OneTrust

Fair

Agent Native Score

API Key AuthOpenAPI Spec

OneTrust is an enterprise compliance and governance platform that helps organizations manage privacy, data security, third-party risk, and regulatory compliance across multiple domains.

Categories: Compliance · Security · Governance

#11 of 34 in Compliance · #44 of 58 in Security · #1 of 5 in Governance

Checklist Breakdown

10 of 33 checks passed. 14 unscored.

Discovery 63%

Can an agent find and understand this tool without a web search?

✓ Published OpenAPI/Swagger spec

✗ Has llms.txt or llms-full.txt

✗ Has an MCP server (official or well-maintained)

✗ MCP server listed in a public registry

✓ API reference docs are publicly accessible

✓ Docs include runnable code examples

✓ Has a public changelog or release notes

✓ Has a public status page

Auth & Onboarding 33%

Can an agent create an account and get credentials without human intervention?

✗ Signup does not require CAPTCHA

✗ Signup does not require phone verification

✓ Supports API key auth (not only OAuth)

✗ API key obtainable without manual approval

✗ No mandatory billing info to start

✓ Can sign up without creating an organization

Pricing 60%

Can an agent operate autonomously without upfront payment or contracts?

✗ Has a free tier

✓ Usage-based pricing available

✓ No minimum contract or commitment

✓ Pricing page is public (no 'contact sales')

✗ Free tier sufficient for testing (not just a trial)

Agent Tooling Not yet scored

How well does the API work for non-human consumers?

— SDK available in 2+ languages

— Structured error responses (JSON with error codes)

— Idempotency support on write endpoints

— Pagination on list endpoints

— Webhook/event support

— Sandbox or test mode available

— Rate limit headers in responses

— Consistent REST resource naming

Reliability Not yet scored

Does the tool fail gracefully when an agent makes a mistake?

— Meaningful error messages (not just 500)

— 429 responses include Retry-After header

— Documented uptime SLA (99.9%+)

— Graceful degradation under rate limits

— Request IDs in responses for debugging

— API versioning supported

Reviewer Notes

OneTrust has an API and sandbox environment, which helps with agent tooling and testing, but it is an enterprise-focused platform requiring manual account provisioning, contract negotiation, and SSO/SAML setup—making autonomous agent signup impossible. Discovery is hindered by the lack of MCP server and llms.txt, requiring agents to rely on scattered API documentation. Pricing is opaque and enterprise-only with no free tier, making it unsuitable for autonomous agent operation without significant human setup overhead.

OneTrust

Let your agents find tools like OneTrust