Drata

Drata Vendor Security Reviews API

Vendor Security Reviews track the status of security reviews for Vendors. You can create a security review, upload questionnaires, and track the progress of the review. The [help docs](https://help.drata.com/en/articles/9676307-start-and-manage-security-reviews-for-your-vendors) have more information.

GitHub OpenAPI
Business capability
Supplier Risk Management BC-510.30

Operations 11

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /vendors/{vendorId}/security-reviews List a vendor's security reviews · List Vendor Security Reviews #
Ask an LLM
“What security reviews have been done for one particular vendor?”
“Can I filter a single vendor's reviews by decision, like rejected?”
Tell an agent
List security reviews for vendor {vendorId}.
Show vendor {vendorId}'s security reviews with decision {decision}.
POST /vendors/{vendorId}/security-reviews Start a vendor security review · Create Vendor Security Review #
Ask an LLM
“How do I open a new security review for a vendor with a deadline?”
“Can I record who requested a vendor review when I create it?”
Tell an agent
Start a {securityReviewType} review for vendor {vendorId} due {reviewDeadlineAt} with status {securityReviewStatus}.
Create review {title} for vendor {vendorId}, requested by user {requesterUserId}, due {reviewDeadlineAt}.
POST /vendors/{vendorId}/security-reviews/with-file Create a vendor review with an attached file · Create Vendor Security Review with File #
Ask an LLM
“Can I create a vendor security review and upload its report file in one step?”
“Which file types can I attach when creating a review together with a document?”
Tell an agent
Create review {title} for vendor {vendorId} with file {file}, due {reviewDeadlineAt}, type {securityReviewType}, status {securityReviewStatus}.
Open a review on vendor {vendorId} and attach {file} as a {documentType} document.
GET /vendor-security-reviews List security reviews across all vendors · List Vendor Security Reviews Across Vendors #
Ask an LLM
“Where can I see every vendor security review in the account at once?”
“Can I filter reviews across all vendors by when they were last updated?”
Tell an agent
List security reviews across all vendors with status {status}.
Show reviews for vendors {vendorIds} created since {createdAtFrom}.
GET /vendors/{vendorId}/security-reviews/{securityReviewId} Get one vendor security review · Get Vendor Security Review 🧪 #
Ask an LLM
“How do I see the SOC report form data for one vendor review?”
“What are the full details of a single security review?”
Tell an agent
Get security review {securityReviewId} for vendor {vendorId}.
Show review {securityReviewId} of vendor {vendorId} with {expand} expanded.
PUT /vendors/{vendorId}/security-reviews/{securityReviewId} Update a vendor security review · Update Vendor Security Review 🧪 #
Ask an LLM
“Can I rename a vendor security review after it's created?”
“How do I fill in the SOC form on a SOC report review?”
Tell an agent
Rename security review {securityReviewId} of vendor {vendorId} to {title}.
Save SOC form data {socForm} on review {securityReviewId} for vendor {vendorId}.
POST /vendors/{vendorId}/security-questionnaires Upload a questionnaire to a vendor · Upload Security Questionnaire #
Ask an LLM
“Can I upload a completed security questionnaire at the vendor level, not tied to a review?”
“Which file formats does the vendor-level questionnaire upload accept?”
Tell an agent
Upload questionnaire files {files} to vendor {vendorId} without linking a review.
Add security questionnaire {files} to vendor {vendorId}'s record.
GET /vendors/{vendorId}/security-reviews/{securityReviewId}/security-questionnaires List questionnaires on a security review · List Security Review Questionnaires 🧪 #
Ask an LLM
“Which questionnaires belong to one vendor security review?”
“Are archived questionnaires left out when listing a review's questionnaires?”
Tell an agent
List questionnaires attached to review {securityReviewId} of vendor {vendorId}.
Show {size} questionnaires per page for security review {securityReviewId} on vendor {vendorId}.
POST /vendors/{vendorId}/security-reviews/{securityReviewId}/security-questionnaires Upload a questionnaire to a security review · Upload Security Questionnaire #
Ask an LLM
“How do I attach a questionnaire file to a specific security review?”
“Can a vendor's questionnaire be filed under one review instead of the vendor overall?”
Tell an agent
Upload {files} as a questionnaire for security review {securityReviewId} on vendor {vendorId}.
File the completed questionnaire {files} under review {securityReviewId} of vendor {vendorId}.
GET /vendors/{vendorId}/security-reviews/{securityReviewId}/actions List available actions for a security review · List Security Review Actions 🧪 #
Ask an LLM
“Which actions, like finalize or reopen, are available for a review right now?”
“Can this vendor review be finalized yet, given its current state?”
Tell an agent
List available actions for review {securityReviewId} of vendor {vendorId}.
Check whether review {securityReviewId} on vendor {vendorId} can be finalized or reopened.
POST /vendors/{vendorId}/security-reviews/{securityReviewId}/actions Finalize or reopen a security review · Perform Security Review Action 🧪 #
Ask an LLM
“How do I finalize a vendor security review as approved with conditions?”
“Can I reopen a finalized review and reset its decision to pending?”
Tell an agent
Run {action} on security review {securityReviewId} for vendor {vendorId}.
Finalize review {securityReviewId} for vendor {vendorId} with decision {decision} and note {note}.

Documentation

📖
Documentation
https://developers.drata.com/openapi/reference/v2/overview/
📖
APIReference
https://developers.drata.com/openapi/reference/v2/overview/
📖
GettingStarted
https://developers.drata.com/developer-portal/v2/recipes/create-an-api-key/
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/drata/refs/heads/main/authentication/drata-authentication.yml
📖
Documentation
https://developers.drata.com/openapi/reference/v2/tag/Custom-Connections/
📖
GettingStarted
https://developers.drata.com/developer-portal/v2/recipes/custom-connections/
📖
Documentation
https://docs.safebase.io/reference/getaccounts
📖
APIReference
https://docs.safebase.io/reference/getaccounts

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/drata/refs/heads/main/openapi/drata-vendor-security-reviews-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/drata:drata-vendor-security-reviews-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

drata-vendor-security-reviews-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Drata Vendor Security Reviews API
  description: '### What''s New in V2

    - Support for Custom Fields

    - Get and acknowledge user''s assigned policies

    - Payloads are streamlined to include only the essential information.'
  version: V2
  contact: {}
servers:
- url: https://public-api.drata.com/public/v2
- url: https://public-api.eu.drata.com/public/v2
- url: https://public-api.apac.drata.com/public/v2
tags:


# --- truncated at 32 KB (75 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/drata/refs/heads/main/openapi/drata-vendor-security-reviews-api-openapi.yml