant dashboard navigation.
- 01
Compliance Officers & CISOs
They use the agent to audit control statuses and policy readiness on demand.
- 02
Security Engineers
They use the agent to verify cloud asset alignment and monitor automated test failures.
- 03
HR & Ops Teams
They use the agent to track employee background checks and security training milestones.
FAQ
Questions Drata owners ask.
- 01
How do I connect Drata to my AI client?
Subscribe to the Drata MCP on Vinkius and enter your Drata Public API Key. Once connected, you can use it in any MCP-compatible client like Claude or Cursor.
- 02
What frameworks can this MCP track?
The MCP can track active frameworks such as SOC 2 Type II, ISO 27001, HIPAA, GDPR, and PCI DSS.
- 03
Can I check cloud resource security?
Yes. You can use the capability to check the compliance status of cloud assets like EC2, RDS, and S3 buckets.
- 04
Does this help with employee onboarding?
Yes. You can query the status of specific employees regarding their background checks, MDM enrollment, and security training.
- 05
Where do I find my Drata API key?
You can find your Public API Key in your Drata Dashboard under Settings and then API Keys.
- 06
Can my agent check if specific employees have finished their security training?
Yes. Use the 'list_personnel' or 'get_personnel_status' capabilities. The agent retrieves the onboarding state, including Security Awareness Training completion and background check clearance for any tracked individual.
- 07
How do I monitor which compliance controls are currently failing?
Use the 'list_controls' capability to see all controls and 'get_control' for specific details. The agent will fetch exact evaluation states and automated test results to identify failing requirements and their risk logic.
- 08
Can I see my SOC 2 readiness score through natural conversation?
Absolutely. Use the 'list_frameworks' capability. Your agent will pull the top-level standard boundaries and provide overall readiness scores and aggregated control completion percentages for frameworks like SOC 2.
Explore
More in Fort Knox
Scytale (Security Compliance Automation) AI Connector
Automate security compliance via Scytale — manage evidence, track security controls, and monitor framework sta
ViewVanta AI Connector
Manage your automated compliance and security posture. Audit users, devices, vendors, and vulnerabilities dire
ViewAikido Security AI Connector
Query security vulnerabilities via Aikido — list open issues, check repositories, monitor cloud assets, and tr
ViewBeagle Security AI Connector
Automate security testing via Beagle Security — list projects, start tests, and retrieve results directly from
View
Suggestions
Compliance Governance Prover AI Connector
An AI said 'comply with GDPR' without naming a single article. It said 'we have controls' without mapping any
ViewEnterprise Security Review Timeline AI Connector
Predict security review duration and identify documentation gaps.
ViewSecurity Audit Prover AI Connector
An AI agent committed a Stripe API key to git, built SQL queries with string concatenation, and deployed an ad
ViewHackEDU (Security Journey) AI Connector
Automate security training via HackEDU — manage users, track progress, and integrate vulnerability data direct
View
Connect Drata to Claude, Cursor, ChatGPT & more
