---
title: Snyk API Integration on Truto
slug: snyk
category: Application Development
canonical: "https://truto.one/integrations/detail/snyk/"
---

# Snyk API Integration on Truto



**Category:** Application Development  
**Status:** Generally available

## Unified APIs

### Unified User Directory API

- **Organizations** — Organizations are the top level entity in the source application. Users are associated with an organization.
- **Roles** — The Role object represents a role of a User.
- **Users** — The User object represents a User.

## MCP-ready AI tools

Truto exposes 269 tools for Snyk that AI agents can call directly.

- **list_all_snyk_me** — Get details about the authenticated Snyk user making the request. Returns: id, username, email, orgs, code, message, error.
- **list_all_snyk_organization** — List all Snyk organizations the authenticated user belongs to. Returns: name, id, slug, url, group, created.
- **list_all_snyk_members** — List members of a Snyk organization. Returns each member's id, name, username, email, and role. Required: org_id.
- **update_a_snyk_member_by_id** — Update a member's role in a Snyk organization. Returns an empty 200 response on success. Required: org_id, id.
- **list_all_snyk_licenses** — List all licenses for a Snyk organization, with optional filters for languages, projects, dependencies, licenses, and severity submitted in the request body. Returns: id, severity, instructions, dependencies, projects. Required: org_id.
- **snyk_apps_installs_bulk_delete** — Revoke app authorization for a Snyk group by install ID. Returns an empty 204 response on success. Required: group_id, install_id.
- **create_a_snyk_apps_install** — Install a Snyk App for a Snyk organization using unattended (client credentials) authentication. Returns the created app install including id, type, attributes (with client credentials), and relationships (referencing the installed app). Required: org_id, data, relationships.
- **delete_a_snyk_apps_install_by_id** — Revoke a Snyk App install by install ID for the current user. Returns an empty 204 response on success. Required: id.
- **list_all_snyk_apps_installs** — List Snyk Apps installed for an Organization in Snyk. Returns app install records including type, id, attributes, and relationships to the installed app. Required: org_id.
- **get_single_snyk_apps_install_by_id** — List Snyk Apps installed for the authenticated user in Snyk. Returns app install records including type, id, attributes, and relationships to the installed app.
- **create_a_snyk_apps_installs_app** — Install a Snyk App to a Snyk Group using unattended authentication (e.g. client credentials). Returns the newly created app install including its id, type, attributes with client credentials, and app relationships. Required: group_id, data, relationships.
- **delete_a_snyk_apps_installs_app_by_id** — Revoke a Snyk App installation from a Snyk organization by install ID. Returns an empty 204 response on success. Required: org_id, id.
- **list_all_snyk_apps_installs_apps** — List Snyk Apps installed for a Group. Returns each app install record including id, type, attributes, and the related app relationship. Required: group_id.
- **list_all_snyk_assets_filters** — List available Snyk asset filter fields for an organization that can be used for filtering assets using RSQL. Returns: attributes, id, relationships, type, name, data_type, asset_types. Required: org_id.
- **list_all_snyk_assets_filters_assets** — List available Snyk asset filter fields for a group, used for building RSQL filter expressions. Returns each filter field including id, type, and attributes containing the field name, data type, and applicable asset types. Required: group_id.
- **list_all_snyk_assets_groups** — List available group field names for grouping Snyk inventory assets within an org context. Returns each field's name, data_type, and asset_types. Required: org_id.
- **list_all_snyk_assets_groups_assets** — List available group field names that can be used for grouping Snyk inventory assets within a group context. Returns: attributes, id, relationships, type. Required: group_id. Early Access endpoint.
- **create_a_snyk_assets_search** — Create an asynchronous asset search in Snyk for an organization. Returns a 302 redirect response containing a jsonapi version object; the location header provides the URL to retrieve search results. Required: org_id. Early Access feature.
- **create_a_snyk_custom_base_image** — Create a custom base image in Snyk from an existing container project, adding it to the pool of images from which Snyk can recommend base image upgrades. Returns: attributes, id, type. Required: data (with type, attributes, project_id, and include_in_recommendations). A versioning schema cannot be passed after the first image in a repository is added; use the update endpoint to change it.
- **delete_a_snyk_custom_base_image_by_id** — Delete a custom base image in Snyk by id. The related container project is unaffected. Returns an empty 204 response on success. Required: id.
- **get_single_snyk_custom_base_image_by_id** — Get a single custom base image in Snyk by id. Returns: attributes, id, type. Required: id.
- **list_all_snyk_custom_base_images** — List custom base images in Snyk with support for filtering and ordering. Returns: attributes, id, type. Either org_id or group_id must be set to authorize successfully; if sorting by version, the repository filter is required.
- **update_a_snyk_custom_base_image_by_id** — Update a custom base image's attributes in Snyk by id, such as its versioning schema or inclusion in recommendations. Returns: attributes, id, type. Required: id, data (with type and attributes).
- **list_all_snyk_filter_values** — List distinct filter value suggestions for a Snyk inventory asset filter field to power autocomplete UIs. Returns value records including id, type, and attributes containing the value (and key for object filter types). Required: org_id, filter_id. Early Access (beta) endpoint.
- **list_all_snyk_filter_values_filters** — List distinct filter value suggestions for a specific Snyk inventory asset filter field at the group scope, useful for building autocomplete in filter UIs. Returns: attributes, id, type. Required: group_id, filter_id.
- **list_all_snyk_group_assets** — Get a Snyk asset by its ID within a group. Returns the asset object including its id, type, and attributes. Required: group_id, asset_id. This endpoint is in Early Access (beta).
- **snyk_group_audit_logs_search** — Search audit logs for a Snyk Group, supporting filtering by event type, date range, user, and project. Returns: items, type. The "api.access" event is omitted from results unless explicitly requested via the events parameter. Required: group_id.
- **create_a_snyk_group_export** — Create and start a report export for a Snyk group. Returns the export resource including id, type, and attributes. Required: group_id. The request body supports filters and url_expiration_seconds under data.attributes; the response is asynchronous (202 Accepted).
- **list_all_snyk_group_exports** — Get the results of a completed group export in Snyk. Returns the export resource including id, type, and attributes. Required: group_id, export_id. Use the export id returned by the create endpoint to retrieve the export results.
- **list_all_snyk_group_values** — List Snyk group value aggregations for a specific group field within an organization, showing the count of assets for each distinct value. Returns: attributes, id, meta, type. Required: org_id, group_field_id.
- **list_all_snyk_group_values_groups** — List aggregated Snyk asset counts for each distinct value of a group field at group scope (Early Access). Each value is bucketed by the Snyk organization that discovered the assets. Returns: attributes, id, meta, type. Required: group_id, group_field_id.
- **get_single_snyk_group_by_id** — Get a single Snyk group by id. Returns the group object including its id, type, and attributes (containing the group name). Required: id.
- **list_all_snyk_groups** — List Snyk groups that the current user is a member of. Returns each group's id, type, and attributes (containing the group name).
- **create_a_snyk_install_secret** — Manage client secrets for non-interactive Snyk App installations in an organization. Specify mode as replace, create, or delete to add, replace, or remove a secret. Returns: data, jsonapi, links. Required: org_id, install_id.
- **update_a_snyk_install_secret_by_id** — Manage client secrets for non-interactive Snyk App installations in a group. Specify mode as replace, create, or delete to add, replace, or remove a secret. Returns: data, jsonapi, links. Required: group_id, install_id.
- **snyk_inventory_assets_bulk_update** — Bulk update multiple Snyk inventory asset attributes within a group context. Supports updating class, labels (add/remove), and tags (add/remove). Maximum of 100 assets per request; the operation is transactional — all updates succeed or all fail. Returns an empty 204 response on success. Required: group_id, data.
- **get_single_snyk_inventory_asset_by_id** — Get a single Snyk inventory asset by id within an org context. Returns the asset as a JSON:API resource object including id, type, and polymorphic attributes whose fields vary by asset type. Required: org_id, id.
- **list_all_snyk_inventory_assets** — List or search all Snyk inventory assets in an organization, returning a polymorphic collection of asset types. Returns: attributes, id, links, relationships, type. Required: org_id.
- **snyk_inventory_assets_partial_update** — Update a single Snyk inventory asset's attributes within an org context. Supports updating class, labels (add/remove), and tags (add/remove). Returns the updated asset including id, type, and attributes. Required: org_id, id.
- **update_a_snyk_inventory_asset_by_id** — Bulk update multiple Snyk inventory asset attributes within an org context. Supports updating class, labels (add/remove), and tags (add/remove). Maximum of 100 assets per request; the operation is transactional — all updates succeed or all fail. Returns an empty 204 response on success. Required: org_id, data.
- **get_single_snyk_inventory_assets_inventory_by_id** — Get a single Snyk inventory asset by id within a group. Returns a polymorphic asset object including id, type, attributes, and relationships. Required: group_id, id.
- **list_all_snyk_inventory_assets_inventory** — List all Snyk inventory assets for a group with optional sorting and RSQL filtering. Returns: attributes, id, links, relationships, type. Required: group_id.
- **snyk_inventory_assets_inventory_partial_update** — Partially update a Snyk inventory asset's attributes within a group context. Supports updating class, labels (add/remove), and tags (add/remove); at least one attribute must be provided. Returns the updated asset including its id, type, and attributes. Required: group_id, id.
- **update_a_snyk_inventory_assets_inventory_by_id** — Bulk update multiple Snyk inventory assets' attributes within a tenant context. Maximum of 100 assets per request; the operation is transactional — all updates succeed or all fail. Supports updating class, labels (add/remove), and tags (add/remove). Returns an empty 204 response on success. Required: tenant_id.
- **list_all_snyk_relationships_assets** — List assets related to a specific Snyk group asset with cursor-based pagination. Returns each related asset as a JSON:API resource object including its id, type, and attributes. Required: group_id, asset_id. Early Access (beta).
- **snyk_relationships_projects_bulk_delete** — Remove projects from a Snyk collection by specifying an array of project resource identifiers. Returns an empty 204 response on success. Required: org_id, collection_id, data.
- **list_all_snyk_relationships_projects** — List Snyk projects linked to a group asset with pagination (Early Access). Returns: attributes, id, type. Required: group_id, asset_id.
- **update_a_snyk_relationships_project_by_id** — Add projects to a Snyk collection by specifying an array of project ids. Returns an empty 204 response on success. Required: org_id, collection_id.
- **list_all_snyk_relationships_projects_relationships** — List projects belonging to a Snyk collection, with optional filtering by target, issue status, and integration type. Returns: id, meta, relationships, type, attributes. Required: org_id, collection_id.
- **list_all_snyk_relationships_targets** — List Snyk targets linked to an inventory asset within an organization. Returns each related target's id, type, and attributes. Required: org_id, asset_id.
- **list_all_snyk_relationships_targets_relationships** — List Snyk targets linked to a specific inventory asset within a group scope. Returns the id, type, and attributes of each related target. Required: group_id, asset_id.
- **list_all_snyk_search_group_assets** — Search Snyk assets in a group by attribute filters. Returns matching assets as JSON:API resource objects with id, type, and attributes (class, created_at, updated_at, risk_score, issues, and type-specific fields). Required: group_id. Early Access endpoint; the body can be empty for an unfiltered listing or contain nested attribute filters using equal, in, and, or operators.
- **list_all_snyk_searche_results** — Retrieve paginated results from a previously initiated asynchronous asset search in Snyk. Returns asset records including id, type, attributes (class, org_id, created_at, risk_score, issues, last_scan), relationships, and links. Required: org_id, search_id.
- **list_all_snyk_searche_results_searches** — List paginated results for a previously initiated asynchronous asset search in Snyk within a group context. Returns asset records with id, type, and attributes containing class, created_at, updated_at, risk_score, issues, and last_scan. Required: group_id, search_id. Early Access (beta).
- **get_single_snyk_group_issue_by_id** — Get a single Snyk group issue by id. Returns: id, issueType, pkgName, pkgVersions, issueData, isPatched, isIgnored, fixInfo, priority. Required: group_id, id.
- **list_all_snyk_group_issues** — Get issues by group ID. Required: version, group_id.
- **snyk_group_memberships_bulk_delete** — Delete a group membership from a Snyk group. Returns an empty 204 response on success. Required: group_id, membership_id.
- **snyk_group_memberships_bulk_update** — Update the role of a Snyk group membership by group and membership ID. The request body uses JSON:API format to specify the new role attributes for the membership. Returns an empty 204 response on success. Required: group_id, membership_id, data.
- **create_a_snyk_group_membership** — Create a group membership for a user with a specified role in a Snyk group. Returns the created membership's id, type, and relationships with the group, role, and user (email, name, username). Required: group_id, data.
- **list_all_snyk_group_memberships** — List all memberships of a Snyk group. Returns each membership's id, type, and relationships with the group, role, and user (email, name, username). Required: group_id.
- **list_all_snyk_group_org_memberships** — List org memberships of a group user in Snyk. Returns a paginated list of org membership records, each with id, type, and attributes including role details. Required: group_id, user_id.
- **list_all_snyk_group_orgs** — List all organizations belonging to a Snyk group, returned in alphabetical order by name by default. Returns: attributes, id, type, relationships. Required: group_id.
- **snyk_group_policies_bulk_delete** — Delete an existing group-level policy in Snyk. Returns an empty 204 response on success. Required: group_id, policy_id. This is an Early Access feature restricted by the use-group-policy-apis feature flag.
- **snyk_group_policies_bulk_update** — Update a group-level policy in Snyk. Returns the updated policy resource including data (with id, type, and attributes), jsonapi, and links. Required: group_id, policy_id, and a JSON:API data payload with the attributes to update. This is an Early Access feature restricted by the use-group-policy-apis feature flag.
- **create_a_snyk_group_policy** — Create a new group level policy (Early Access). Returns: attributes, id, type. Required: version, group_id, data.
- **list_all_snyk_group_policies** — List all group-level policies in Snyk for a specified group. Returns each policy's id, type, and attributes. Required: group_id. Early Access endpoint.
- **snyk_group_service_accounts_bulk_delete** — Delete a Snyk group service account by its ID. Returns an empty 204 response on success. Required: group_id, serviceaccount_id.
- **snyk_group_service_accounts_bulk_update** — Update the name of a Snyk group service account by its ID. Returns the updated service account including id, type, attributes (name, auth_type, role_id), and links. Required: group_id, serviceaccount_id, name.
- **create_a_snyk_group_service_account** — Create a service account for a Snyk group with api_key, oauth, or access_token authentication. Returns: attributes, id, links, type. Required: group_id, name, role_id, auth_type.
- **get_single_snyk_group_service_account_by_id** — Get a single Snyk group service account by id. Returns the service account object including its id, type, and attributes (name, auth_type, role_id, and token configuration fields). Required: group_id, id.
- **list_all_snyk_group_service_accounts** — List all service accounts for a Snyk group. Returns each service account with its id, type, and attributes (name, auth_type, role_id, and token configuration fields). Required: group_id.
- **get_single_snyk_jobs_export_by_id** — Get the status of an export job in a Snyk organization. Returns the export job resource including its id, type, attributes with the current job status, and links. Required: org_id, id.
- **list_all_snyk_jobs_exports** — Get the status of an export job in a Snyk group. Returns the export job resource including its id, type, and attributes with the current job status. Required: group_id, export_id.
- **snyk_opensource_brokers_bulk_delete** — Delete the opensource broker setting for a Snyk organization by uninstalling the Snyk App. Returns an empty 204 response on success. Required: org_id.
- **snyk_opensource_brokers_bulk_delete_groups** — Delete the opensource broker setting for a Snyk group by uninstalling the Snyk App. Returns an empty 204 response on success. Required: group_id.
- **create_a_snyk_opensource_broker** — Enable the opensource broker setting for a Snyk organization by installing the Snyk App. Returns: status. Required: org_id.
- **list_all_snyk_opensource_brokers** — Get the opensource broker setting for a Snyk organization. Returns: enabled. Required: org_id.
- **create_a_snyk_opensource_brokers_broker** — Enable the opensource broker setting for a Snyk group by installing the Snyk App. Returns: status. Required: group_id.
- **list_all_snyk_opensource_brokers_broker** — Get whether the opensource broker setting is enabled for a Snyk group. Returns: enabled. Required: group_id.
- **snyk_rule_extensions_assignments_bulk_delete** — Delete assignments for rule extensions. Required: version, group_id.
- **create_a_snyk_rule_extensions_assignment** — Create bulk assignments for published rule extensions in Snyk, assigning them with Group or Organization scope. Returns an empty 204 response on success. Required: group_id.
- **list_all_snyk_rule_extensions_assignments** — List all assignments for a group. Returns: attributes, id, relationships, type. Required: version.
- **create_a_snyk_rule_extensions_test** — Trigger a SAST rule extension impact test. Returns: attributes, id, links, type. Required: version, group_id, data.
- **list_all_snyk_rule_extensions_tests** — Retrieve the SAST rule extension impact test status. Returns: attributes, id, links, type. Required: version, group_id, test_id.
- **snyk_sast_rule_extensions_bulk_delete** — Delete a SAST rule extension in Snyk by rule extension ID. Draft rule extensions can be deleted unconditionally; published rule extensions can only be deleted if they have no assignments and all assignments must be removed first. Returns an empty 204 response on success. Required: group_id, rule_extension_id.
- **snyk_sast_rule_extensions_bulk_update** — Update a SAST rule extension by SAST rule extension ID. Returns: data, jsonapi, links. Required: version, group_id, rule_extension_id, data.
- **create_a_snyk_sast_rule_extension** — Create a SAST rule extension. Returns: attributes, id, type. Required: version, group_id, data.
- **get_single_snyk_sast_rule_extension_by_id** — Get a SAST rule extension by SAST rule extension ID. Returns: attributes, id, type. Required: id, version, group_id.
- **list_all_snyk_sast_rule_extensions** — Get a list of all the SAST rule extensions for the requested Group. Returns: attributes, id, type. Required: version, group_id.
- **snyk_secrets_rule_extensions_bulk_delete** — Delete a Snyk secrets rule extension by rule extension ID. Draft rule extensions can be deleted unconditionally; published rule extensions can only be deleted if they have no assignments. Returns an empty 204 response on success. Required: group_id, rule_extension_id.
- **snyk_secrets_rule_extensions_bulk_update** — Update a Snyk secrets rule extension for the requested rule extension ID. Secrets rule extensions adapt Snyk Secret analysis to make rules more suitable for your code. Returns the updated rule extension object including id, type, and attributes. Required: group_id, rule_extension_id.
- **create_a_snyk_secrets_rule_extension** — Create a secrets rule extension. Returns: attributes, id, type. Required: version, group_id, data.
- **get_single_snyk_secrets_rule_extension_by_id** — Get a secrets rule extension by rule extension ID. Returns: attributes, id, type. Required: id, version, group_id.
- **list_all_snyk_secrets_rule_extensions** — Get a list of all secrets rule extensions for the requested Group. Returns: attributes, id, type. Required: version, group_id.
- **create_a_snyk_service_account_secret** — Manage the client secret of a Snyk organization service account by replacing, creating, or deleting a secret. Returns the updated service account including its id, type, and attributes. Required: org_id, serviceaccount_id, mode, type. A maximum of two secrets can exist at a time; at least one secret must remain per service account.
- **update_a_snyk_service_account_secret_by_id** — Manage a Snyk group service account's client secret — replace existing secrets with a newly generated one, add an additional secret (max two), or remove a secret by value. Returns the updated service account object in a JSON:API response envelope (data, jsonapi, links). Required: group_id, serviceaccount_id, data.attributes.mode. At least one secret must remain per service account.
- **snyk_settings_iacs_bulk_update** — Update the Infrastructure as Code settings for a Snyk group. Returns the updated IaC settings resource including type, id, and attributes. Required: group_id, data.
- **list_all_snyk_settings_iacs** — Get the Infrastructure as Code settings for a Snyk organization. Returns: attributes, id, type, links. Required: org_id, group_id.
- **update_a_snyk_settings_iac_by_id** — Update the Infrastructure as Code settings for a Snyk organization. Returns the updated IaC settings resource including type, id, and attributes. Required: org_id, group_id, data.
- **list_all_snyk_settings_iacs_iac** — Get the Infrastructure as Code settings for a Snyk group. Returns: attributes, id, type. Required: group_id.
- **snyk_settings_pull_request_templates_bulk_delete** — Delete a Snyk group's pull request template, reverting Snyk pull requests to the default template for that group. Returns an empty 204 response on success. Required: group_id.
- **create_a_snyk_settings_pull_request_template** — Create or update a Snyk group-level pull request template that will be used for any org or project within that group. Returns: attributes, id, type. Required: group_id, data (with type and attributes).
- **list_all_snyk_settings_pull_request_templates** — Get a Snyk group's pull request template. Returns: attributes, id, type. Required: group_id.
- **list_all_snyk_test_results** — Retrieve the impact test result for a SAST rule extension. Returns: attributes, id, type. Required: version, group_id, test_id.
- **create_a_snyk_ai_boms_upload** — Create and upload an AI-BOM (Early Access). Returns: attributes, id, relationships, type. Required: version, org_id, data.
- **create_a_snyk_app_secret** — Manage client secrets for a Snyk App — create, replace, or delete a secret. Returns: data, jsonapi, links. Required: org_id, client_id, mode. This endpoint is deprecated; use the app_id-based secrets endpoint instead.
- **list_all_snyk_apps_creations** — List Snyk Apps created by an organization. Returns: attributes, id, type. Required: org_id.
- **create_a_snyk_apps_creation** — Create a new Snyk App for an organization. Returns: attributes, id, type. Required: org_id and request body data.attributes with name, redirect_uris, scopes.
- **get_single_snyk_apps_creation_by_id** — Get a single Snyk App by its app ID. Returns: attributes, id, type. Required: org_id, id.
- **snyk_apps_creations_bulk_update** — Update a Snyk App's creation attributes — name, redirect URIs, and access token time to live — using the App ID. Returns the updated Snyk App object including its id, type, and attributes. Required: org_id, app_id.
- **snyk_apps_creations_bulk_delete** — Delete a Snyk App by app ID. Returns an empty 204 response on success. Required: org_id, app_id.
- **list_all_snyk_brokers_connections** — List Broker connections for a given organization. Returns: attributes, id, type. Required: org_id, version.
- **list_all_snyk_cloud_environments** — List Snyk cloud environments for an organization, filterable by project, name, kind, status, and creation/update dates. Returns: attributes, id, relationships, type. Required: org_id.
- **create_a_snyk_cloud_environment** — Create a new Snyk cloud environment and trigger a scan. Returns: attributes, id, relationships, type. Required: org_id, data.
- **snyk_cloud_environments_bulk_update** — Update a Snyk cloud environment by environment_id. Returns: data, jsonapi, links. Required: org_id, environment_id, data.
- **snyk_cloud_environments_bulk_delete** — Delete a Snyk cloud environment by environment_id. Returns an empty 204 response on success. Required: org_id, environment_id.
- **get_single_snyk_cloud_permission_by_id** — Generate an IAC permissions template for Snyk to access cloud resources in a Snyk organization. Returns: attributes, id, type. Required: org_id and a data object containing type and attributes. Early Access / beta endpoint.
- **list_all_snyk_cloud_resources** — List cloud resources for a Snyk organization with optional filters by environment, resource type, platform, kind, location, and more. Returns: attributes, id, relationships, type. Required: org_id.
- **list_all_snyk_cloud_scans** — List cloud scans for a Snyk organization. Returns each scan's id, type, attributes, and relationships. Required: org_id. Early Access (beta) endpoint.
- **create_a_snyk_cloud_scan** — Create and trigger a new cloud scan for a Snyk environment. Returns the created scan's id, type, attributes, and relationships. Required: org_id, data (with type). Early Access (beta) endpoint.
- **get_single_snyk_cloud_scan_by_id** — Get a single Snyk cloud scan by id. Returns the scan's id, type, attributes, and relationships. Required: org_id, id. Early Access (beta) endpoint.
- **create_a_snyk_creation_secret** — Manage client secrets for a Snyk App creation — create a new secret, replace existing ones, or delete a specific secret by value. Returns a JSON:API document including data, jsonapi, and links. Required: org_id, app_id, mode.
- **list_all_snyk_ecosystem_packages** — Get package metadata for a specific package from a Snyk ecosystem (Early Access). Returns: attributes, id, type. Required: org_id, ecosystem, package_name. Supported ecosystems: npm, pypi, maven, nuget, golang.
- **list_all_snyk_group_sso_connections** — List all SSO connections for a Snyk group. Returns each SSO connection resource object with id, type, and attributes. Required: group_id. Early Access endpoint.
- **update_a_snyk_group_user_by_id** — Update a user's membership in a Snyk group. At present only removing memberships is supported — set membership to null in the request body to remove the user from the group. Returns an empty 204 response on success. Required: group_id, id. To update a user's role, use the Snyk UI or legacy API.
- **list_all_snyk_learn_catalogs** — List Snyk Learn catalog resources (lessons and learning paths) with optional filters by CWE, CVE, Snyk rule, and ecosystem. Returns: attributes, id, type. Identifier filters are ANDed by default; set best_match=true for priority match (rules, then cves, then cwes). Multiple values for cwes, cves, and rules must be comma-separated in one parameter.
- **list_all_snyk_openapis** — List available versions of the Snyk OpenAPI specification. Returns an array of version strings, each identifying a published API version (e.g. a date-based version identifier).
- **list_all_snyk_openapis_openapi** — Get the Snyk REST API OpenAPI specification effective at a specific API version. Returns the full OpenAPI 3.0.3 document including openapi, info, paths, and components. Required: version.
- **list_all_snyk_org_ai_bom_jobs** — Get the status of an AI-BOM job in Snyk (Early Access). Returns: attributes, id, relationships, type. When the job completes, the API returns a 303 redirect to the AI-BOM resource. Required: org_id, job_id, version.
- **list_all_snyk_org_ai_boms** — Get a Snyk AI-BOM by its id once the associated background job has finished. Returns the JSON:API resource object including id, type, and attributes. Required: org_id, ai_bom_id, version. Early Access endpoint.
- **create_a_snyk_org_ai_bom** — Create a new AI-BOM (Early Access). Returns: attributes, id, relationships, type. Required: version, org_id, data.
- **list_all_snyk_org_app_bots** — List app bots authorized to a Snyk organization. Returns: attributes, id, links, relationships, type. Required: org_id. Deprecated — use the apps/installs endpoint instead.
- **snyk_org_app_bots_bulk_delete** — Revoke app bot authorization from a Snyk organization by bot id. Returns an empty 204 response on success. Required: org_id, bot_id. Deprecated — use the apps/installs endpoint instead.
- **list_all_snyk_org_apps** — List Snyk Apps created by an organization. Returns each app with id, type, and attributes including client_id, name, redirect_uris, and scopes. Required: org_id. Deprecated — use the apps/creations endpoint instead.
- **create_a_snyk_org_app** — Create a new Snyk App for an organization. Returns the created app's id, type, and attributes. Required: org_id, name, redirect_uris, scopes. Deprecated — use the apps/creations endpoint instead.
- **get_single_snyk_org_app_by_id** — Get an app by client id. Returns: attributes, id, type. Required: id, org_id, version.
- **snyk_org_apps_bulk_update** — Update Snyk App attributes — name, redirect URIs, and access token time to live — by client id. Returns the updated app's id, type, and attributes. Required: org_id, client_id. Deprecated; use the app-id-based creations endpoint instead.
- **snyk_org_apps_bulk_delete** — Delete a Snyk App from an organization by client id. Returns an empty 204 response on success. Deprecated — use the /orgs/{org_id}/apps/creations/{app_id} endpoint instead. Required: org_id, client_id.
- **snyk_org_audit_logs_search** — Search Snyk audit logs for an Organization by event type, date range, user, or project. Returns audit log entries with id, type, and attributes. Required: org_id. api.access events are omitted from results unless explicitly requested via the events parameter.
- **list_all_snyk_org_collections** — List Snyk collections for an organization with issue counts and project counts. Returns: attributes, id, meta, relationships, type. Required: org_id. Sort by name, projectsCount, or issues; filter by name substring or is_generated.
- **create_a_snyk_org_collection** — Create a Snyk collection within an organization. Returns: attributes, id, relationships, type. Required: org_id.
- **get_single_snyk_org_collection_by_id** — Get a single Snyk collection by id. Returns: attributes, id, relationships, type. Required: org_id, id.
- **snyk_org_collections_bulk_update** — Edit a Snyk collection's attributes such as name. Returns the updated collection including id, type, attributes, and relationships. Required: org_id, collection_id.
- **snyk_org_collections_bulk_delete** — Delete a Snyk collection by collection_id. Returns an empty 204 response on success. Required: org_id, collection_id.
- **list_all_snyk_org_container_images** — List container images in a Snyk organization. Returns: attributes, id, relationships, type. Required: org_id.
- **get_single_snyk_org_container_image_by_id** — Get a single container image by id in a Snyk organization. Returns: attributes, id, relationships, type. Required: org_id, id.
- **list_all_snyk_orgs** — List Snyk organizations you have access to, with optional filtering by group, slug, or name. Returns: attributes, id, relationships, type.
- **get_single_snyk_org_by_id** — Get full details of a single Snyk organization by id. Returns: attributes, id, relationships, type. Required: id.
- **update_a_snyk_org_by_id** — Update a Snyk organization's details by id. Returns: attributes, id, relationships, type. Required: id, data (containing id, type, and attributes).
- **list_all_snyk_package_versions** — Get package version metadata for a specific version of a package from an ecosystem in Snyk. Returns: attributes, id, package_version, type. Required: org_id, ecosystem, package_name, package_version. Supports npm, pypi, maven, nuget, and golang ecosystems. Golang commit hashes are not supported as version identifiers — use tagged versions only.
- **create_a_snyk_policy_dry_run** — Dry run a container registry import policy in Snyk to preview which images would be imported or deleted before applying the policy. Returns: attributes, id, type. Required: org_id, integration_id, data.type, data.attributes. This endpoint is in Early Access (beta).
- **list_all_snyk_relationships_image_target_refs** — List image target references for a Snyk container image in an organization. Returns: attributes, id, type. Required: org_id, image_id.
- **list_all_snyk_sso_connection_users** — List all users associated with a given SSO connection in a Snyk group. Returns user objects with id, type, and attributes including email, name, and username. Required: group_id, sso_id. Early Access endpoint.
- **snyk_sso_connection_users_bulk_delete** — Delete a user from a Snyk Group SSO connection. Returns an empty 204 response on success. Required: group_id, sso_id, user_id. Early Access endpoint.
- **delete_a_snyk_assignments_bulk_delete_by_id** — Bulk delete multiple Snyk Learn assignments within an organization. Returns an empty 204 response on success. Required: org_id. Assignments that are part of a Learning Program cannot be deleted through this endpoint (Early Access).
- **snyk_brokers_bulk_update** — Update all Broker settings for a specific Open Source Ecosystem in a Snyk organization. Uses JSON-PATCH semantics where only provided Broker integrations are updated; provide an empty value for urls to remove a Broker integration. Returns: data, jsonapi, links. Required: org_id, ecosystem, data.
- **list_all_snyk_brokers** — Get Snyk opensource broker settings for a specific ecosystem within an organization. Returns the broker settings object including broker integrations and their configured URLs. Required: org_id, ecosystem (Dotnet or Golang).
- **snyk_learn_assignments_bulk_delete** — Bulk delete Snyk Learn assignments in an organization. This endpoint is deprecated; assignments that are part of a Learning Program cannot be deleted. Returns an empty 204 response on success. Required: org_id.
- **snyk_learn_assignments_bulk_update** — Update the due date for existing Snyk Learn assignments in an organization. Returns an empty 204 response on success. Required: org_id.
- **create_a_snyk_learn_assignment** — Bulk create Snyk Learn assignments for all or a subset of users within an organization. Returns an empty 204 response on success. Required: org_id.
- **list_all_snyk_learn_assignments** — List all Snyk Learn assignments within an organization. Returns: attributes, id, type. Required: org_id.
- **snyk_open_source_languages_bulk_update** — Update Snyk open source language settings for a specific language within an organization (Early Access). Returns the updated language settings resource including id, type, and attributes. Required: org_id, language.
- **list_all_snyk_open_source_languages** — Get Snyk open source language settings for an organization (Early Access). Returns the language settings resource including id, type, and attributes. Required: org_id.
- **create_a_snyk_org_export** — Create and start a bulk export for a Snyk organization. The export is processed asynchronously (202 Accepted). Returns: id, type, attributes. Required: org_id.
- **list_all_snyk_org_exports** — Get export results for a Snyk organization by export id. Returns: id, type, attributes. Required: org_id, export_id.
- **snyk_org_invites_bulk_delete** — Cancel a pending user invitation to a Snyk organization. Returns an empty 204 response on success. Required: org_id, invite_id.
- **create_a_snyk_org_invite** — Invite a user to a Snyk organization with a specified role. Returns the created organization invitation including its id, type, and attributes with the invitee's email and assigned role id. Required: org_id.
- **list_all_snyk_org_invites** — List pending user invitations to a Snyk organization. Returns a collection of invitation records, each including id, type, attributes, and relationships. Required: org_id.
- **get_single_snyk_org_issue_by_id** — Get a single Snyk issue within an organization by id. Returns: id, issueType, pkgName, pkgVersions, issueData, isPatched, isIgnored, fixInfo, priority. Required: org_id, id.
- **list_all_snyk_org_issues** — Get issues by org ID. Required: version, org_id.
- **snyk_org_memberships_bulk_delete** — Delete a Snyk org membership, removing a user's membership from the organization. Returns an empty 204 response on success. Required: org_id, membership_id.
- **snyk_org_memberships_bulk_update** — Update a Snyk org membership for a user with a new role. Returns an empty 204 response on success. Required: org_id, membership_id, version, data.
- **create_a_snyk_org_membership** — Create a Snyk org membership for a user with a specified role. Returns: attributes, id, relationships, type. Required: org_id, version, data.
- **list_all_snyk_org_memberships** — List all org memberships in a Snyk organization, with optional filtering and sorting. Returns: attributes, id, relationships, type. Required: org_id.
- **snyk_org_policies_bulk_delete** — Delete an existing org-level ignore policy in Snyk. Returns an empty 204 response on success. Required: org_id, policy_id.
- **snyk_org_policies_bulk_update** — Update an existing org-level ignore policy in Snyk. Returns the updated policy including id, type, and attributes with action, conditions_group, review, and created_at. Required: org_id, policy_id.
- **create_a_snyk_org_policy** — Create a new org-level ignore policy in Snyk for Code Consistent Ignores. Returns the created policy including id, type, and attributes with action, action_type, conditions_group, and review. Required: org_id.
- **get_single_snyk_org_policy_by_id** — Get a specific Snyk org-level policy by its ID. Returns: attributes, id, type. Required: org_id, id.
- **list_all_snyk_org_policies** — List all org-level policies for a Snyk organization. Returns policy records including id, type, and attributes with action, conditions_group, review, and created_at. Required: org_id.
- **snyk_org_policies_list_events** — List the event history for a specific org-level policy in Snyk. Returns: attributes, id, type. Required: org_id, policy_id. This endpoint is in Early Access.
- **snyk_org_projects_bulk_delete** — Delete a Snyk Project by project ID within an Org. Returns an empty 204 response on success. Required: org_id, project_id.
- **snyk_org_projects_bulk_update** — Update a Snyk Project's attributes by project ID within an Org. Returns: attributes, id, links, meta, relationships, type. Required: org_id, project_id.
- **get_single_snyk_org_project_by_id** — Get a single Snyk Project by id within an Org. Returns: attributes, id, meta, relationships, type, links. Required: org_id, id.
- **list_all_snyk_org_projects** — List all Snyk Projects for an Org with rich filtering by target, tags, attributes, and monitoring dates. Returns: attributes, id, meta, relationships, type, links. Required: org_id.
- **create_a_snyk_org_sbom_test** — Create an SBOM test run in Snyk by supplying an SBOM document for vulnerability analysis. Components must have a supported PackageURL (purl) to be analyzed. Supported formats: CycloneDX 1.4–1.6 JSON, SPDX 2.3 JSON. Returns: id, type. Required: org_id.
- **list_all_snyk_org_sbom_tests** — Get the status of an SBOM test run in Snyk. Returns: attributes, id, type. Required: org_id, job_id. Early Access (beta).
- **snyk_org_service_accounts_bulk_delete** — Delete a service account from a Snyk organization. Returns an empty 204 response on success. Required: org_id, serviceaccount_id.
- **snyk_org_service_accounts_bulk_update** — Update the name of a Snyk organization service account. Returns the updated account's id, type, and attributes. Required: org_id, serviceaccount_id, name.
- **create_a_snyk_org_service_account** — Create a service account for a Snyk organization. Returns the created account's id, type, and attributes including name, role_id, and auth_type. Required: org_id, name, role_id, auth_type.
- **get_single_snyk_org_service_account_by_id** — Get a single Snyk organization service account by id. Returns the account's id, type, and attributes including name, role_id, and auth_type. Required: org_id, id.
- **list_all_snyk_org_service_accounts** — List all service accounts for a Snyk organization. Returns each account's id, type, and attributes including name, role_id, and auth_type. Required: org_id.
- **list_all_snyk_package_issues** — List Snyk issues (direct vulnerabilities) for a specific package version identified by Package URL (purl). Returns: attributes, id, type, issueType, pkgName, pkgVersions, issueData, isPatched, isIgnored, fixInfo, priority. Required: org_id, purl. Only direct vulnerabilities are returned; transitive vulnerabilities from dependencies are not included.
- **list_all_snyk_packages_issues** — List issues for a given set of packages  (Currently not available to all customers). Returns: attributes, id, type. Required: version, org_id, data.
- **snyk_private_registries_bulk_update** — Update publicly-accessible private registry settings for a specific Open Source Ecosystem in a Snyk organization using JSON-PATCH semantics — only provided integrations are updated, and an empty urls value removes an integration. Returns: data, jsonapi, links. Required: org_id, ecosystem. Supported ecosystems: Dotnet, Golang.
- **list_all_snyk_private_registries** — List Snyk private registry settings for an Open Source ecosystem within an organization, covering publicly-accessible registries reached directly with credentials. Returns the settings object including id, type, and attributes. Required: org_id, ecosystem (Dotnet or Golang).
- **list_all_snyk_progress_catalogs** — List collective learning progress for a Snyk organization, showing aggregated counts of users' lesson or learning path statuses (completed, in progress, todo) across all catalog resources. Returns each catalog resource with its id, type, and attributes containing aggregated user status counts. Required: org_id.
- **list_all_snyk_progress_users** — List individual user Snyk Learn progress in an organization, including completion dates and history for each catalog resource. Returns: attributes, id, relationships, type. Required: org_id. Early Access endpoint.
- **list_all_snyk_project_sboms** — Get a Snyk project's SBOM document in CycloneDX or SPDX format. Returns: bomFormat, specVersion, version, components, dependencies, metadata. Required: org_id, project_id. By default the response is an empty JSON:API document; specify the format query parameter to retrieve the SBOM in a specific format.
- **list_all_snyk_sbom_test_results** — List SBOM test run results in Snyk for a specific test job. Returns: id, type, attributes, relationships. Required: org_id, job_id. This endpoint is in Early Access (beta).
- **list_all_snyk_settings_opensources** — Get the Open Source settings for a Snyk organization (Early Access). Returns: attributes, id, type. Required: org_id.
- **snyk_settings_sasts_bulk_update** — Enable or disable Snyk Code (SAST) settings for an org in Snyk. Returns: data, jsonapi, links.sast_enabled), links. Required: org_id, data.id, data.type, data.attributes.sast_enabled.
- **list_all_snyk_settings_sasts** — Retrieve the SAST (Snyk Code) settings for a Snyk org. Returns: attributes, id, type. Required: org_id.
- **snyk_settings_secrets_bulk_update** — Update the Secrets settings for a Snyk org, toggling secrets scanning on or off (Early Access). Returns: data, jsonapi, links. Required: org_id, data.
- **list_all_snyk_settings_secrets** — Retrieve the Secrets settings for a Snyk org (Early Access). Returns: attributes, id, type.secrets_enabled. Required: org_id.
- **list_all_snyk_access_requests** — List the authenticated user's access requests in Snyk. Returns each access request with its id, type, and attributes. Optional filter: org_id. This endpoint is in Early Access (beta).
- **snyk_app_sessions_bulk_delete** — Revoke a Snyk App OAuth session for an active user. Returns an empty 204 response on success. Required: app_id, session_id.
- **list_all_snyk_app_sessions** — List active OAuth sessions for a Snyk App by app ID. Returns: attributes, id, type. Required: app_id.
- **delete_a_snyk_app_by_id** — Revoke a Snyk App by id, removing access for the specified app. Returns an empty 204 response on success. Required: id.
- **list_all_snyk_apps** — List Snyk Apps that can act on your behalf — apps installed for the current authenticated user. Returns a paginated list of app objects, each including id, type, and attributes. No required parameters.
- **list_all_snyk_brokers_deployments** — List Broker deployments for tenant. Returns: attributes, id, type. Required: tenant_id, version.
- **create_a_snyk_connection_bulk_migration** — Start a bulk migration of integrations from legacy to universal broker for a Snyk broker connection. The migration runs asynchronously after the request is accepted (201). Returns: attributes, id, type. Required: tenant_id, install_id, deployment_id, connection_id, version.
- **list_all_snyk_connection_bulk_migrations** — List organization IDs associated with a Snyk broker connection eligible for bulk migration to universal broker. Returns: id, type, attributes. Required: tenant_id, install_id, deployment_id, connection_id, version.
- **list_all_snyk_connection_contexts** — List Connection contexts. Returns: attributes, id, relationships, type. Required: tenant_id, install_id, connection_id, version.
- **list_all_snyk_connection_integrations** — List all integrations using a Snyk Broker connection. Returns: id, integration_type, org_id, type. Required: tenant_id, connection_id, version.
- **snyk_context_integrations_bulk_delete** — Delete a Snyk Broker context association for an integration. Returns an empty 204 response on success. Required: tenant_id, install_id, context_id, integration_id.
- **snyk_context_integrations_bulk_update** — Updates an integration to be associated with a Broker context. Returns: data, jsonapi, links. Required: tenant_id, install_id, context_id, version, data.
- **snyk_deployment_connections_bulk_delete** — Delete all Broker connections for a specific deployment in Snyk. Returns an empty 204 response on success. Required: tenant_id, install_id, deployment_id.
- **snyk_deployment_connections_bulk_update** — Updates Broker connection. Returns: data, jsonapi, links. Required: tenant_id, install_id, deployment_id, connection_id, version, data.
- **create_a_snyk_deployment_connection** — Creates Broker connection. Returns: attributes, id, relationships, type. Required: tenant_id, install_id, deployment_id, version, data.
- **delete_a_snyk_deployment_connection_by_id** — Delete a Broker deployment connection in Snyk. Returns an empty 204 response on success. Required: tenant_id, install_id, deployment_id, id.
- **get_single_snyk_deployment_connection_by_id** — Get Broker connection. Returns: attributes, id, relationships, type. Required: id, tenant_id, install_id, deployment_id, version.
- **list_all_snyk_deployment_connections** — List all Broker connections for a given Snyk deployment. Returns: attributes, id, relationships, type. Required: tenant_id, install_id, deployment_id, version.
- **snyk_install_contexts_bulk_delete** — Delete a Snyk broker context by context ID. Returns an empty 204 response on success. Required: tenant_id, install_id, context_id, version.
- **snyk_install_contexts_bulk_update** — Update a Snyk broker context for a deployment. Returns the updated context envelope including data (containing type, id, attributes) and pagination links. Required: tenant_id, install_id, context_id, version.
- **list_all_snyk_install_contexts** — List Snyk broker contexts for a given context ID. Returns: attributes, id, relationships, type. Required: tenant_id, install_id, context_id, version.
- **snyk_install_deployments_bulk_delete** — Delete a Snyk Broker deployment for a given install. Returns an empty 204 response on success. Required: tenant_id, install_id, deployment_id.
- **snyk_install_deployments_bulk_update** — Updates Broker deployment. Returns: data, jsonapi, links. Required: tenant_id, install_id, deployment_id, version, data.
- **create_a_snyk_install_deployment** — Creates Broker Deployment. Returns: attributes, id, type. Required: tenant_id, install_id, version, data.
- **list_all_snyk_install_deployments** — List Broker deployments. Returns: attributes, id, type. Required: tenant_id, install_id, version.
- **snyk_org_integrations_bulk_delete** — Delete an existing Broker connection integration for a deployment in Snyk. Returns an empty 204 response on success. Required: tenant_id, connection_id, org_id, integration_id.
- **create_a_snyk_org_integration** — Create a Broker connection integration configuration in Snyk, configuring integrations to use the Broker connection for a deployment. Returns the created integration object including its id, type, and attributes. Required: tenant_id, connection_id, org_id, version, data.
- **snyk_org_slack_apps_bulk_delete** — Remove a Slack App integration from a Snyk organization by org and bot ID. Returns an empty 204 response on success. Required: org_id, bot_id.
- **create_a_snyk_org_slack_app** — Create new Slack notification default settings for a tenant in Snyk. Returns the created settings resource object including id and type. Required: org_id, bot_id.
- **list_all_snyk_org_slack_apps** — Get Slack integration default notification settings in Snyk for a given org and Slack bot. Returns: attributes, id, type. Required: org_id, bot_id.
- **snyk_org_targets_bulk_delete** — Delete a Snyk target by target ID within an organization. The target and all of its projects are deleted automatically. Returns an empty 204 response on success. Required: org_id, target_id.
- **get_single_snyk_org_target_by_id** — Get a specific Snyk target by its target ID within an organization. Returns the target resource including its id, type, and attributes with target metadata such as display_name, is_private, and remote_url. Required: org_id, id.
- **list_all_snyk_org_targets** — List an organization's Snyk targets with optional filtering by source type, privacy, remote URL, display name prefix, and creation date. Returns: attributes, id, relationships, type. Required: org_id.
- **list_all_snyk_org_test_jobs** — Get a Snyk test job to poll the status of an asynchronous test by its job ID. Returns: attributes, id, relationships, type.status, attributes.created_at, and relationships.test (populated with a link to the finished test entity when the job is complete). Required: org_id, job_id. Early Access endpoint.
- **create_a_snyk_org_test** — Create a new Snyk test to run SCA or SAST scans on provided items. Returns a 202 Accepted job object including id (UUID), type, and attributes with status and created_at — use the job id to poll for completion via GetJob. Required: org_id. Early Access; only Open Source (SCA) and Code Analysis (SAST) scanners are supported.
- **list_all_snyk_org_tests** — Get a single completed Snyk test by test id, including its status, outcome per configured thresholds, test facts (e.g. dependency count), a summary of uncovered findings, and any errors or warnings that occurred during the test. Returns: attributes, id, links, type. Required: org_id, test_id. Early Access endpoint.
- **get_single_snyk_org_user_by_id** — Get a single Snyk organization user by id. Returns: attributes, id, type. Required: org_id, id. Service Accounts are not returned by this endpoint; use the Service Accounts endpoints instead.
- **delete_a_snyk_personal_access_token_by_id** — Delete a personal access token in Snyk by id. Returns an empty 204 response on success. Required: id.
- **list_all_snyk_personal_access_tokens** — List personal access tokens for the authenticated Snyk user. Returns each token's id, type, and attributes including created_at, expires_at, label, and tenant_id.
- **get_single_snyk_slack_app_channel_by_id** — Get a single Slack channel by its channel ID in Snyk. Returns the channel object including its id, type, and attributes with the channel name. Required: org_id, tenant_id, id.
- **list_all_snyk_slack_app_channels** — List Slack channels accessible to the Snyk Slack App for an org. Returns each channel with id, type, and attributes including the channel name. Required: org_id, tenant_id. Only forward pagination is supported; ending_before does not function.
- **snyk_slack_app_projects_bulk_delete** — Remove a Slack notification settings override for a Snyk project. Returns an empty 204 response on success. Required: org_id, bot_id, project_id.
- **snyk_slack_app_projects_bulk_update** — Update Slack notification settings for a Snyk project. Returns the updated settings including data, jsonapi, and links. Required: org_id, bot_id, project_id, data.
- **create_a_snyk_slack_app_project** — Create a Slack notification settings override for a specific Snyk project. Returns the created project settings object including id, type, and attributes. Required: org_id, bot_id, project_id.
- **list_all_snyk_slack_app_projects** — List Slack notification settings overrides for projects in a Snyk organization. These overrides supersede the tenant-level default settings. Returns project settings records including id, type, and attributes. Required: org_id, bot_id.
- **get_single_snyk_tenant_by_id** — Get a single Snyk tenant by id. Returns the tenant resource object including its id, type, and attributes. Required: id.
- **list_all_snyk_tenants** — List all Snyk tenants the calling user is a member of. Returns each tenant's id, type, and attributes. Optional filter by name.
- **update_a_snyk_tenant_by_id** — Update the details of a Snyk tenant by id. Returns the updated tenant resource object including its id, type, and attributes. Required: id.
- **list_all_snyk_test_findings** — List findings for a Snyk test (Early Access). Findings are scanner-agnostic representations of vulnerabilities and organization-level policy breaches produced when Snyk runs a test. Returns each finding as a JSON:API resource object including id, type, attributes, and relationships. Only non-suppressed findings not in violation of a set test threshold are returned. Required: org_id, test_id.
- **list_all_snyk_users** — Get details about the currently authenticated Snyk user making the request. Returns: attributes, id, type. Required: version.
- **list_all_snyk_deployment_contexts** — List Snyk broker deployment contexts for a given deployment. Returns: attributes, id, relationships, type. Required: tenant_id, install_id, deployment_id, version.
- **create_a_snyk_deployment_context** — Create broker Context. Returns: attributes, id, relationships, type. Required: tenant_id, install_id, deployment_id, version, data.
- **list_all_snyk_deployment_credentials** — List deployment credentials for a given Snyk Universal Broker deployment. Returns: attributes, id, relationships, type. Required: tenant_id, install_id, deployment_id, version.
- **create_a_snyk_deployment_credential** — Create deployment credential. Returns: attributes, id, relationships, type. Required: tenant_id, install_id, deployment_id, version, data.
- **get_single_snyk_deployment_credential_by_id** — Get Deployment credential. Returns: attributes, id, relationships, type. Required: id, tenant_id, install_id, deployment_id, version.
- **snyk_deployment_credentials_bulk_update** — Updates Deployment credential. Returns: data, jsonapi, links. Required: tenant_id, install_id, deployment_id, credential_id, version, data.
- **snyk_deployment_credentials_bulk_delete** — Delete a Snyk broker deployment credential identified by its credential_id within the specified tenant, install, and deployment. Returns an empty 204 response on success. Required: tenant_id, install_id, deployment_id, credential_id.
- **list_all_snyk_tenant_memberships** — List all memberships of a Snyk tenant with optional filtering and sorting. Returns each membership with id, type, attributes, and relationships including the assigned role, user details, and tenant. Required: tenant_id.
- **snyk_tenant_memberships_bulk_update** — Update a Snyk tenant membership with a new role. Returns an empty 204 response on success. Required: tenant_id, membership_id.
- **snyk_tenant_memberships_bulk_delete** — Delete an individual Snyk tenant membership for a single user. Returns an empty 204 response on success. Required: tenant_id, membership_id.
- **list_all_snyk_tenant_roles** — List all available roles for a given tenant in Snyk. Returns: attributes, id, meta, relationships, type. Required: tenant_id.
- **create_a_snyk_tenant_role** — Create a custom tenant role in Snyk. Returns the created role with id, type, and attributes including name, description, and permissions. Required: tenant_id, data (including type and attributes).
- **get_single_snyk_tenant_role_by_id** — Get a specific tenant role by its id in Snyk, including details and permissions. Returns: attributes, id, meta, relationships, type. Required: tenant_id, id.
- **snyk_tenant_roles_bulk_update** — Update attributes of a custom tenant role in Snyk by its id. Returns the updated role with id, type, and attributes including name, description, and permissions. Required: tenant_id, role_id, data.
- **snyk_tenant_roles_bulk_delete** — Delete a custom tenant role in Snyk by its id. Returns an empty 204 response on success. Required: tenant_id, role_id.

## How it works

1. **Link your customer's Snyk account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app.
2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request.
3. **Call Truto's API to reach Snyk.** The Proxy API is a 1-to-1 mapping of the Snyk API.
4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field.

## Use cases

- **Sync Snyk organization and user data into your platform** — SaaS companies building developer platforms, compliance tools, or security dashboards need to understand who has access to Snyk and how their organizations are structured. Pulling Snyk's user directory lets you map security ownership to teams and services in your product.
- **Automate user provisioning and access audits for Snyk** — IT management and identity governance platforms can offer their customers automated visibility into Snyk user accounts, roles, and organization memberships — enabling access reviews, license optimization, and SOC 2 evidence collection without manual exports.
- **Correlate Snyk roles and org membership with broader identity posture** — Security posture management and GRC platforms can ingest Snyk's user directory alongside data from other dev tools to build a unified view of who has access to what across the software supply chain, flagging over-privileged accounts or orphaned users.
- **Power developer scorecards with team-level Snyk context** — Internal developer portals and engineering intelligence platforms can pull Snyk organization and user data to attribute security activity to the right teams, enabling per-team security scorecards and accountability dashboards.

## What you can build

- **Snyk user directory sync** — Continuously import Snyk users, their roles, and organization memberships into your platform so customers always have an up-to-date view of who has access.
- **Cross-tool access review dashboard** — Display Snyk user roles alongside roles from other connected dev tools so IT and security teams can audit access in one place.
- **Org-level team mapping** — Map Snyk organizations to teams or business units in your product, enabling team-scoped reporting and ownership attribution.
- **Automated offboarding detection** — Flag Snyk accounts that still exist for users who have been deactivated in the company's identity provider, helping customers close access gaps.
- **License and seat utilization reports** — Surface how many Snyk seats are actively used versus allocated, giving customers data to optimize their Snyk spend.

## FAQs

### What Snyk data can I access through Truto today?

Truto supports Snyk through the Unified User Directory API, which covers Organizations, Roles, and Users. Additional Snyk-specific tools (e.g., for projects, issues, or SBOMs) are not yet available but can be built on request.

### How does authentication work for the Snyk integration?

Snyk's API typically uses API tokens (personal or service account tokens) for authentication. Truto handles the auth flow so your end users can connect their Snyk accounts without you managing token storage or refresh logic directly.

### Can I request Snyk-specific endpoints beyond the Unified User Directory API?

Yes. Truto builds tools on request. If you need access to Snyk projects, issues, SBOMs, or other endpoints, you can request them and Truto will build and expose them for your use case.

### Does Truto handle Snyk's API versioning and pagination?

Yes. Snyk uses date-based API versioning and paginated responses. Truto abstracts both so you get a consistent interface without needing to track Snyk's version lifecycle or implement cursor-based pagination yourself.

### What does the Unified User Directory API return for Snyk?

It returns normalized objects for Users, Organizations, and Roles from Snyk, mapped to Truto's unified schema. This lets you query Snyk's user directory using the same API shape you'd use for any other integrated application.

### Are there rate limit considerations when pulling data from Snyk?

Snyk's API enforces rate limits that vary by plan and endpoint. Truto manages request throttling and retries on your behalf so your integration stays within Snyk's limits without requiring custom backoff logic.

## Related reading

- [Connect Snyk to Claude: Track Cloud Assets and Monitor Licenses](https://truto.one/blog/connect-snyk-to-claude-track-cloud-assets-and-monitor-licenses/) — Learn how to connect Snyk to Claude via a managed MCP server. Track cloud assets, run security audits, and automate license compliance with AI agents.
- [Connect Snyk to ChatGPT: Scan Projects and Manage Security Issues](https://truto.one/blog/connect-snyk-to-chatgpt-scan-projects-and-manage-security-issues/) — A complete engineering guide to connecting Snyk to ChatGPT using an MCP server. Automate vulnerability triage, run SAST scans, and manage access via AI agents.
- [Connect Snyk to AI Agents: Automate SBOMs and Audit Security Logs](https://truto.one/blog/connect-snyk-to-ai-agents-automate-sboms-and-audit-security-logs/) — Learn how to connect Snyk to AI agents using Truto's /tools endpoint. Build autonomous workflows to audit security logs, analyze SBOMs, and manage policies securely.