# Drata — Pipedream Connect

> Drata automates your compliance journey from start to audit-ready and beyond and provides support from the security and compliance experts who built it.

- API slug: `drata` (use in MCP headers and tool keys)
- Auth: API key (Pipedream-managed)
- Categories: Business Management
- Website: https://drata.com/
- This page (HTML): https://pipedream.com/apps/drata
- Tools: 14 actions · 8 triggers

## Connect via MCP (recommended)

- Endpoint: `https://remote.mcp.pipedream.net/v3`
- Headers: `Authorization: Bearer <token>` · `x-pd-project-id` · `x-pd-environment` · `x-pd-external-user-id` · `x-pd-app-slug: drata`

```ts
import { Client } from "@modelcontextprotocol/sdk/client/index.js"
import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js"
import { PipedreamClient } from "@pipedream/sdk"

const pd = new PipedreamClient({
  projectId: process.env.PIPEDREAM_PROJECT_ID!,
  clientId: process.env.PIPEDREAM_CLIENT_ID!,
  clientSecret: process.env.PIPEDREAM_CLIENT_SECRET!,
  projectEnvironment: "production",
})

const accessToken = await pd.rawAccessToken

const transport = new StreamableHTTPClientTransport(
  new URL("https://remote.mcp.pipedream.net/v3"),
  {
    requestInit: {
      headers: {
        Authorization: `Bearer ${accessToken}`,
        "x-pd-project-id": process.env.PIPEDREAM_PROJECT_ID!,
        "x-pd-environment": "production",
        "x-pd-external-user-id": "{external_user_id}", // any stable ID for this user in your system
        "x-pd-app-slug": "drata",
      },
    },
  },
)

const mcp = new Client({ name: "my-agent", version: "1.0.0" })
await mcp.connect(transport)

const { tools } = await mcp.listTools()

// e.g. run Create Asset:
const result = await mcp.callTool({
  name: "drata-create-asset",
  arguments: {
    name: "Name",
    description: "Description",
  },
})
```

Docs: [MCP guide](https://pipedream.com/docs/connect/mcp/developers.md)

## API proxy

For a Drata endpoint with no pre-built tool, the proxy forwards your request with the connected user's credentials attached.

```bash
# The path segment is the target URL, URL-safe base64 encoded:
# https://public-api.drata.com/public/controls

curl "https://api.pipedream.com/v1/connect/{project_id}/proxy/aHR0cHM6Ly9wdWJsaWMtYXBpLmRyYXRhLmNvbS9wdWJsaWMvY29udHJvbHM?external_user_id={external_user_id}&account_id=apn_xxxxxxx" \
  -H "Authorization: Bearer {access_token}" \
  -H "x-pd-environment: production"
```

Docs: [API proxy guide](https://pipedream.com/docs/connect/api-proxy.md)

## SDK

```ts
import { PipedreamClient } from "@pipedream/sdk"

const pd = new PipedreamClient({
  projectId: process.env.PIPEDREAM_PROJECT_ID!,
  clientId: process.env.PIPEDREAM_CLIENT_ID!,
  clientSecret: process.env.PIPEDREAM_CLIENT_SECRET!,
  projectEnvironment: "production",
})

const result = await pd.actions.run({
  id: "drata-create-asset",
  externalUserId: "{external_user_id}", // any stable ID for this user in your system
  configuredProps: {
    drata: { authProvisionId: "apn_xxxxxxx" },
    name: "Name",
    description: "Description",
  },
})
```

Docs: [Managed auth guide](https://pipedream.com/docs/connect/managed-auth/quickstart.md) · [Tools guide](https://pipedream.com/docs/connect/components.md)

## Actions (14)

### `drata-create-asset` — Create Asset (Write)

Create an asset. See the documentation.

Full schema: https://pipedream.com/apps/drata/actions/create-asset.md

### `drata-create-control` — Create Control (Write)

Create a new Control. See the documentation.

Full schema: https://pipedream.com/apps/drata/actions/create-control.md

### `drata-create-vendor` — Create Vendor (Write)

Create a new Vendor. See the documentation.

Full schema: https://pipedream.com/apps/drata/actions/create-vendor.md

### `drata-find-controls` — Find Controls (Read-only)

Find Controls. See the documentation.

Full schema: https://pipedream.com/apps/drata/actions/find-controls.md

### `drata-find-personnel` — Find Personnel (Read-only)

Find Personnel. See the documentation.

Full schema: https://pipedream.com/apps/drata/actions/find-personnel.md

### `drata-find-vendors` — Find Vendors (Read-only)

Find Vendors. See the documentation.

Full schema: https://pipedream.com/apps/drata/actions/find-vendors.md

### `drata-list-control-id-options` — List Control ID Options (Read-only)

Retrieves available options for the Control ID field.

Full schema: https://pipedream.com/apps/drata/actions/list-control-id-options.md

### `drata-list-device-id-options` — List Device ID Options (Read-only)

Retrieves available options for the Device ID field.

Full schema: https://pipedream.com/apps/drata/actions/list-device-id-options.md

### `drata-list-vendor-id-options` — List Vendor ID Options (Read-only)

Retrieves available options for the Vendor ID field.

Full schema: https://pipedream.com/apps/drata/actions/list-vendor-id-options.md

### `drata-list-workspace-id-options` — List Workspace ID Options (Read-only)

Retrieves available options for the Workspace ID field.

Full schema: https://pipedream.com/apps/drata/actions/list-workspace-id-options.md

### `drata-update-vendor` — Update Vendor (Write)

Update a Vendor. See the documentation.

Full schema: https://pipedream.com/apps/drata/actions/update-vendor.md

### `drata-upload-background-check` — Upload Background Check (Write)

Upload background check for a personnel. See the documentation.

Full schema: https://pipedream.com/apps/drata/actions/upload-background-check.md

### `drata-upload-device-compliance-document` — Upload Device Compliance Document (Write)

Upload a device compliance document. See the documentation.

Full schema: https://pipedream.com/apps/drata/actions/upload-device-compliance-document.md

### `drata-upload-user-compliance-document` — Upload User Compliance Document (Write)

Upload a user compliance document. See the documentation.

Full schema: https://pipedream.com/apps/drata/actions/upload-user-compliance-document.md

## Triggers (8)

### `drata-terminated-employee` — Employee Terminated (Polling)

Emit a new event when an employee is terminated. See the documentation.

Full schema: https://pipedream.com/apps/drata/triggers/terminated-employee.md

### `drata-failed-monitor` — Failed Monitor (Polling)

Emit a new event whenever a monitor fails. See the documentation.

Full schema: https://pipedream.com/apps/drata/triggers/failed-monitor.md

### `drata-new-asset-added` — New Asset Added (Polling)

Emit a new event for every new asset. See the documentation.

Full schema: https://pipedream.com/apps/drata/triggers/new-asset-added.md

### `drata-new-control-added` — New Control Added (Polling)

Emit a new event for every new control. See the documentation.

Full schema: https://pipedream.com/apps/drata/triggers/new-control-added.md

### `drata-new-evidence-added` — New Evidence for Control Added (Polling)

Emit a new event for every new evidence for a control. See the documentation.

Full schema: https://pipedream.com/apps/drata/triggers/new-evidence-added.md

### `drata-new-personnel-added` — New Personnel Added (Polling)

Emit a new event for every new personnel. See the documentation.

Full schema: https://pipedream.com/apps/drata/triggers/new-personnel-added.md

### `drata-new-vendor-added` — New Vendor Added (Polling)

Emit a new event for every new vendor. See the documentation.

Full schema: https://pipedream.com/apps/drata/triggers/new-vendor-added.md

### `drata-vendor-updated` — Vendor Updated (Polling)

Emit a new event when a vendor is updated. See the documentation.

Full schema: https://pipedream.com/apps/drata/triggers/vendor-updated.md

---

- All apps: https://pipedream.com/apps — index: https://pipedream.com/llms.txt
- Pipedream docs for agents: https://pipedream.com/docs/llms.txt