Merge Unified's Drata integration Merge Agent Handler's Drata MCP server

Connect your AI Agents to Drata in minutes

Merge lets you securely connect your agents to Drata and thousands of tools instantly

Start building for free

Read docs

Drata

Learn more about Merge Agent Handler

Available tools

list_assets

List assets with cursor pagination.

create_asset

Create an asset. Use list_users to find owner (ownerId) user ids.

get_asset

Get a single asset by ID. Use list_assets to find asset id.

update_asset

Update an existing asset. Use list_assets to find asset id.

delete_asset

Delete an asset by ID. Use list_assets to find asset id.

get_company

Get the current Drata company account details.

list_controls

List controls with cursor pagination. Use list_workspaces to find workspace id.

create_control

Inline file uploads are not supported; use URLs or pre-uploaded file keys where available. Create a control. Use listworkspaces to find workspace id; listusers for owner (ownersIds) user ids; list_policies for policyIds.

get_control

Get a single control by ID. Use listworkspaces to find workspace id. Use listcontrols to find control id.

update_control

Update an existing control. Use listworkspaces to find workspace id. Use listcontrols to find control id.

list_control_requirements

List the framework requirements mapped to a control. Use listworkspaces to find workspace id. Use listcontrols to find control id.

list_custom_field_definitions

List custom field definitions with cursor pagination.

get_custom_field_definition

Get a single custom field definition by ID. Use listcustomfield_definitions to find custom field id.

list_devices

List devices with cursor pagination.

list_personnel_devices

List the devices assigned to a person, with cursor pagination. Use list_personnel to find personnel id.

get_device

Get a single device by ID. Use list_devices to find device id.

list_device_apps

List the apps installed on a device, with cursor pagination. Use list_devices to find device id.

list_events

List events with cursor pagination.

get_event

Get a single event by ID. Use list_events to find event id.

list_evidence_library

List evidence library items with cursor pagination. Use list_workspaces to find workspace id.

create_evidence_library_item

Inline file uploads are not supported; use URLs or pre-uploaded file keys where available. Create an evidence library item. Use list_workspaces to find workspace id.

get_evidence_library_item

Get a single evidence library item by ID. Use listworkspaces to find workspace id. Use listevidence_library to find evidence library item id.

update_evidence_library_item

Inline file uploads are not supported; use URLs or pre-uploaded file keys where available. Update an existing evidence library item. Use listworkspaces to find workspace id. Use listevidence_library to find evidence library item id.

delete_evidence_library_item

Delete an evidence library item by ID. Use listworkspaces to find workspace id. Use listevidence_library to find evidence library item id.

list_evidence

List evidence with cursor pagination. Use list_workspaces to find workspace id.

create_evidence

Create an evidence item. Use list_workspaces to find workspace id.

get_evidence

Get a single evidence item by ID. Use listworkspaces to find workspace id. Use listevidence to find evidence id.

update_evidence

Update an existing evidence item. Use listworkspaces to find workspace id. Use listevidence to find evidence id.

delete_evidence

Delete an evidence item by ID. Use listworkspaces to find workspace id. Use listevidence to find evidence id.

list_evidence_artifacts

List the artifacts attached to an evidence item, with cursor pagination. Use listworkspaces to find workspace id. Use listevidence to find evidence id.

list_frameworks

List frameworks with cursor pagination. Use list_workspaces to find workspace id.

list_framework_requirements

List all framework requirements in a workspace with cursor pagination, across every framework. Use listrequirementsforframework for one framework. Use listworkspaces to find workspace id.

list_requirements_for_framework

List the requirements belonging to one framework, with cursor pagination. Use listworkspaces to find workspace id. Use listframeworks to find framework id.

list_groups

List groups with cursor pagination.

list_monitoring_tests

List monitoring tests with cursor pagination. Use list_workspaces to find workspace id.

create_monitoring_test

Create a monitoring test. Use list_workspaces to find workspace id.

get_monitoring_test

Get a single monitoring test by ID. Use listworkspaces to find workspace id. Use listmonitoring_tests to find test id.

update_monitoring_test

Update an existing monitoring test. Use listworkspaces to find workspace id. Use listmonitoring_tests to find test id.

list_monitoring_test_failures

List the failing resources of a monitoring test, with cursor pagination. Use listworkspaces to find workspace id. Use listmonitoring_tests to find test id.

list_monitoring_test_passes

List the passing resources of a monitoring test, with cursor pagination. Use listworkspaces to find workspace id. Use listmonitoring_tests to find test id.

run_monitoring_test

Trigger a re-run of a monitoring test by ID. Use listworkspaces to find workspace id. Use listmonitoring_tests to find test id.

list_personnel

List personnel with cursor pagination.

search_personnel

Search personnel with filters and an optional free-text query.

get_personnel

Get a single person by ID. Use list_personnel to find personnel id.

update_personnel

Update an existing person record. Use list_personnel to find personnel id.

list_policies

List policies with cursor pagination.

create_policy

Create a policy. Use listusers to find owner (ownerId) user ids; use listgroups to find acknowledgement group ids.

list_policy_versions

List the versions of a policy, with cursor pagination. Use list_policies to find policy id.

get_policy

Get a single policy by ID. Use list_policies to find policy id.

update_policy

Update an existing policy. Use list_policies to find policy id.

get_policy_version

Get a single policy version by ID. Use listpolicies to find policy id. Use listpolicy_versions to find policy version id.

list_risk_registers

List risk registers with cursor pagination.

create_risk_register

Create a risk register.

get_risk_register

Get a single risk register by ID. Use listriskregisters to find risk register id.

update_risk_register

Update an existing risk register. Use listriskregisters to find risk register id.

delete_risk_register

Delete a risk register by ID. Use listriskregisters to find risk register id.

list_risks

List risks with cursor pagination. Use listriskregisters to find risk register id.

create_risk

Create a risk. Use listriskregisters to find risk register id; listusers for owners/reviewers; listcontrols for controls; list_vendors for vendorId.

search_risks

Search risks with filters and an optional free-text query.

get_risk

Get a single risk by ID. Use listriskregisters to find risk register id. Use list_risks to find risk id.

update_risk

Update an existing risk. Use listriskregisters to find risk register id. Use list_risks to find risk id.

delete_risk

Delete a risk by ID. Use listriskregisters to find risk register id. Use list_risks to find risk id.

list_tasks

List tasks in a workspace, with cursor pagination. Use list_workspaces to find workspace id.

create_task

Create a task. Use listworkspaces to find workspace id; listusers for assigneeId; listcontrols, listrisks, list_policies for the ids to link.

get_task

Get a single task by ID. Use listworkspaces to find workspace id. Use listtasks to find task id.

update_task

Update an existing task. Use listworkspaces to find workspace id. Use listtasks to find task id.

list_upcoming_tasks

List upcoming tasks in a workspace, with cursor pagination. Use list_workspaces to find workspace id.

list_user_documents

List user documents with cursor pagination. Use list_users to find user id.

get_user_document

Get a single user document by ID. Use list_users to find user id.

list_roles

List roles and their permissions, with cursor pagination.

get_role

Get a single role and its permissions by ID. Use list_roles to find role id.

list_role_users

List the users assigned a given role, with cursor pagination. Use list_roles to find role id.

list_users

List users and the roles they hold, with cursor pagination.

get_user

Get a single user and their roles by ID. Use list_users to find user id.

validate_credential

Validate Drata credentials by listing workspaces. Returns success and a message.

list_vendor_documents

List vendor documents with cursor pagination. Use list_vendors to find vendor id.

get_vendor_document

Get a single vendor document by ID. Use list_vendors to find vendor id.

create_vendor_security_review

Create a vendor security review. Use list_vendors to find vendor id.

list_vendor_security_reviews

List vendor security reviews with cursor pagination.

list_vendors

List vendors with cursor pagination.

create_vendor

Create a vendor. Use list_users to find the compliance owner (userId) user id.

search_vendors

Search vendors with filters and an optional free-text query.

get_vendor_stats

Get aggregate vendor statistics. Requires at least one expand facet.

get_vendor

Get a single vendor by ID. Use list_vendors to find vendor id.

update_vendor

Update an existing vendor. Use list_vendors to find vendor id.

delete_vendor

Delete a vendor by ID. Use list_vendors to find vendor id.

list_vendor_types

List vendor types with cursor pagination.

create_vendor_type

Create a vendor type.

update_vendor_type

Update an existing vendor type. Use listvendortypes to find vendor type id.

delete_vendor_type

Delete a vendor type by ID. Use listvendortypes to find vendor type id.

list_workspaces

List workspaces with cursor pagination.

View all tools by creating a free account See more tools

How to set up Merge Agent Handler

In an mcp.json file, add the configuration below, and restart Cursor.

Learn more in the official documentation ↗

1{
2  "mcpServers": {
3    "agent-handler": {
4      "url": "https://ah-api-develop.merge.dev/api/v1/tool-packs/{TOOL_PACK_ID}/registered-users/{REGISTERED_USER_ID}/mcp",
5      "headers": {
6        "Authorization": "Bearer yMt*****"
7      }
8    }
9  }
10}
11

Copy Code

Open your Claude Desktop configuration file and add the server configuration below. You'll also need to restart the application for the changes to take effect.

Make sure Claude is using the Node v20+.

Learn more in the official documentation ↗

1{
2  "mcpServers": {
3    "agent-handler": {
4      "command": "npx",
5      "args": [
6        "-y",
7        "mcp-remote@latest",
8        "https://ah-api-develop.merge.dev/api/v1/tool-packs/{TOOL_PACK_ID}/registered-users/{REGISTERED_USER_ID}/mcp",
9        "--header",
10        "Authorization: Bearer ${AUTH_TOKEN}"
11      ],
12      "env": {
13        "AUTH_TOKEN": "yMt*****"
14      }
15    }
16  }
17}

Copy Code

Open your Windsurf MCP configuration file and add the server configuration below.
Click on the refresh button in the top right of the Manage MCP server page or in the top right of the chat box in the box icon.

Learn more in the official documentation ↗

1{
2    "mcpServers": {
3      "agent-handler": {
4        "command": "npx",
5        "args": [
6          "-y",
7          "mcp-remote@latest",
8          "https://ah-api.merge.dev/api/v1/tool-packs/<tool-pack-id>/registered-users/<registered-user-id>/mcp",
9          "--header",
10          "Authorization: Bearer ${AUTH_TOKEN}"
11        ],
12        "env": {
13          "AUTH_TOKEN": "<ah-production-access-key>"
14        }
15      }
16    }
17  }

Copy Code

In Command Palette (Cmd+Shift+P on macOS, Ctrl+Shift+P on Windows), run "MCP: Open User Configuration".

You can then add the configuration below and press "start" right under servers. Enter the auth token when prompted.

Learn more in the official documentation ↗

1{
2  "inputs": [
3    {
4      "type": "promptString",
5      "id": "agent-handler-auth",
6      "description": "Agent Handler AUTH_TOKEN", // "yMt*****" when prompt
7      "password": true
8    }
9  ],
10  "servers": {
11    "agent-handler": {
12      "type": "stdio",
13      "command": "npx",
14      "args": [
15        "-y",
16        "mcp-remote@latest",
17        "https://ah-api-develop.merge.dev/api/v1/tool-packs/{TOOL_PACK_ID}/registered-users/{REGISTERED_USER_ID}/mcp",
18        "--header",
19        "Authorization: Bearer ${input:agent-handler-auth}"
20      ]
21    }
22  }
23}