Drata MCP server

What the model can do

Drata compliance automation: workspaces and frameworks with readiness, controls with their evidence, tests and owners, monitoring tests that pass or fail, evidence due for renewal, personnel compliance checks, vendors by risk, risks in the risk registers, and tasks. Can add a note to a control or a risk, create, update or delete a risk, create, edit or complete a task, re-run a monitoring test, create or update a vendor, and edit a control or mark it in or out of scope.

Reads

• drata_list_workspacesDrata workspaces with their frameworks and personnel in scope.
• drata_list_frameworksCompliance frameworks in a Drata workspace (SOC 2, ISO 27001…): whether enabled and ready, controls in scope…
• drata_list_controlsControls in a Drata workspace: code, name, whether ready, whether it has evidence, a policy and an owner, passing and failing test counts…
• drata_list_monitoring_testsDrata monitoring tests (automated checks against the company's systems): name, result (PASSED, FAILED, ERROR…), status, source…
• drata_list_evidenceEvidence in the Drata evidence library: name, status (READY, NEEDS_ARTIFACT, EXPIRED, EXPIRING_SOON…), renewal date and schedule…
• drata_list_personnelPeople Drata tracks for compliance: name, employment status, and which compliance checks (security training, device, policies…
• drata_list_vendorsVendors in Drata's vendor register: name, category, risk, impact level, type, critical, status, whether it holds personal data or is a sub-processor…
• drata_list_risksRisks in a Drata risk register: identifier, title, status, treatment plan, inherent and residual score (1 to 25), owners…
• drata_list_control_notesNotes left on one Drata control, newest first, with who wrote each and when.
• drata_list_tasksCompliance tasks in a Drata workspace: title, status (INCOMPLETE, PAST_DUE, COMPLETED), type, due date, assignee by name and linked controls.

Acts, when you ask

These change something in Drata. The model is told to use them only when you ask for exactly that, and each one is granted by name: per team on a shared connection, by the owner on a personal one.

• drata_add_control_noteAdds a note (at most 191 characters, Drata's limit) to a Drata control, attributed to the API key's user.
• drata_add_risk_noteAdds a note (at most 768 characters, Drata's limit) to a risk in a Drata risk register, attributed to the API key's user.
• drata_create_riskAdd a risk to a Drata risk register (an internal risk, or an external one when vendor_id is given).
• drata_update_riskUpdate a risk in a Drata risk register: its title, description, inherent or residual scores, treatment plan and details, dates or status (ACTIVE…
• drata_delete_riskDelete a risk from a Drata risk register permanently, with its notes and links.
• drata_create_taskCreate a compliance task in a Drata workspace, due on a date, optionally assigned to a Drata user (by user id…
• drata_update_taskEdit a Drata task's title, description, due date or assignee (a new assignee may be notified).
• drata_complete_taskMark a Drata task complete, or incomplete again.
• drata_run_monitoring_testRe-run a Drata monitoring test now instead of waiting for its schedule, by its test_id (the workspace-scoped testId from drata_list_monitoring_tests…
• drata_create_vendorAdd a vendor to Drata's vendor register (needs a Drata plan with Third Party Risk Management).
• drata_update_vendorUpdate a vendor in Drata's vendor register: status (e.g. APPROVED, OFFBOARDED, ARCHIVED), risk, category, impact level, critical…
• drata_update_controlEdit a Drata control's name, description, question or activity text.
• drata_set_control_scopeMark a Drata control out of scope, which archives it and takes it out of framework readiness (a rationale is required and kept for auditors)…

Connect it

First connect Drata on Dashboard → Connections, then add Memtro to your client once. The Drata tools appear alongside the tools of everything else you have connected; nothing is configured per connector.

claude plugin marketplace add memtro-org/claude-memtro
claude plugin install memtro@memtro --config api_key=sk-memtro-...

{
  "mcpServers": {
    "memtro": {
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

{
  "mcp": {
    "memtro": {
      "type": "remote",
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

Who may use it

The key identifies the person, and the server offers that person the tools they may use everywhere else in Memtro. A shared Drata connection is used by the teams an administrator granted it to, tool by tool, on the Permissions page; a personal connection is used by its owner alone, and its tools that act stay off until the owner allows them. See Teams and permissions and Connectors.

Ask it like this

• › Which SOC 2 controls are not ready?
• › How close are we to SOC 2?
• › Who still has not done security training?
• › What evidence expires this month?
• › Re-run the MFA monitoring test now that the fix is in.

Questions

Is this an official Drata MCP server?

No. It is Memtro's MCP server with Memtro's Drata connector behind it: the connector reads Drata through its API with the credentials you connect on Dashboard → Connections, and Drata publishes nothing here. The same endpoint carries every other system you connect and Memtro's memory tools.

What does it cost?

Nothing on top of Memtro. One price per organisation by its number of users, from $50 a month for up to 10 users after a 7-day free trial, with every connector, the MCP server, jobs and memory included. You bring your own model keys.

Can it change anything in Drata?

Only when you ask, and only what it has been granted: add a note to a control; add a note to a risk; create a risk in a risk register, or update its score, treatment, status or details; delete a risk from a risk register permanently; create a compliance task, edit it, or mark it complete or incomplete; re-run a monitoring test now; create a vendor, or update a vendor's status, risk, category or details; edit a control's name, description, question or activity; mark a control out of scope (archives it) or back in scope. Every other tool reads, searches or lists. An administrator grants each acting tool by name per team, and a personal connection acts only after its owner allows it.

Which clients work?

Any MCP client that speaks Streamable HTTP: Claude Code, Cursor, Claude Desktop, OpenCode, Codex, Zed, Windsurf, Cline and the Anthropic and OpenAI SDKs. There is no local process to run; the server is remote and authenticated with your key.

Other MCP servers · Engineering and operations

• GitHub MCP server
• AWS CloudWatch MCP server
• Sentry MCP server
• ServiceNow MCP server
• Okta MCP server
• Twilio MCP server