Drata

1

Domain

The default API domain for Drata is public-api.drata.com. Use this domain unless your organization has a custom API endpoint.

2

API Token

To connect to Drata, you need an API token. Follow these steps:

• Go to the Settings page in Drata (bottom-left navigation → Settings).

• Select API Keys, then click Create API Key.

• Enter the required details:

  • Name: Choose a name for the API key (cannot be changed).

  • Expiration Date: Choose 12 months, Never, or Custom (default: 12 months).

  • Allowed IP Addresses (optional): Restrict usage to specific IP addresses, or leave empty to allow all sources.

  • Scopes:

    • Custom: Manually select specific scopes.

    • All read: Enable all current and future read permissions/scopes.

    • All read and write: Enable all current and future permissions/scopes.

• Save the key and store it securely. After selecting Done, the full API key will not be shown again.

3

Fetch Installed Software

Enable this option to fetch installed software information. (default: False)

Please perform a connection test to ensure there is a valid connection to the Drata host. When the discovery operation is finalized, you will be able to see the details on the Assets page.