Download PDFMarkdown Version
ClaudeChatGPTPerplexityGeminiMicrosoft CopilotRaycastMeta AIGrokZ.aiQwenKimi
DeepSeekMistralCursorVS CodeWindsurfJetBrainsClineLovableVercel AI SDKLangChain

Use Drata with your AI.

Connect your account once and let the AI you already use work with it, without building another integration. Automate compliance and security via Drata. monitor controls, track personnel onboarding, audit policies, and verify cloud asset security directly from any AI

Included with plan

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

ChatGPTClaudeCursorPerplexityGeminiMicrosoft CopilotRaycastMeta AI

Complete set · 10 capabilities

The complete Drata capability set.

These are the exact actions your AI can choose when you ask it to work with Drata.

Capability set01 / 03

01-04

4 capabilities in this set.

Part of 10 available through Drata.

  1. 01

    Drata get policy

    Essential for assessing audit readiness regarding mandatory annual document refreshes. Get detailed status of a specific Drata policy. renewal dates, employee acknowledgment rates, owner assignment, and version history

  2. 02

    Drata list assets

    Each asset shows: resource type, resource ID, compliance status against linked controls, encryption-at-rest verification, network boundary adherence, and associated region/VPC. Use when the user asks about infrastructure compliance, unencrypted resources, or needs an asset inventory for audit evidence. List cloud infrastructure assets monitored by Drata. EC2 instances, RDS databases, S3 buckets, and other resources with compliance status

  3. 03

    Drata list controls

    Each control represents a specific requirement (e.g., "Passwords must be 12+ characters", "MFA enabled for all users", "Encryption at rest required"). Returns control name, description, passing/failing status, mapped framework(s), linked tests, and control owner. Use when the user asks about compliance posture, failing controls, or audit gap analysis. List all compliance controls in Drata. the discrete technical and administrative requirements mapped to SOC 2, ISO 27001, HIPAA, and GDPR frameworks

  4. 04

    Drata get person

    Returns MDM (Jamf/Intune) enrollment status, background check clearance date, onboarding milestone completion, linked IdP (Okta/Google Workspace) groups for access control mapping, security training completion date, and any compliance gaps. Use when investigating a specific employee compliance issue. Get the compliance onboarding state of a specific employee. MDM enrollment, background checks, IdP grouping, and training milestones

Capability set02 / 03

05-07

3 capabilities in this set.

Part of 10 available through Drata.

  1. 05

    Drata list tests

    Each test monitors a specific technical requirement in real-time (e.g., "S3 Buckets must not be public", "GitHub branch protection enabled", "MFA enforced in Okta"). Shows test name, associated control, pass/fail status, last evaluation time, and failing resources if any. Use when the user asks about automated monitoring, which checks are failing, or real-time compliance status. List Drata automated continuous compliance tests. real-time monitors checking AWS, GitHub, Okta, and other integrations for security deviations

  2. 06

    Drata list frameworks

    Each framework shows: name, version, overall readiness score, percentage of controls passing, number of controls mapped, and target audit date. Provides a high-level view of multi-framework compliance posture. Use for board-level reporting, audit planning, or determining which framework needs the most attention. List active compliance frameworks tracked by the Drata workspace. SOC 2 Type II, ISO 27001, HIPAA, GDPR, PCI DSS. with readiness scores

  3. 07

    Drata list policies

    Each policy includes: name, category, CISO approval status, version number, last review date, next review due, and employee acknowledgment completion rate. Policies are mandatory for SOC 2 / ISO 27001. Use when the user asks about policy status, which policies need review, or audit readiness regarding documentation. List all security and compliance policies in Drata. Information Security, Data Classification, Incident Response, Acceptable Use, and more

Capability set03 / 03

08-10

3 capabilities in this set.

Part of 10 available through Drata.

  1. 08

    Drata list personnel

    Each person includes: name, email, role, employment type, Security Awareness Training status (completed/overdue/not started), device compliance (MDM enrolled, encrypted, antivirus), background check clearance, and policy acceptance rates. Use for "who is non-compliant?", "which employees have overdue training?", or pre-audit personnel reporting. List all tracked personnel in Drata with security training status, device compliance, background check clearance, and policy acceptance

  2. 09

    Drata list vendors

    Each vendor includes: company name, data risk classification (Critical/High/Medium/Low), security questionnaire completion status, SOC 2 report review status, last assessment date, data categories shared, and assigned risk owner. Use for vendor risk assessment, subprocessor audits, or evaluating the security posture of your supply chain. List third-party vendors in Drata vendor risk management. risk classification, security questionnaire status, and SOC 2 report reviews

  3. 10

    Drata get control

    Returns passing/failing status, which automated tests provide evidence for this control, the explicit auditor language defining the risk logic, and any manual evidence uploads. Use to investigate why a control is failing, what evidence supports it, or to prepare for auditor questions about a specific requirement. Get detailed status of a specific Drata control. pass/fail state, automated test evidence, and auditor-facing risk language

Observed, not estimated

840ms average. Fast in production.

Drata is checked daily against the live service.

Daily averagePeak 1013ms
Aug 20Today
Fastest day
671ms
Slowest day
1013ms
14-day trend
Slowing+29%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Drata, so you can see the experience inside your AI.

It does not authenticate your account with Drata. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

Drata Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_PzLzOl3HLkJesBjwyD5imrFDq8jv3nHRncdwM61V/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Drata capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "drata-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_PzLzOl3HLkJesBjwyD5imrFDq8jv3nHRncdwM61V/mcp"
    }
  }
}
  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Step-by-step instructions for each client are in the guide. How to connect

FAQ

Questions Drata owners ask.

  • 01

    Can my agent check if specific employees have finished their security training?

    Yes. Use the 'list_personnel' or 'get_personnel_status' capabilities. The agent retrieves the onboarding state, including Security Awareness Training completion and background check clearance for any tracked individual.

  • 02

    How do I monitor which compliance controls are currently failing?

    Use the 'list_controls' capability to see all controls and 'get_control' for specific details. The agent will fetch exact evaluation states and automated test results to identify failing requirements and their risk logic.

  • 03

    Can I see my SOC 2 readiness score through natural conversation?

    Absolutely. Use the 'list_frameworks' capability. Your agent will pull the top-level standard boundaries and provide overall readiness scores and aggregated control completion percentages for frameworks like SOC 2.

Explore

More in Fort Knox

Suggestions