Tags, audit events & integrations - VendexLabs

Tags

Tags label vendors on your lists. Assign them with the vendor list endpoints; manage the tag catalog here.

Method	Path	Role	Purpose
`GET`	`/tags?account-id={uuid}`	viewer	List your organization’s tags.
`POST`	`/tags?account-id={uuid}`	editor	Create a tag. Body: `{ "name": "pci-scope" }`
`DELETE`	`/tags/{tag_id}?account-id={uuid}`	editor	Delete a tag and remove it from every vendor.

Audit events

Returns the organization’s audit log, newest first. Requires admin or owner. To read the history of a single record, pass target-type and target-id; that narrower query only needs viewer.

Events made through the Claude connector carry connector metadata so you can tell them apart.

Drata sync

Base path: /accounts/{account_id}/integrations/drata. Changing the connection requires admin; reading its status requires viewer. See Drata for how matching and review work.

Method	Path	Purpose
`GET`	“	Connection status and settings. Credentials are never returned.
`PUT`	“	Connect or update: `auth_method`, credentials, `base_url`, `vendor_list_id`, risk source, `create_reviews`.
`DELETE`	“	Disconnect and forget the credentials. Nothing in Drata is deleted.
`POST`	`/test`	Check credentials with Drata without saving.
`POST`	`/sync-all/preview`	Preview how each vendor matches Drata vendors. Writes nothing to Drata.
`POST`	`/sync-all`	Approve the matches and start syncing.
`GET`	`/attention`	Vendors that need a decision.
`POST`	`/links/{vendor_id}`	Decide a match: `{ "drata_vendor_id": "…" }` to link, or `{ "create": true }` to create a new Drata vendor.
`POST`	`/links/{vendor_id}/retry`	Retry a failed sync.
`GET`	`/activity`	Recent sync activity.

Claude connector

The Claude connector is served at https://api.vendexlabs.com/mcp over the Model Context Protocol, with OAuth sign-in. It’s designed to be added in Claude, not called directly, and it uses the same permission checks and rate limits as the rest of the API.