Skip to content
Vinkius

Drata Connector for AI agents.

10 live capabilities

Manage SOC 2 and ISO 27001 compliance through natural conversation.

Live agent request Drata / Connector

Waiting for input…

AI Agent

Why people use Drata

Drata for Automated SOC 2 Compliance

This Connector changes that by letting you query your entire compliance posture in seconds. You can ask your agent to find every failing test or list all employees who missed their training, getting immediate answers without leaving your chat window.

  • Claude
  • ChatGPT
  • Gemini
  • Cursor
  • Visual Studio Code
  • Windsurf

What Vinkius changes

You get a conversational interface for your entire Drata compliance environment.

Use it from Claude, ChatGPT, Cursor or another AI client you already have.

One account · 5,900+ Connectors

  1. Real-world use case 01

    Audit Evidence Collection

    A compliance officer needs to know which controls are failing.

  2. Real-world use case 02

    New Hire Onboarding Check

    HR needs to know if a new hire is ready to join the team.

  3. Real-world use case 03

    Cloud Security Audit

    A security engineer wants to find unencrypted databases.

Complete set · 10capabilities

The complete Drata capability set.

These are the exact actions your AI can choose when you ask it to work with Drata.

Capability set01 / 03

01—04

4 capabilities in this set.

Part of 10 available through Drata.

  1. 01 Capability

    Drata get person

    Get the compliance onboarding state of a specific employee including MDM enrollment and training milestones. Use this to investigate individual compliance issues or check if a new hire is ready to access systems.

  2. 02 Capability

    Drata get policy

    Get detailed status of a specific Drata policy including renewal dates and acknowledgment rates. This helps you assess audit readiness regarding mandatory annual document refreshes.

  3. 03 Capability

    Drata list tests

    List Drata automated continuous compliance tests for AWS, GitHub, and Okta. This allows you to monitor real-time security deviations and see which specific checks are failing.

  4. 04 Capability

    Drata list assets

    List cloud infrastructure assets monitored by Drata including EC2 instances, RDS databases, and S3 buckets. This helps you quickly identify unencrypted resources or verify compliance status for audit evidence.

Capability set02 / 03

05—07

3 capabilities in this set.

Part of 10 available through Drata.

  1. 05 Capability

    Drata list controls

    List all compliance controls in Drata mapped to frameworks like SOC 2, ISO 27001, and HIPAA. You can use this to identify specific technical or administrative requirements that are currently failing.

  2. 06 Capability

    Drata list frameworks

    List active compliance frameworks and their current readiness scores. This gives you a high-level view of your multi-framework posture for board-level reporting or audit planning.

  3. 07 Capability

    Drata list personnel

    List all tracked personnel with their security training status, device compliance, and background check clearance. Use this to find out which employees have overdue training or are missing security clearances.

Capability set03 / 03

08—10

3 capabilities in this set.

Part of 10 available through Drata.

  1. 08 Capability

    Drata list policies

    List all security and compliance policies in Drata including Information Security and Data Classification. This is useful for checking which policies need a review or tracking employee acknowledgment rates.

  2. 09 Capability

    Drata list vendors

    List third-party vendors in your risk inventory including risk classifications and questionnaire status. Use this to evaluate the security posture of your supply chain and track subprocessor audits.

  3. 10 Capability

    Drata get control

    Get the detailed status of a specific Drata control including pass/fail state and automated test evidence. This is helpful for investigating why a control failed or preparing for specific auditor questions.

Set up in minutes

One URL. Then ask Drata to work.

Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use Drata from the conversation.

Choose your client

Live preview
Advanced clients IDE · CLI

Claude · Web + desktop

Official guide ↗

Connector URL · ready to paste

Streamable HTTP
https://edge.vinkius.com/vk_preview_PzLzOl3HLkJesBjwyD5imrFDq8jv3nHRncdwM61V/mcp
  1. Step 01

    Open Connectors

    In Claude Web or Claude Desktop, open Settings and choose Connectors.

  2. Step 02

    Add the URL

    Choose Add custom connector, name it Drata, and paste the URL above.

  3. Step 03

    Turn it on in chat

    Select +, open Connectors, and enable Drata for the conversation.

Where the request belongs

Work Drata can move forward.

Built around the request

This is for security and ops teams who are tired of manual audit prep. It's for the CISO who needs a high-level overview and the security engineer who needs to know exactly which S3 bucket is public right now.

01

Compliance Officer

Audits control statuses and policy readiness without clicking through dozens of pages in a dashboard.

02

Security Engineer

Verifies cloud asset alignment and monitors automated test failures in real-time to fix issues fast.

03

HR Operations Manager

Monitors personnel onboarding milestones and background check clearances using natural language.

04

DevOps Engineer

Tests and debugs continuous compliance integrations through natural conversation with their agent.

When one Connector is not enough

Combine Drata with the systems that finish the task.

View all recipes
01

Run SOC 2 Compliance Audits Using Connectors

Your SOC 2 auditor asks for access review evidence and you spend 3 days exporting CSVs , your agent builds the report in 2 minutes

Build the capability set

Add more capabilities.

Each Connector adds new actions and data without changing how you work.

Browse Connectors
Scytale (Security Compliance Automation) logo
01 8 capabilities

Scytale (Security Compliance Automation)

Automate security compliance via Scytale. manage evidence, track security controls, and monitor framework status directly from your AI agent.

View Connector
Vanta logo
02 10 capabilities

Vanta

Manage your automated compliance and security posture. Audit users, devices, vendors, and vulnerabilities directly from your AI agent.

View Connector
eCompliance logo
03 10 capabilities

eCompliance

Equip your AI agent to manage safety incidents, track inspections, and monitor action items via the eCompliance API.

View Connector
OneTrust logo
04 10 capabilities

OneTrust

Manage privacy requests, assessments, vendors, consent, and incidents via OneTrust. automate GDPR, CCPA, and data governance from any AI agent.

View Connector
Compliance Governance Prover logo
05 1 capability

Compliance Governance Prover

An AI said 'comply with GDPR' without naming a single article. It said 'we have controls' without mapping any to a regulation. It said 'low risk' without measuring severity or fine exposure. The auditor found 4 critical gaps. That is not compliance. that is compliance theater. This capability forces five audit-grade axes: specific regulation naming, control mapping, evidence documentation, gap quantification, and named accountability.

View Connector
Digify logo
06 10 capabilities

Digify

Equip your AI agent to manage secure files, track data rooms, and monitor document analytics via the Digify API.

View Connector

Bring your own AI

Change the model, client or framework. Keep Drata connected.

  • Claude
  • ChatGPT
  • Gemini
  • Cursor
  • VS Code
  • Windsurf
  • ZCode
  • Cline
  • Zed
  • Continue
  • Kiro
  • Roo Code
  • Zencoder
  • Goose
  • Void
  • Augment Code
  • Amp
  • Qodo
  • Tabnine
  • Pieces
  • Sourcegraph Cody
  • JetBrains
  • Warp
  • Amazon Q
  • Antigravity
  • BoltAI
  • Raycast
  • Jan
  • LM Studio
  • AnythingLLM
  • Open WebUI
  • Msty
  • Cherry Studio
  • LibreChat
  • TypingMind
  • Chorus
  • 5ire
  • n8n
  • LangChain
  • LlamaIndex
  • CrewAI
  • Vercel AI SDK

Before you connect

Questions about Drata.

The practical details behind the request, access and result.

Can the Drata MCP help with my SOC 2 audit?

Yes, it helps you manage SOC 2 requirements by listing controls, checking framework readiness, and pulling evidence for specific requirements through your AI agent.

How do I check if my employees finished their security training?

You can ask your agent to list all personnel and their training status. It will show you who is completed and who is overdue so you can follow up quickly.

Can I use this to see my cloud security status?

Yes, it connects to your cloud assets to show you compliance status, encryption verification, and network boundary adherence across major providers.

How does this help with vendor risk management?

It allows you to query your vendor risk inventory to see risk classifications, questionnaire statuses, and SOC 2 report reviews for your third-party partners.

Can I get a summary of my security policies?

You can ask your agent to list all policies, which includes their current version, review dates, and how many employees have acknowledged them.

Does this work for ISO 27001 compliance?

Yes, it tracks ISO 27001 frameworks, specific controls, and the automated tests that provide evidence for those requirements.

Can my agent check if specific employees have finished their security training?

Yes. Use the 'list_personnel' or 'get_personnel_status' capabilities. The agent retrieves the onboarding state, including Security Awareness Training completion and background check clearance for any tracked individual.

How do I monitor which compliance controls are currently failing?

Use the 'list_controls' capability to see all controls and 'get_control' for specific details. The agent will fetch exact evaluation states and automated test results to identify failing requirements and their risk logic.

Can I see my SOC 2 readiness score through natural conversation?

Absolutely. Use the 'list_frameworks' capability. Your agent will pull the top-level standard boundaries and provide overall readiness scores and aggregated control completion percentages for frameworks like SOC 2.

One connection away

Give your agent a direct line to Drata.

Connect Drata once. Keep it beside 5,900+ managed Connectors when the next task needs more.

Explore every Connector No credit card required · Free tier available