Drata

Use this procedure to configure OAuth for the MCP in Drata.

Select MCP OAuth Configuration. You must be an administrator in Drata to access this page.

Enter a name for the OAuth configuration.

Enter a description of the configuration.

Set an expiration date for the configuration.

After you configure the scopes, follow the setup instructions for your specific MCP client.

1. Go to Settings.
2. Select MCP OAuth Configuration. You must be an administrator in Drata to access this page.
3. Enter a name for the OAuth configuration.
4. Enter a description of the configuration.
5. Set an expiration date for the configuration.
6. Select the scopes you want to configure.
7. After you configure the scopes, follow the setup instructions for your specific MCP client.

Drata provides a remote hosted MCP server at:

<code>https://mcp.drata.com/mcp/ # Official US</code>

<code>https://mcp-euc1.drata.com/mcp/ # EU</code>

<code>https://mcp-apse2.drata.com/mcp/ # APAC</code>

- <code>https://mcp.drata.com/mcp/ # Official US</code>
- <code>https://mcp-euc1.drata.com/mcp/ # EU</code>
- <code>https://mcp-apse2.drata.com/mcp/ # APAC</code>

End users can access only the intersection of the OAuth scopes you configure and the permissions granted by their assigned roles. Users cannot access anything beyond what their roles inside the application allow while using the Drata MCP.

The following table describes each available OAuth scope and the roles that can use it.

For Claude, please refer to the instructions <a href="https://support.claude.com/en/articles/11175166-getting-started-with-custom-connectors-using-remote-mcp" rel="nofollow noopener noreferrer" target="_blank">here</a>.

For ChatGPT, please refer to the instructions <a href="https://developers.openai.com/apps-sdk/deploy/connect-chatgpt/" rel="nofollow noopener noreferrer" target="_blank">here</a>.

For Cursor, please refer to the instructions <a href="https://cursor.com/docs/context/mcp" rel="nofollow noopener noreferrer" target="_blank">here</a>.

For Microsoft Copilot, please refer to the instructions <a href="https://learn.microsoft.com/en-us/microsoft-copilot-studio/mcp-add-existing-server-to-agent" rel="nofollow noopener noreferrer" target="_blank">here</a>.

- For Claude, please refer to the instructions <a href="https://support.claude.com/en/articles/11175166-getting-started-with-custom-connectors-using-remote-mcp" rel="nofollow noopener noreferrer" target="_blank">here</a>.
- For ChatGPT, please refer to the instructions <a href="https://developers.openai.com/apps-sdk/deploy/connect-chatgpt/" rel="nofollow noopener noreferrer" target="_blank">here</a>.
- For Cursor, please refer to the instructions <a href="https://cursor.com/docs/context/mcp" rel="nofollow noopener noreferrer" target="_blank">here</a>.
- For Microsoft Copilot, please refer to the instructions <a href="https://learn.microsoft.com/en-us/microsoft-copilot-studio/mcp-add-existing-server-to-agent" rel="nofollow noopener noreferrer" target="_blank">here</a>.

MCP Setup

Home

Contact Sales

Support

Find answers and get help from Intercom Support and Community Experts

This site employs cookies and other technologies that we and our third party vendors use to monitor and record personal information about you and your interactions with the site (including content viewed, cursor movements, screen recordings, and chat contents) for the purposes described in our Cookie Policy. By continuing to visit our site, you agree to our {websiteTermsLink}, {privacyPolicyLink} and {cookiePolicyLink}.

This site uses cookies and similar technologies ("cookies") as strictly necessary for site operation. We and our partners also would like to set additional cookies to enable site performance analytics, functionality, advertising and social media features. See our {cookiePolicyLink} for details. You can change your cookie preferences in our Cookie Settings.

We use cookies to make our site work and also for analytics and advertising purposes. You can enable or disable optional cookies as desired. See our {cookiePolicyLink} for more details.

Advertising cookies are set by our advertising partners to collect information about your use of the site, our communications, and other online services over time and with different browsers and devices. They use this information to show you ads online that they think will interest you and measure the ads' performance. Social media cookies are set by social media platforms to enable you to share content on those platforms, and are capable of tracking information about your activity across other online services for use as described in their privacy policies.

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

These cookies are necessary for the website to function and cannot be switched off in our systems.

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

You have the right to opt out of the sale of your personal information. See our {cookiePolicyLink} for more details about how we use your data.

Your Privacy Choices

We use cookies to enhance your experience. You can customize your cookie preferences below. See our {cookiePolicyLink} for more details.

Cookie Settings

Link, Press control-option-right-arrow to exit

Empty Help Center

Uh oh. That page doesn’t exist.

Search

Disappointed

Neutral

Smiley

Thinking...

Searching through sources...

Analyzing...

Tickets submitted through the messenger or by a support agent in your conversation will appear here.

OAuth Scope	Description	Allowed Roles
read:risk	View Risks in Risk Registers	Admin, Risk Manager, Risk Register Owner, Workspace Administrator
read:controls	View Controls list	Admin, Control Manager, DevOps Engineer, Risk Manager, Risk Register Owner, Information Security Lead, Workspace Administrator
read:control	View Control details and requirements	Admin, Control Manager, DevOps Engineer, Information Security Lead, Workspace Administrator
read:policy	View Policies	Admin, Policy Manager, Information Security Lead, Workspace Administrator
read:workspace	View Workspaces	Admin
read:risk-registers	View Risk Registers	Admin, Risk Manager
read:assigned-policies	View User Assigned Policies	Admin, Control Manager, DevOps Engineer, Employee, Internal Auditor, Knowledge Base, People Ops, Policy Manager, Reviewer, Risk Manager, Information Security Lead, Trust Center Manager, Trust Center Reviewer, Workspace Administrator
read:monitor-test	View Monitoring Tests	Admin, Control Manager, DevOps Engineer, Information Security Lead, Workspace Administrator

MCP Setup

Configure an OAuth configuration

OAuth scopes

MCP client setup instructions