Featured

Deploy OpenClaw in 60 seconds — 20% off logoDeploy OpenClaw in 60 seconds — 20% off

Launch OpenClaw on Hostinger in about 60 seconds and keep your agent live 24/7. Our referral link gives you 20% off, no coupon code needed.

Launch on Hostinger
Run your Hermes agent on Hostinger, fully managed logoRun your Hermes agent on Hostinger, fully managed

Launch Hermes on Hostinger in one click, fully managed, no VPS knowledge needed. Use code ZACAARON10 for 10% off.

Launch on Hostinger
Crawl and scrape any site into clean data, 10% off logoCrawl and scrape any site into clean data, 10% off

Firecrawl crawls and scrapes any site into clean markdown for your agent. Get 1,000 free credits, and new users get 10% off their first purchase.

Try Firecrawl free
Your own AI agent, running 24/7 with QwikClaw logoYour own AI agent, running 24/7 with QwikClaw

QwikClaw sets up and runs an always-on OpenClaw agent for you. One click, no config files, no server setup.

Deploy now
One API to scrape, enrich, and extract the internet. logoOne API to scrape, enrich, and extract the internet.

Context.dev gives your agents a single API to scrape, enrich, and extract live web data — no proxies, no parsers, no maintenance.

Start building free
SetupClaw: done-for-you OpenClaw for founders & exec teams logoSetupClaw: done-for-you OpenClaw for founders & exec teams

White-glove OpenClaw for founders and exec teams (4–50+ employees): we install, harden, integrate your tools, and maintain it — secured from day one.

Get it set up for you
SEO data APIs for your agent, $1 free credit logoSEO data APIs for your agent, $1 free credit

DataForSEO gives your agent live access to SERP results, keyword data, backlinks, and on-page SEO data through one API. New accounts get a $1 credit, good for up to 20,000 keyword or backlink lookups.

Try DataForSEO free
Reach 47,000+ AI builders

A flat monthly placement in front of developers actively installing AI tools. No lock-in, cancel anytime.

Advertise here

Works with

Claude CodeClaude DesktopCursorVS CodeClineCodex CLIOpenClaw+ any MCP client

Install to Claude Code

This server doesn't publish a one-line install command. Follow the setup in the source repository.

Summary

Connects Claude to Drata compliance platform for SOC2 audit preparation and ongoing monitoring, enabling queries on controls, tests, personnel, and policies.

README.md

Drata MCP Server

A Model Context Protocol (MCP) server that connects Claude to your Drata compliance platform. Designed for SOC2 Type II audit preparation and ongoing compliance monitoring.

What it does

This MCP server gives Claude direct access to your Drata data, allowing you to:

  • Monitor compliance status - Get real-time summaries of controls, tests, and personnel compliance
  • Track failing tests - Identify which automated monitors are failing and why
  • Review controls - See which controls need attention (missing evidence, no owner, not ready)
  • Check personnel compliance - Find employees with device compliance issues
  • Prepare for audits - Generate comprehensive audit readiness reports

Tools Available

| Tool | Description | |------|-------------| | get_compliance_summary | Dashboard overview of all compliance areas | | list_controls | List controls with optional search and filtering | | list_controls_with_issues | Controls that need attention (NOT_READY, NO_OWNER, NEEDS_EVIDENCE) | | get_control_details | Detailed info about a specific control including linked monitors | | get_monitors_for_control | All tests linked to a specific control | | list_monitors | All automated monitoring tests with status summary | | list_failing_monitors | Tests currently failing - critical for SOC2 | | list_personnel | Personnel with compliance status | | list_personnel_with_issues | Personnel with device compliance problems | | list_policies | Company policies with version info | | list_pending_policy_acknowledgments | Policies awaiting user acknowledgment | | list_connections | Integration status (GitHub, AWS, etc.) | | list_vendors | Third-party vendors | | list_devices | Registered devices |

Installation

# Clone the repository
git clone https://github.com/sderosiaux/drata-mcp.git
cd drata-mcp

# Create virtual environment and install
python -m venv .venv
source .venv/bin/activate  # On Windows: .venv\Scripts\activate
pip install -e .

# Configure your API key
cp .env.example .env
# Edit .env and add your DRATA_API_KEY

Get your Drata API Key

  1. Log into Drata
  2. Go to SettingsAPI Keys
  3. Click Create API Key
  4. Copy the key to your .env file

Usage with Claude Desktop

Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):

{
  "mcpServers": {
    "drata": {
      "command": "/path/to/drata-mcp/.venv/bin/python",
      "args": ["-m", "drata_mcp.server"],
      "cwd": "/path/to/drata-mcp"
    }
  }
}

Then restart Claude Desktop.

Example Prompts

Once configured, you can ask Claude:

  • "What's my Drata compliance status?"
  • "Show me failing tests"
  • "Which controls need attention?"
  • "List personnel with device issues"
  • "Prepare me for the SOC2 audit"
  • "What tests are linked to control DCF-71?"

Development

# Install dev dependencies
pip install -e ".[dev]"

# Run tests
pytest tests/ -v

Requirements

  • Python 3.11+
  • Drata account with API access
  • Claude Desktop (for MCP integration)

License

MIT

See related servers & alternatives →

Related MCP servers

Browse all →

Related guides

Hand-picked reading to help you choose and use Observability servers.