Skip to main content
All Drata integration capabilities

​
About

This is an MCP connector that gives the Sazabi agent tools from Drata’s hosted MCP server. Drata authenticates via OAuth with dynamic client registration, with separate hosts and sign-in for the United States, Europe, and Asia Pacific. Each call is limited to what the Drata user who signs in is allowed to see. Sazabi connects it read-only: tools that create, update, or delete Drata data stay blocked. What the agent can do:
  • Search controls, framework requirements, and monitoring tests with their pass and fail results
  • Read the evidence library, policies, risks, and risk registers
  • Review vendors with their security reviews and documents
  • Check personnel and device compliance, such as encryption and agent status

​
Prerequisites

  • A Drata account where an administrator has turned on the MCP server (Settings > MCP Configuration)
  • Your Drata region — United States (US), Europe (EU), or Asia Pacific (APAC); you select it when connecting

​
Set up in the dashboard

Configure connectors in the dashboard under Settings > MCP connectors.
1

​
Enable MCP in Drata

A Drata administrator opens Settings > MCP Configuration in Drata and makes sure the MCP server is enabled.
2

​
Open the connector

Find Drata in Settings > MCP connectors.
3

​
Choose your region

Select the region your Drata account runs in: United States, Europe, or Asia Pacific.
4

​
Authorize

Start the connection. Sazabi redirects you to Drata to sign in and approve access, then back.

​
Set up with the CLI

You can also connect Drata with the Sazabi CLI (installed and authenticated — see sazabi mcp-connectors reference). Drata authenticates over OAuth, so the CLI opens a browser to complete authorization:
For Europe or Asia Pacific, pass the region’s server URL, for example --server-url https://mcp-euc1.drata.com/mcp/ or --server-url https://mcp-apse2.drata.com/mcp/. Sazabi uses this connector read-only, so write tools stay blocked even without --read-only; pass --project-id <project> to target a specific project. In --json mode the command prints an authorization URL to open, then polls until the connection completes. Confirm the result with sazabi mcp-connectors list.

​
Verify

Open the connector’s connection page under Settings > MCP connectors and confirm Sazabi lists the tools it discovered. Then, in a thread, ask the agent to use one of those tools and confirm it runs. If no tools appear, confirm the connection is authorized and you selected the region your Drata account runs in.

​
Troubleshooting

Sign-in is refused or no tools appear — Confirm a Drata administrator enabled the MCP server under Settings > MCP Configuration and that your Drata role is allowed to use it. No tools discovered — Disconnect and reconnect from Settings > MCP connectors, choosing the region your Drata account runs in. Connection shows needs attention — The authorization may have expired or been revoked; reconnect from Settings > MCP connectors.

​
Further reading

Agent tools

How the agent uses connector tools.

MCP connectors

Browse the connector catalog.