Drata

Drata is a continuous security and compliance automation platform supporting SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, and more, with policies, evidence, and trust center. Drata exposes a public REST API plus the SafeBase Trust API (acquired) and a Custom Connections framework for evidence collection.

Drata publishes 11 APIs on the APIs.io network, including Assets API, Audits API, Controls API, and 8 more. Tagged areas include GRC, Compliance, SOC 2, ISO 27001, and Security.

Drata’s developer surface includes authentication and 11 more developer resources.

🌐 Visit website 📡 Source on GitHub

32.8/100 thin ▬ flat Agent 31/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6

AccessPaidSelf serve

15 APIs

GRCComplianceSOC 2ISO 27001Security

Kin Score

Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6

Composite quality — 32.8/100 · thin

Contract Quality 13.4 / 25

Developer Ergonomics 2.2 / 20

Commercial Clarity 7.4 / 20

Operational Transparency 3.4 / 13

Governance 0.0 / 12

Discoverability 6.5 / 10

Agent readiness — 31/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/drata: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 15

Individual APIs this provider publishes, each with its own machine-readable definition.

Drata Public API v2

Public REST API for managing controls, frameworks, evidence, personnel, assets, policies, and tests. v2 expands endpoints and improves data structures over v1.

Drata Custom Connections API

Build custom integrations to automate evidence collection from any internal or third-party system.

SafeBase Trust API

Manage SafeBase trust centers and security questionnaires programmatically; acquired by Drata and now part of the Drata platform.

Drata MCP Server

Model Context Protocol server enabling AI agents to interact with Drata for compliance workflows.

Drata Assets API

The Assets API from Drata — 2 operation(s) for assets.

Drata Audits API

The Audits API from Drata — 1 operation(s) for audits.

Drata Controls API

The Controls API from Drata — 2 operation(s) for controls.

Drata Evidence Library API

The Evidence Library API from Drata — 1 operation(s) for evidence library.

Drata Frameworks API

The Frameworks API from Drata — 1 operation(s) for frameworks.

Drata Monitoring Tests API

The Monitoring Tests API from Drata — 1 operation(s) for monitoring tests.

Drata Personnel API

The Personnel API from Drata — 2 operation(s) for personnel.

Drata Policies API

The Policies API from Drata — 1 operation(s) for policies.

Drata Risks API

The Risks API from Drata — 1 operation(s) for risks.

Drata Tasks API

The Tasks API from Drata — 1 operation(s) for tasks.

Drata Vendors API

The Vendors API from Drata — 1 operation(s) for vendors.

Scroll for all 15

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Drata Public API v2

OPEN COLLECTION

Pricing Plans 1

Published pricing tiers and plan structures.

Drata Plans Pricing

1 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Drata Rate Limits

1 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrganization

GitHubOrganization

Access & Security 4

Authentication, authorization, and security posture

TrustCenter

TrustCenter

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

DomainSecurity

Authentication

Authentication

Operate 1

Status, limits, changes, and where to get help

RateLimits

RateLimits

Commercial 2

Pricing, plans, and the legal terms of use

Plans

Plans

FinOps

FinOps

Company 2

The organization behind the API

LinkedIn

Website

Website

Other 1

Properties that don't map to a standard resource type

Developer

Developer

Source (apis.yml)

aid: drata
url: https://raw.githubusercontent.com/api-evangelist/drata/refs/heads/main/apis.yml
name: Drata
kind: company
description: Drata is a continuous security and compliance automation platform supporting SOC 2, ISO 27001, HIPAA, PCI DSS,
  GDPR, and more, with policies, evidence, and trust center. Drata exposes a public REST API plus the SafeBase Trust API (acquired)
  and a Custom Connections framework for evidence collection.
accessModel:
  pricing: paid
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Paid · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/drata.png
tags:
- GRC
- Compliance
- SOC 2
- ISO 27001
- Security
created: '2026-05-08'
modified: '2026-05-08'
specificationVersion: '0.19'
apis:
- aid: drata:public-api-v2
  name: Drata Public API v2
  description: Public REST API for managing controls, frameworks, evidence, personnel, assets, policies, and tests. v2 expands
    endpoints and improves data structures over v1.
  humanURL: https://developers.drata.com/openapi/reference/v2/overview/
  baseURL: https://public-api.drata.com
  tags:
  - GRC
  - Compliance
  - REST
  properties:
  - type: Documentation
    url: https://developers.drata.com/openapi/reference/v2/overview/
  - type: Authentication
    url: https://developers.drata.com/openapi/reference/v2/overview/
- aid: drata:custom-connections
  name: Drata Custom Connections API
  description: Build custom integrations to automate evidence collection from any internal or third-party system.
  humanURL: https://developers.drata.com/openapi/reference/v2/tag/Custom-Connections/
  baseURL: https://public-api.drata.com
  tags:
  - GRC
  - Integrations
  - Evidence
  properties:
  - type: Documentation
    url: https://developers.drata.com/openapi/reference/v2/tag/Custom-Connections/
- aid: drata:safebase-trust-api
  name: SafeBase Trust API
  description: Manage SafeBase trust centers and security questionnaires programmatically; acquired by Drata and now part
    of the Drata platform.
  humanURL: https://docs.safebase.io/reference/getaccounts
  baseURL: https://api.safebase.io
  tags:
  - Trust Center
  - Questionnaires
  - Security
  properties:
  - type: Documentation
    url: https://docs.safebase.io/reference/getaccounts
- aid: drata:mcp
  name: Drata MCP Server
  description: Model Context Protocol server enabling AI agents to interact with Drata for compliance workflows.
  humanURL: https://drata.com/blog/drata-mcp-built-for-ai-native-trust-management
  tags:
  - MCP
  - AI
  - Compliance
  properties:
  - type: Blog
    url: https://drata.com/blog/drata-mcp-built-for-ai-native-trust-management
- aid: drata:drata-assets-api
  name: Drata Assets API
  description: The Assets API from Drata — 2 operation(s) for assets.
  humanURL: https://developers.drata.com/openapi/reference/v2/overview/
  baseURL: https://public-api.drata.com
  tags:
  - Assets
  properties:
  - type: OpenAPI
    url: openapi/drata-assets-api-openapi.yml
- aid: drata:drata-audits-api
  name: Drata Audits API
  description: The Audits API from Drata — 1 operation(s) for audits.
  humanURL: https://developers.drata.com/openapi/reference/v2/overview/
  baseURL: https://public-api.drata.com
  tags:
  - Audits
  properties:
  - type: OpenAPI
    url: openapi/drata-audits-api-openapi.yml
- aid: drata:drata-controls-api
  name: Drata Controls API
  description: The Controls API from Drata — 2 operation(s) for controls.
  humanURL: https://developers.drata.com/openapi/reference/v2/overview/
  baseURL: https://public-api.drata.com
  tags:
  - Controls
  properties:
  - type: OpenAPI
    url: openapi/drata-controls-api-openapi.yml
- aid: drata:drata-evidence-library-api
  name: Drata Evidence Library API
  description: The Evidence Library API from Drata — 1 operation(s) for evidence library.
  humanURL: https://developers.drata.com/openapi/reference/v2/overview/
  baseURL: https://public-api.drata.com
  tags:
  - Evidence Library
  properties:
  - type: OpenAPI
    url: openapi/drata-evidence-library-api-openapi.yml
- aid: drata:drata-frameworks-api
  name: Drata Frameworks API
  description: The Frameworks API from Drata — 1 operation(s) for frameworks.
  humanURL: https://developers.drata.com/openapi/reference/v2/overview/
  baseURL: https://public-api.drata.com
  tags:
  - Frameworks
  properties:
  - type: OpenAPI
    url: openapi/drata-frameworks-api-openapi.yml
- aid: drata:drata-monitoring-tests-api
  name: Drata Monitoring Tests API
  description: The Monitoring Tests API from Drata — 1 operation(s) for monitoring tests.
  humanURL: https://developers.drata.com/openapi/reference/v2/overview/
  baseURL: https://public-api.drata.com
  tags:
  - Monitoring Tests
  properties:
  - type: OpenAPI
    url: openapi/drata-monitoring-tests-api-openapi.yml
- aid: drata:drata-personnel-api
  name: Drata Personnel API
  description: The Personnel API from Drata — 2 operation(s) for personnel.
  humanURL: https://developers.drata.com/openapi/reference/v2/overview/
  baseURL: https://public-api.drata.com
  tags:
  - Personnel
  properties:
  - type: OpenAPI
    url: openapi/drata-personnel-api-openapi.yml
- aid: drata:drata-policies-api
  name: Drata Policies API
  description: The Policies API from Drata — 1 operation(s) for policies.
  humanURL: https://developers.drata.com/openapi/reference/v2/overview/
  baseURL: https://public-api.drata.com
  tags:
  - Policies
  properties:
  - type: OpenAPI
    url: openapi/drata-policies-api-openapi.yml
- aid: drata:drata-risks-api
  name: Drata Risks API
  description: The Risks API from Drata — 1 operation(s) for risks.
  humanURL: https://developers.drata.com/openapi/reference/v2/overview/
  baseURL: https://public-api.drata.com
  tags:
  - Risks
  properties:
  - type: OpenAPI
    url: openapi/drata-risks-api-openapi.yml
- aid: drata:drata-tasks-api
  name: Drata Tasks API
  description: The Tasks API from Drata — 1 operation(s) for tasks.
  humanURL: https://developers.drata.com/openapi/reference/v2/overview/
  baseURL: https://public-api.drata.com
  tags:
  - Tasks
  properties:
  - type: OpenAPI
    url: openapi/drata-tasks-api-openapi.yml
- aid: drata:drata-vendors-api
  name: Drata Vendors API
  description: The Vendors API from Drata — 1 operation(s) for vendors.
  humanURL: https://developers.drata.com/openapi/reference/v2/overview/
  baseURL: https://public-api.drata.com
  tags:
  - Vendors
  properties:
  - type: OpenAPI
    url: openapi/drata-vendors-api-openapi.yml
common:
- type: AgenticAccess
  url: agentic-access/drata-agentic-access.yml
- type: TrustCenter
  url: security/drata-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/drata-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/drata-domain-security.yml
- type: Authentication
  url: authentication/drata-authentication.yml
- type: GitHubOrganization
  url: https://github.com/drata
- type: LinkedIn
  url: https://www.linkedin.com/company/drata
- type: Website
  url: https://drata.com/
- type: Developer
  url: https://developers.drata.com/
- type: Plans
  url: plans/drata-plans-pricing.yml
- type: RateLimits
  url: rate-limits/drata-rate-limits.yml
- type: FinOps
  url: finops/drata-finops.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com