Devices

Device are computers used by personnel. The data is provided by the Drata Agent or an MDM connection.

List Devices

🔒 Requires Devices: List Devices permission.

Securitybearer
Request
query Parameters
cursor
string

This parameter is used to paginate through results. No value is needed for the first request. If there are additional results, the response will contain a pagination.cursor value that can be used in the subsequent request to retrieve the next page of results

size
number [ 1 .. 50 ]
Default: 20

Number of results to return

sort
string (SortTypeLimitedEnum)

Which field to sort by

Enum: "createdAt" "updatedAt"
sortDir
string (SortDirectionEnum)

The direction to sort the data

Enum: "ASC" "DESC"
externalId
string <= 191 characters

An externally sourced unique identifier for a device

expand[]
Array of strings (DeviceExpandEnum)

List of subcollections and sub-objects to expand

Items Enum: "asset" "complianceChecks" "documents" "identifiers"
macAddress
string

The device MAC address

Example: macAddress=65-F9-3D-85-7B-6B,99-A9-3E-14-7A-3E
serialNumber
string

The device serial number

Example: serialNumber=NKRTSPY456
sourceType
string (MobileDeviceManagementSourceTypeEnum)

Device source type

Enum: "AGENT" "JAMF" "INTUNE" "KANDJI" "JUMPCLOUD" "HEXNODE_UEM" "UNKNOWN" "RIPPLING" "WORKSPACE_ONE" "KOLIDE" "CUSTOM" "INTUNE_GCC_HIGH"
personnelId
number

Personnel ID

Responses
200

Successful

400

Malformed data and/or validation errors

401

Invalid Authorization

402

You must upgrade your plan to use this feature

403

You are not allowed to perform this action

412

You must accept the Drata terms and conditions to use the API

500

Internal server error

get/devices
Request samples
Response samples
application/json
{
  • "data": [
    • {
      • "id": 1,
      • "osVersion": "MacOS 10.15.6",
      • "serialNumber": "C02T6CDJGTFL",
      • "model": "MacBook Pro",
      • "macAddress": "65-F9-3D-85-7B-6B,99-A9-3E-14-7A-3E",
      • "lastCheckedAt": "2025-07-01T16:45:55.246Z",
      • "sourceType": "AGENT",
      • "createdAt": "2025-07-01T16:45:55.246Z",
      • "updatedAt": "2025-07-01T16:45:55.246Z",
      • "deletedAt": "2025-07-01T16:45:55.246Z",
      • "appsCount": 20,
      • "isDeviceCompliant": false,
      • "complianceChecks": [ ],
      • "identifiers": [ ],
      • "documents": [ ],
      • "screenLockTime": 30,
      • "screenLockExplanation": {
        • "minutesIdleBeforeSleep": "2",
        • "minutesSleepingBeforePasswordIsRequired": "2"
        },
      • "antivirusEnabled": true,
      • "antivirusExplanation": "No matching app was found",
      • "autoUpdateEnabled": true,
      • "autoUpdateExplanation": "No compliances found",
      • "passwordManagerEnabled": true,
      • "passwordManagerExplanation": {
        • "passwordManagerApps": [
          • "1password 7"
          ]
        },
      • "encryptionEnabled": false,
      • "encryptionExplanation": "No encryption provided",
      • "firewallEnabled": true,
      • "firewallExplanation": "{}",
      • "asset": {
        • "id": 1,
        • "name": "MacBook Pro - Space Black 16-inch",
        • "description": "MacBook Pro Space Black - with 16-inch Liquid Retina XDR display",
        • "assetType": "PHYSICAL",
        • "assetProvider": "AGENT",
        • "approvedAt": "2025-07-01T16:45:55.246Z",
        • "removedAt": "2025-07-01T16:45:55.246Z",
        • "company": "Acme, Inc",
        • "notes": "string",
        • "assetReferenceType": "PERSONNEL",
        • "uniqueId": "C02T6CDJGTFL",
        • "createdAt": "2025-07-01T16:45:55.246Z",
        • "updatedAt": "2025-07-01T16:45:55.246Z",
        • "externalId": "i-0c844e3b433e4e3f",
        • "externalOwnerId": "account-353"
        },
      • "userId": 1,
      • "personnelId": 1,
      • "externalId": "aaaaaaaa-bbbb-0000-cccc-dddddddddddd"
      }
    ],
  • "pagination": {
    • "cursor": "string"
    }
}

List Devices for Personnel

🔒 Requires Devices: List Devices permission.

Securitybearer
Request
path Parameters
personnelId
required
number
query Parameters
cursor
string

This parameter is used to paginate through results. No value is needed for the first request. If there are additional results, the response will contain a pagination.cursor value that can be used in the subsequent request to retrieve the next page of results

size
number [ 1 .. 50 ]
Default: 20

Number of results to return

sort
string (SortTypeLimitedEnum)

Which field to sort by

Enum: "createdAt" "updatedAt"
sortDir
string (SortDirectionEnum)

The direction to sort the data

Enum: "ASC" "DESC"
externalId
string <= 191 characters

An externally sourced unique identifier for a device

expand[]
Array of strings (DeviceExpandEnum)

List of subcollections and sub-objects to expand

Items Enum: "asset" "complianceChecks" "documents" "identifiers"
macAddress
string

The device MAC address

Example: macAddress=65-F9-3D-85-7B-6B,99-A9-3E-14-7A-3E
serialNumber
string

The device serial number

Example: serialNumber=NKRTSPY456
sourceType
string (MobileDeviceManagementSourceTypeEnum)

Device source type

Enum: "AGENT" "JAMF" "INTUNE" "KANDJI" "JUMPCLOUD" "HEXNODE_UEM" "UNKNOWN" "RIPPLING" "WORKSPACE_ONE" "KOLIDE" "CUSTOM" "INTUNE_GCC_HIGH"
Responses
200

Successful

401

Invalid Authorization

402

You must upgrade your plan to use this feature

403

You are not allowed to perform this action

404

Not Found

412

You must accept the Drata terms and conditions to use the API

500

Internal server error

get/personnel/{personnelId}/devices
Request samples
Response samples
application/json
{
  • "data": [
    • {
      • "id": 1,
      • "osVersion": "MacOS 10.15.6",
      • "serialNumber": "C02T6CDJGTFL",
      • "model": "MacBook Pro",
      • "macAddress": "65-F9-3D-85-7B-6B,99-A9-3E-14-7A-3E",
      • "lastCheckedAt": "2025-07-01T16:45:55.246Z",
      • "sourceType": "AGENT",
      • "createdAt": "2025-07-01T16:45:55.246Z",
      • "updatedAt": "2025-07-01T16:45:55.246Z",
      • "deletedAt": "2025-07-01T16:45:55.246Z",
      • "appsCount": 20,
      • "isDeviceCompliant": false,
      • "complianceChecks": [ ],
      • "identifiers": [ ],
      • "documents": [ ],
      • "screenLockTime": 30,
      • "screenLockExplanation": {
        • "minutesIdleBeforeSleep": "2",
        • "minutesSleepingBeforePasswordIsRequired": "2"
        },
      • "antivirusEnabled": true,
      • "antivirusExplanation": "No matching app was found",
      • "autoUpdateEnabled": true,
      • "autoUpdateExplanation": "No compliances found",
      • "passwordManagerEnabled": true,
      • "passwordManagerExplanation": {
        • "passwordManagerApps": [
          • "1password 7"
          ]
        },
      • "encryptionEnabled": false,
      • "encryptionExplanation": "No encryption provided",
      • "firewallEnabled": true,
      • "firewallExplanation": "{}",
      • "asset": {
        • "id": 1,
        • "name": "MacBook Pro - Space Black 16-inch",
        • "description": "MacBook Pro Space Black - with 16-inch Liquid Retina XDR display",
        • "assetType": "PHYSICAL",
        • "assetProvider": "AGENT",
        • "approvedAt": "2025-07-01T16:45:55.246Z",
        • "removedAt": "2025-07-01T16:45:55.246Z",
        • "company": "Acme, Inc",
        • "notes": "string",
        • "assetReferenceType": "PERSONNEL",
        • "uniqueId": "C02T6CDJGTFL",
        • "createdAt": "2025-07-01T16:45:55.246Z",
        • "updatedAt": "2025-07-01T16:45:55.246Z",
        • "externalId": "i-0c844e3b433e4e3f",
        • "externalOwnerId": "account-353"
        },
      • "userId": 1,
      • "personnelId": 1,
      • "externalId": "aaaaaaaa-bbbb-0000-cccc-dddddddddddd"
      }
    ],
  • "pagination": {
    • "cursor": "string"
    }
}

Get Device

🔒 Requires Devices: List Devices permission.

Securitybearer
Request
path Parameters
deviceId
required
number

The device ID

query Parameters
expand[]
Array of strings

List of subcollections and sub-objects to expand

Items Enum: "asset" "complianceChecks" "documents" "identifiers" "deviceApps"
Example: expand[]=complianceChecks
Responses
200

Successful

400

Malformed data and/or validation errors

401

Invalid Authorization

402

You must upgrade your plan to use this feature

403

You are not allowed to perform this action

412

You must accept the Drata terms and conditions to use the API

500

Internal server error

get/devices/{deviceId}
Request samples
Response samples
application/json
{
  • "id": 1,
  • "osVersion": "MacOS 10.15.6",
  • "serialNumber": "C02T6CDJGTFL",
  • "model": "MacBook Pro",
  • "macAddress": "65-F9-3D-85-7B-6B,99-A9-3E-14-7A-3E",
  • "lastCheckedAt": "2025-07-01T16:45:55.246Z",
  • "sourceType": "AGENT",
  • "createdAt": "2025-07-01T16:45:55.246Z",
  • "updatedAt": "2025-07-01T16:45:55.246Z",
  • "deletedAt": "2025-07-01T16:45:55.246Z",
  • "appsCount": 20,
  • "isDeviceCompliant": false,
  • "complianceChecks": [ ],
  • "identifiers": [ ],
  • "documents": [ ],
  • "screenLockTime": 30,
  • "screenLockExplanation": {
    • "minutesIdleBeforeSleep": "2",
    • "minutesSleepingBeforePasswordIsRequired": "2"
    },
  • "antivirusEnabled": true,
  • "antivirusExplanation": "No matching app was found",
  • "autoUpdateEnabled": true,
  • "autoUpdateExplanation": "No compliances found",
  • "passwordManagerEnabled": true,
  • "passwordManagerExplanation": {
    • "passwordManagerApps": [
      • "1password 7"
      ]
    },
  • "encryptionEnabled": false,
  • "encryptionExplanation": "No encryption provided",
  • "firewallEnabled": true,
  • "firewallExplanation": "{}",
  • "asset": {
    • "id": 1,
    • "name": "MacBook Pro - Space Black 16-inch",
    • "description": "MacBook Pro Space Black - with 16-inch Liquid Retina XDR display",
    • "assetType": "PHYSICAL",
    • "assetProvider": "AGENT",
    • "approvedAt": "2025-07-01T16:45:55.246Z",
    • "removedAt": "2025-07-01T16:45:55.246Z",
    • "company": "Acme, Inc",
    • "notes": "string",
    • "assetReferenceType": "PERSONNEL",
    • "uniqueId": "C02T6CDJGTFL",
    • "createdAt": "2025-07-01T16:45:55.246Z",
    • "updatedAt": "2025-07-01T16:45:55.246Z",
    • "externalId": "i-0c844e3b433e4e3f",
    • "externalOwnerId": "account-353"
    },
  • "userId": 1,
  • "personnelId": 1,
  • "externalId": "aaaaaaaa-bbbb-0000-cccc-dddddddddddd",
  • "apps": [
    • {
      • "id": 1,
      • "installedApp": "Adobe Photoshop version 3.3 license 1a2b3c4d"
      }
    ]
}

List Devices for Connection

🧪 BETA: Get a list of Devices for a given connection

🔒 Requires Devices: List Devices permission.

Securitybearer
Request
path Parameters
connectionId
required
number

The ID of the connection may be obtained in one of two ways:

  • Calling GET /connections and noting the id of the desired custom device connection in the response.
  • In the Drata App:
    • New Device Connection

      1. Navigate to Connections > MDM.
      2. Select the Available Connections tab.
      3. Chose Custom Device Connection.

      After successfully creating a device connection, the connection ID will be displayed under Account Information.

    • Existing Device Connection

      1. Navigate to Connections > MDM.
      2. Select the Active Connections tab.
      3. View a previously created custom device connection.

      The connection ID will be displayed under Account Information.

query Parameters
cursor
string

This parameter is used to paginate through results. No value is needed for the first request. If there are additional results, the response will contain a pagination.cursor value that can be used in the subsequent request to retrieve the next page of results

size
number [ 1 .. 50 ]
Default: 20

Number of results to return

sort
string (SortTypeLimitedEnum)

Which field to sort by

Enum: "createdAt" "updatedAt"
sortDir
string (SortDirectionEnum)

The direction to sort the data

Enum: "ASC" "DESC"
externalId
string <= 191 characters

An externally sourced unique identifier for a device

expand[]
Array of strings (DeviceExpandEnum)

List of subcollections and sub-objects to expand

Items Enum: "asset" "complianceChecks" "documents" "identifiers"
macAddress
string

The device MAC address

Example: macAddress=65-F9-3D-85-7B-6B,99-A9-3E-14-7A-3E
serialNumber
string

The device serial number

Example: serialNumber=NKRTSPY456
personnelId
number

Personnel Id

Responses
200

Successful

401

Invalid Authorization

402

You must upgrade your plan to use this feature

403

You are not allowed to perform this action

404

Not Found

412

You must accept the Drata terms and conditions to use the API

500

Internal server error

get/connections/{connectionId}/devices
Request samples
Response samples
application/json
{
  • "data": [
    • {
      • "id": 1,
      • "osVersion": "MacOS 10.15.6",
      • "serialNumber": "C02T6CDJGTFL",
      • "model": "MacBook Pro",
      • "macAddress": "65-F9-3D-85-7B-6B,99-A9-3E-14-7A-3E",
      • "lastCheckedAt": "2025-07-01T16:45:55.246Z",
      • "sourceType": "AGENT",
      • "createdAt": "2025-07-01T16:45:55.246Z",
      • "updatedAt": "2025-07-01T16:45:55.246Z",
      • "deletedAt": "2025-07-01T16:45:55.246Z",
      • "appsCount": 20,
      • "isDeviceCompliant": false,
      • "complianceChecks": [ ],
      • "identifiers": [ ],
      • "documents": [ ],
      • "screenLockTime": 30,
      • "screenLockExplanation": {
        • "minutesIdleBeforeSleep": "2",
        • "minutesSleepingBeforePasswordIsRequired": "2"
        },
      • "antivirusEnabled": true,
      • "antivirusExplanation": "No matching app was found",
      • "autoUpdateEnabled": true,
      • "autoUpdateExplanation": "No compliances found",
      • "passwordManagerEnabled": true,
      • "passwordManagerExplanation": {
        • "passwordManagerApps": [
          • "1password 7"
          ]
        },
      • "encryptionEnabled": false,
      • "encryptionExplanation": "No encryption provided",
      • "firewallEnabled": true,
      • "firewallExplanation": "{}",
      • "asset": {
        • "id": 1,
        • "name": "MacBook Pro - Space Black 16-inch",
        • "description": "MacBook Pro Space Black - with 16-inch Liquid Retina XDR display",
        • "assetType": "PHYSICAL",
        • "assetProvider": "AGENT",
        • "approvedAt": "2025-07-01T16:45:55.246Z",
        • "removedAt": "2025-07-01T16:45:55.246Z",
        • "company": "Acme, Inc",
        • "notes": "string",
        • "assetReferenceType": "PERSONNEL",
        • "uniqueId": "C02T6CDJGTFL",
        • "createdAt": "2025-07-01T16:45:55.246Z",
        • "updatedAt": "2025-07-01T16:45:55.246Z",
        • "externalId": "i-0c844e3b433e4e3f",
        • "externalOwnerId": "account-353"
        },
      • "userId": 1,
      • "personnelId": 1,
      • "externalId": "aaaaaaaa-bbbb-0000-cccc-dddddddddddd"
      }
    ],
  • "pagination": {
    • "cursor": "string"
    }
}

List Apps for Device

Get a list of Apps associated with a given Device.

🔒 Requires Devices: List Devices permission.

Securitybearer
Request
path Parameters
deviceId
required
number

The device ID

query Parameters
cursor
string

This parameter is used to paginate through results. No value is needed for the first request. If there are additional results, the response will contain a pagination.cursor value that can be used in the subsequent request to retrieve the next page of results

size
number [ 1 .. 50 ]
Default: 20

Number of results to return

sort
string (SortTypeLimitedEnum)

Which field to sort by

Enum: "createdAt" "updatedAt"
sortDir
string (SortDirectionEnum)

The direction to sort the data

Enum: "ASC" "DESC"
Responses
200

Successful

400

Malformed data and/or validation errors

401

Invalid Authorization

402

You must upgrade your plan to use this feature

403

You are not allowed to perform this action

412

You must accept the Drata terms and conditions to use the API

500

Internal server error

get/devices/{deviceId}/apps
Request samples
Response samples
application/json
{
  • "data": [
    • {
      • "id": 1,
      • "installedApp": "Adobe Photoshop version 3.3 license 1a2b3c4d"
      }
    ],
  • "pagination": {
    • "cursor": "string"
    }
}

Create or update Device for Custom Connection

🧪 BETA: Create a new device or update an existing device for a custom connection.

An existing device is searched for based upon matching one or more of these supplied properties in the request payload:

  • serialNumber
  • macAddress
  • externalId

If an existing device is found, the existing device is updated. Otherwise a new device is created.

🔒 Requires Devices: Create Device permission.

Securitybearer
Request
path Parameters
connectionId
required
number

The ID of the connection may be obtained in one of two ways:

  • Calling GET /connections and noting the id of the desired custom device connection in the response.
  • In the Drata App:
    • New Device Connection

      1. Navigate to Connections > MDM.
      2. Select the Available Connections tab.
      3. Chose Custom Device Connection.

      After successfully creating a device connection, the connection ID will be displayed under Account Information.

    • Existing Device Connection

      1. Navigate to Connections > MDM.
      2. Select the Active Connections tab.
      3. View a previously created custom device connection.

      The connection ID will be displayed under Account Information.

Request Body schema: application/json
required
personnelId
required
number

Personnel Id

alias
string <= 191 characters

Name of the device.

antivirusEnabled
boolean or null

Flag to indicate antivirus software is installed and enabled

antivirusExplanation
object

Any additional information to explain the antivirusEnabled value

Array of objects (AppTypeRequestPublicV2Dto)

List of installed applications

autoUpdateEnabled
boolean or null

Flag to indicate auto-update enabled or disabled

autoUpdateExplanation
object

Any additional information to explain the autoUpdateEnabled value

Array of objects (AppTypeRequestPublicV2Dto)

List of installed browser extensions

externalId
string

An externally-sourced unique identifier for a device

firewallEnabled
boolean or null

Flag to indicate the firewall is enabled or disabled

firewallExplanation
object

Any additional information to explain the firewallEnabled value

passwordManagerEnabled
boolean or null

Flag to indicate a password manager is in use

encryptionEnabled
boolean or null

Flag to indicate hard disk is encrypted

encryptionExplanation
object

Any additional information to explain the encryptionEnabled value

model
string <= 191 characters

Hardware model

serialNumber
string

Hardware serial number

macAddress
string or null

MAC address

passwordManagerExplanation
object

Any additional information to explain the hasPasswordManager value

platformName
required
string

The Operating System (OS) platform name of the device

Enum: "MACOS" "WINDOWS" "LINUX" "UNIX" "ANDROID"
platformVersion
required
string <= 191 characters

The Operating System (OS) platform version of the device

screenLockEnabled
boolean or null

Flag to indicate hard disk is encrypted

screenLockExplanation
object

Any additional information to explain the screenLockTime value

screenLockTime
number

Amount of time before display is turned off

Array of objects (WindowsServiceRequestPublicV2Dto)

List of applicable Windows services

Responses
201

Created

400

Malformed data and/or validation errors

401

Invalid Authorization

402

You must upgrade your plan to use this feature

403

You are not allowed to perform this action

404

Not Found

412

You must accept the Drata terms and conditions to use the API

413

The file was too large to upload

500

Internal server error

503

Third party system was unavailable

post/custom-connections/{connectionId}/devices
Request samples
application/json
{
  • "personnelId": 1,
  • "alias": "danielm-01",
  • "antivirusEnabled": true,
  • "antivirusExplanation": {
    • "antivirusApps": [
      • "Crowdstrike windows sensor"
      ]
    },
  • "appList": [
    • {
      • "name": "Microsoft Defender Antivirus",
      • "version": "1.421.12.0",
      • "description": "Microsoft Defender Antivirus"
      }
    ],
  • "autoUpdateEnabled": true,
  • "autoUpdateExplanation": "Disabled",
  • "browserExtensions": [
    • {
      • "name": "Microsoft Defender Antivirus",
      • "version": "1.421.12.0",
      • "description": "Microsoft Defender Antivirus"
      }
    ],
  • "externalId": "fccc5f46-b239-4526-ad9a-84fb302ab226",
  • "firewallEnabled": true,
  • "firewallExplanation": "On",
  • "passwordManagerEnabled": true,
  • "encryptionEnabled": true,
  • "encryptionExplanation": {
    • "bootPartitionEncryptionDetails": {
      • "partitionFileVault2Percent": 100,
      • "partitionFileVault2State": "ENCRYPTED",
      • "partitionName": "Macintosh HD (Boot Partition)"
      }
    },
  • "model": "Mac16,1",
  • "serialNumber": "BKH8RXT4T9",
  • "macAddress": "01-23-45-67-89-AB",
  • "passwordManagerExplanation": {
    • "passwordManagerApps": [
      • "1password"
      ]
    },
  • "platformName": "MACOS",
  • "platformVersion": "string",
  • "screenLockEnabled": true,
  • "screenLockExplanation": "ScreenLock delay is immediate",
  • "screenLockTime": 15,
  • "windowsServices": [
    • {
      • "description": "Security feature that monitors and controls network traffic entering and exiting the device",
      • "name": "Windows Firewall",
      • "startType": "Automatic",
      • "status": "Running"
      }
    ]
}
Response samples
application/json
{
  • "id": 1,
  • "osVersion": "MacOS 10.15.6",
  • "serialNumber": "C02T6CDJGTFL",
  • "model": "MacBook Pro",
  • "macAddress": "65-F9-3D-85-7B-6B,99-A9-3E-14-7A-3E",
  • "lastCheckedAt": "2025-07-01T16:45:55.246Z",
  • "sourceType": "AGENT",
  • "createdAt": "2025-07-01T16:45:55.246Z",
  • "updatedAt": "2025-07-01T16:45:55.246Z",
  • "deletedAt": "2025-07-01T16:45:55.246Z",
  • "appsCount": 20,
  • "isDeviceCompliant": false,
  • "complianceChecks": [ ],
  • "identifiers": [ ],
  • "documents": [ ],
  • "screenLockTime": 30,
  • "screenLockExplanation": {
    • "minutesIdleBeforeSleep": "2",
    • "minutesSleepingBeforePasswordIsRequired": "2"
    },
  • "antivirusEnabled": true,
  • "antivirusExplanation": "No matching app was found",
  • "autoUpdateEnabled": true,
  • "autoUpdateExplanation": "No compliances found",
  • "passwordManagerEnabled": true,
  • "passwordManagerExplanation": {
    • "passwordManagerApps": [
      • "1password 7"
      ]
    },
  • "encryptionEnabled": false,
  • "encryptionExplanation": "No encryption provided",
  • "firewallEnabled": true,
  • "firewallExplanation": "{}",
  • "asset": {
    • "id": 1,
    • "name": "MacBook Pro - Space Black 16-inch",
    • "description": "MacBook Pro Space Black - with 16-inch Liquid Retina XDR display",
    • "assetType": "PHYSICAL",
    • "assetProvider": "AGENT",
    • "approvedAt": "2025-07-01T16:45:55.246Z",
    • "removedAt": "2025-07-01T16:45:55.246Z",
    • "company": "Acme, Inc",
    • "notes": "string",
    • "assetReferenceType": "PERSONNEL",
    • "uniqueId": "C02T6CDJGTFL",
    • "createdAt": "2025-07-01T16:45:55.246Z",
    • "updatedAt": "2025-07-01T16:45:55.246Z",
    • "externalId": "i-0c844e3b433e4e3f",
    • "externalOwnerId": "account-353"
    },
  • "userId": 1,
  • "personnelId": 1,
  • "externalId": "aaaaaaaa-bbbb-0000-cccc-dddddddddddd"
}