# Drata

{% stepper %}
{% step %}

### Domain

The default API domain for Drata is `public-api.drata.com`.\
Use this domain unless your organization has a custom API endpoint.
{% endstep %}

{% step %}

### API Token

To connect to Drata, you need an API token. Follow these steps:

* Go to the **Settings** page in Drata (bottom-left navigation → Settings).
* Select **API Keys**, then click **Create API Key**.
* Enter the required details:
  * **Name**: Choose a name for the API key (cannot be changed).
  * **Expiration Date**: Choose **12 months**, **Never**, or **Custom** (default: 12 months).
  * **Allowed IP Addresses** *(optional)*: Restrict usage to specific IP addresses, or leave empty to allow all sources.
  * **Scopes**:
    * *Custom*: Manually select specific scopes.
    * *All read*: Enable all current and future read permissions/scopes.
    * *All read and write*: Enable all current and future permissions/scopes.
* Save the key and store it securely. After selecting **Done**, the full API key will not be shown again.
  {% endstep %}

{% step %}

### Fetch Installed Software

Enable this option to fetch installed software information.\
\&#xNAN;*(default: **False**)*
{% endstep %}
{% endstepper %}

{% hint style="warning" %}
Please perform a **connection test** to ensure there is a valid connection to the Drata host.\
When the discovery operation is finalized, you will be able to see the details on the **Assets** page.
{% endhint %}