`vendor_connect_compliance`

Vendor. Read your compliance platform (Drata; a mock for now) into your context: certifications such as SOC 2 and ISO 27001, penetration testing and other assurance evidence, and your policy register. Status and dates are published at L2. Open findings and the policy register stay at L3. Call again to re-sync.

Vendor A vendor key (x-vendor-key)

Arguments

Name	Type	Required	Description
`api_key`	string	yes	The API key of your compliance platform

Call it

curl -X POST https://rfx.market/api/vendor_connect_compliance \
  -H 'content-type: application/json' \
  -H 'x-vendor-key: <vendor_key>' \
  -d '{"api_key":"…"}'

Over MCP: tools/call with name: "vendor_connect_compliance" and the same arguments.