Skip to content
actionlake
Start free

Connectors · Work & projects

Snyk MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Snyk and the rest of your systems. It gives your agent 399 Snyk actions (217 reads, 126 writes and 56 that wait for a confirmation) and holds the Snyk credential itself, so the agent never does. It paces Snyk's limits and records every call.

Connect Snyk freeSee pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "snyk.orgs.list_orgs",  intent: "check which Snyk account is connected"}# List accessible organizations · read · 1 upstream call
  • 399actionsin one signed file
  • 217readlook, never change
  • 126writecreate and update
  • 56wait for a yesdestructive, confirmed first

Set up

Connect Snyk in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Snyk.

    API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • api_tokenSnyk API token
    • hostWhere your Snyk lives: your host
    account { op: "connections.requirements", service: "snyk" }
# free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "snyk.orgs.list_orgs" }# list accessible organizations · read · 1 upstream callcheck { action: "snyk.service_accounts.create_org_service_account", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Snyk at a glance

Sign-in
API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
api_token
Setup fields
host
Limits we pace to
1,620 calls a minute, per connection
API covered
Snyk REST API 2026-03-25 (GA, beta endpoints via ~beta) + Snyk V1 API, at your Snyk instance's API base URL, which you enter when connecting
Built from
Snyk's documentation, read 22 October 2026api.snyk.iodocs.snyk.io
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
173 of 217 reads, for up to 5 minutes; a write clears what it affects
Shared entities
5, so ask can line Snyk up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Snyk.

399 actions in 64 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 217readlook, never change
  • 126writecreate and update
  • 56destructivewait for a confirmation

  1. Inventory assets

    39

    30 read · 9 write · 0 destructive

    Create an asset search (asynchronous) - Group scope (Early Access) · Create an asset search (asynchronous) - Org scope (Early Access) · Create an asset search (asynchronous) (Early Access) · Retrieve asset search results (asynchronous) - Group scope (Early Access)

  2. Apps

    28

    10 read · 10 write · 8 destructive

    Create a new app for an organization. · Install a Snyk App for a Group · Create a new Snyk App for an organization · Install a Snyk App for an Organization

  3. V1 projects

    25

    11 read · 10 write · 4 destructive

    Add a tag to a project · Add ignore · Applying attributes · Create jira issue

  4. V1 test

    17

    17 read · 0 write · 0 destructive

    Test composer.json & composer.lock file · Test Dep Graph · Test gemfile.lock file · Test Gopkg.toml & Gopkg.lock File

  5. V1 organizations

    15

    5 read · 7 write · 3 destructive

    Create a new organization · Invite users · List all the organizations a user belongs to · List Members

  6. Broker connections

    12

    5 read · 4 write · 3 destructive

    Creates Broker connection · Creates Broker connection Integration Configuration · Performs bulk migration integrations to universal broker · Get Integrations using the current Broker connection

  7. Service accounts

    12

    4 read · 6 write · 2 destructive

    Get a list of organization service accounts. · Create a service account for an organization. · Get an organization service account. · Update an organization service account.

  8. Asset

    11

    6 read · 3 write · 2 destructive

    Add alias for a repository asset in group (Early Access) · Add alias for a repository asset in org (Early Access) · List asset projects with pagination (Early Access) · List Assets with filters (Early Access)

56 more areas · 240 actions
  • Opensource settings 10
  • Policies 10
  • V1 integrations 10
  • Cloud 9
  • Groups 9
  • Broker contexts 8
  • Collection 8
  • Orgs 8
  • Sast rule extensions 8
  • V1 groups 8
  • Slack settings 7
  • V1 reporting API 7
  • Container registry import policy 6
  • Export 6
  • Issues 6
  • Tenants 6
  • V1 users 6
  • Broker deployments 5
  • Custom base images 5
  • Deployment credentials 5
  • Learn assignment 5
  • Projects 5
  • Secrets rule extensions 5
  • Tenant role 5
  • V1 webhooks 5
  • AI bom 4
  • Findings 4
  • Iac settings 4
  • Sbom 4
  • Assignments 3
  • Container image 3
  • Invites 3
  • Pull request templates 3
  • Targets 3
  • Tests 3
  • Users 3
  • Audit logs 2
  • Languages settings 2
  • Learn progress 2
  • Model 2
  • Open API 2
  • Personal access token 2
  • Sast settings 2
  • Secrets settings 2
  • Slack 2
  • V1 entitlements 2
  • V1 import projects 2
  • Access requests 1
  • Catalog resource 1
  • Group 1
  • Open source settings 1
  • Package 1
  • Package version 1
  • V1 dependencies 1
  • V1 licenses 1
  • V1 monitor 1

Top actions

The Snyk API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 28 of Snyk's 28 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
snyk.users.get_selfMy User DetailsMy User Details.readidentity.current_user.get307 connectors
snyk.users.get_userGet user by ID (Early Access)Get user by ID (Early Access).readidentity.user.get399 connectors
snyk.service_accounts.get_many_org_service_accountsGet a list of organization service accounts.Get a list of organization service accounts.readidentity.service_account.list35 connectors
snyk.v1_users.get_user_detailsGet User DetailsGet User Details.readidentity.user.get399 connectors
snyk.v1_users.get_my_detailsGet My DetailsGet My Details.readidentity.current_user.get307 connectors
snyk.policies.get_org_policiesGet org-level policiesGet org-level policies.readsecurity.policy.list36 connectors
snyk.service_accounts.create_org_service_accountCreate a service account for an organization.Create a service account for an organization.writeidentity.service_account.create32 connectors
snyk.tenant_role.list_tenant_rolesList all available roles for a given tenant (Early Access)List all available roles for a given tenant (Early Access).readidentity.role.list184 connectors
snyk.tenant_role.create_tenant_roleCreate a custom tenant role for a given tenant (Early Access)Create a custom tenant role for a given tenant (Early Access).writeidentity.role.create105 connectors
snyk.policies.create_org_policyCreate a new org-level policyCreate a new org-level policy.writesecurity.policy.create25 connectors
snyk.service_accounts.delete_service_accountDelete a service account in an organization.Delete a service account in an organization.destructiveidentity.service_account.delete25 connectors
snyk.issues.list_org_issuesGet issues by org IDGet issues by org ID.readsecurity.vulnerability.list14 connectors

Try it

Prompts to paste into Claude.

Each one names the Snyk actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Who has access in Snyk? List every user and their role.

    callssnyk.orgs.list_org_memberships

  2. Writewrite

    Create a service account for an organization in Snyk. Show me exactly what you will send before you save it.

    callssnyk.service_accounts.create_org_service_account

Governance for Snyk

Destructive actions wait for a yes.

56 Snyk actions are destructive. The first 10:

  • Delete a service account in an organization.snyk.service_accounts.delete_service_account
  • Delete a specific tenant role by its id and its tenant id. (Early Access)snyk.tenant_role.delete_tenant_role
  • Delete an org-level policysnyk.policies.delete_org_policy
  • Delete a webhooksnyk.v1_webhooks.delete_a_webhook
  • Delete a user from a Group SSO connection (Early Access)snyk.groups.delete_user
  • Remove user's org membershipsnyk.orgs.delete_org_membership
  • Delete target by target IDsnyk.targets.delete_orgs_target
  • Delete project by project ID.snyk.projects.delete_org_project
  • Delete several projects in one request.snyk.projects.delete_org_projects
  • Delete a membership from a groupsnyk.groups.delete_group_membership

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dosnyk.service_accounts.delete_service_accountconfirm_policy: human

Delete a service account in an organization.?

intent: the user asked me to delete a service account in an organization.

run suspended · waiting for a named person · key snyk-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "snyk-agent",  allowed_actions: ["snyk.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "snyk.service_accounts.delete_service_account", approver: "[email protected]" },    { match: "snyk.tenant_role.delete_tenant_role", approver: "[email protected]" },    { match: "snyk.policies.delete_org_policy", approver: "[email protected]" }  ]}
Illustrative. Scoped to Snyk only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Snyk costs on actionlake.

Every Snyk action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Snyk refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 399 Snyk actions
  • 399actions pageeach page of a long list is one call
  • 173reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Snyk action.

399 actions by area: the id your agent calls, what it does, and its effect.

Inventory assets39
  • snyk.inventory_assets.create_asset_search_groupCreate an asset search (asynchronous) - Group scope (Early Access)write
  • snyk.inventory_assets.create_asset_search_orgCreate an asset search (asynchronous) - Org scope (Early Access)write
  • snyk.inventory_assets.create_asset_search_tenantCreate an asset search (asynchronous) (Early Access)write
  • snyk.inventory_assets.get_asset_search_results_groupRetrieve asset search results (asynchronous) - Group scope (Early Access)read
  • snyk.inventory_assets.get_asset_by_key_groupLook up an asset by natural key or alias - Group scope (Early Access)read
  • snyk.inventory_assets.get_asset_by_key_orgLook up an asset by natural key or alias - Org scope (Early Access)read
  • and 33 more in this area
Apps28
  • snyk.apps.create_appCreate a new app for an organization.write
  • snyk.apps.create_group_app_installInstall a Snyk App for a Groupwrite
  • snyk.apps.create_org_appCreate a new Snyk App for an organizationwrite
  • snyk.apps.create_org_app_installInstall a Snyk App for an Organizationwrite
  • snyk.apps.delete_appDelete an appdestructive
  • snyk.apps.delete_app_botRevoke app bot authorizationdestructive
  • and 22 more in this area
V1 projects25
  • snyk.v1_projects.add_a_tag_to_a_projectAdd a tag to a projectwrite
  • snyk.v1_projects.add_ignoreAdd ignorewrite
  • snyk.v1_projects.applying_attributesApplying attributeswrite
  • snyk.v1_projects.create_jira_issueCreate jira issuewrite
  • snyk.v1_projects.activate_a_projectActivate a projectwrite
  • snyk.v1_projects.deactivate_a_projectDeactivate a projectwrite
  • and 19 more in this area
V1 test17
  • snyk.v1_test.test_composer_json_composer_lock_fileTest composer.json & composer.lock fileread
  • snyk.v1_test.test_dep_graphTest Dep Graphread
  • snyk.v1_test.test_gemfile_lock_fileTest gemfile.lock fileread
  • snyk.v1_test.test_gopkg_toml_gopkg_lock_fileTest Gopkg.toml & Gopkg.lock Fileread
  • snyk.v1_test.pip_test_for_issues_in_a_public_package_by_name_and_versionpip_Test for issues in a public package by name and versionread
  • snyk.v1_test.sbt_test_for_issues_in_a_public_package_by_group_id_artifact_id_and_versionsbt_Test for issues in a public package by group id, artifact id and versionread
  • and 11 more in this area
V1 organizations15
  • snyk.v1_organizations.create_a_new_organizationCreate a new organizationwrite
  • snyk.v1_organizations.invite_usersInvite userswrite
  • snyk.v1_organizations.list_all_the_organizations_a_user_belongs_toList all the organizations a user belongs toread
  • snyk.v1_organizations.list_membersList Membersread
  • snyk.v1_organizations.delete_pending_user_provisionDelete pending user provisiondestructive
  • snyk.v1_organizations.get_organization_notification_settingsGet organization notification settingsread
  • and 9 more in this area
Broker connections12
  • snyk.broker_connections.create_broker_connectionCreates Broker connectionwrite
  • snyk.broker_connections.create_broker_connection_integrationCreates Broker connection Integration Configurationwrite
  • snyk.broker_connections.create_broker_orgs_for_bulk_migrationPerforms bulk migration integrations to universal brokerwrite
  • snyk.broker_connections.get_broker_connection_integrationsGet Integrations using the current Broker connectionread
  • snyk.broker_connections.delete_broker_connectionDeletes Broker connectiondestructive
  • snyk.broker_connections.delete_broker_connection_integrationDeletes an Integration for a Broker connectiondestructive
  • and 6 more in this area
Service accounts12
  • snyk.service_accounts.create_org_service_accountCreate a service account for an organization.write
  • snyk.service_accounts.get_many_org_service_accountsGet a list of organization service accounts.read
  • snyk.service_accounts.get_one_org_service_accountGet an organization service account.read
  • snyk.service_accounts.update_org_service_accountUpdate an organization service account.write
  • snyk.service_accounts.create_group_service_accountCreate a service account for a group.write
  • snyk.service_accounts.delete_one_group_service_accountDelete a group service account.destructive
  • and 6 more in this area
Asset11
  • snyk.asset.create_alias_in_groupAdd alias for a repository asset in group (Early Access)write
  • snyk.asset.create_alias_in_orgAdd alias for a repository asset in org (Early Access)write
  • snyk.asset.list_asset_projectsList asset projects with pagination (Early Access)read
  • snyk.asset.list_assetsList Assets with filters (Early Access)read
  • snyk.asset.delete_aliases_in_groupBulk remove aliases from repository assets in group (Early Access)destructive
  • snyk.asset.delete_aliases_in_orgBulk remove aliases from repository assets in org (Early Access)destructive
  • and 5 more in this area
Opensource settings10
  • snyk.opensource_settings.enable_opensource_broker_for_groupEnable opensource broker for groupwrite
  • snyk.opensource_settings.enable_opensource_broker_for_orgEnable opensource broker for organizationwrite
  • snyk.opensource_settings.get_opensource_broker_ecosystem_settings_for_orgGet opensource broker settings of ecosystem for organizationread
  • snyk.opensource_settings.get_opensource_broker_settingGet opensource broker setting for organizationread
  • snyk.opensource_settings.delete_opensource_broker_setting_for_groupDelete opensource broker setting for groupdestructive
  • snyk.opensource_settings.delete_opensource_broker_setting_for_orgDelete opensource broker setting for organizationdestructive
  • and 4 more in this area
Policies10
  • snyk.policies.create_org_policyCreate a new org-level policywrite
  • snyk.policies.get_org_policiesGet org-level policiesread
  • snyk.policies.get_org_policyGet an org-level policyread
  • snyk.policies.update_org_policyUpdate an org-level policywrite
  • snyk.policies.create_group_policyCreate a new group level policy (Early Access)write
  • snyk.policies.delete_group_policyDelete an group-level policy (Early Access)destructive
  • and 4 more in this area
V1 integrations10
  • snyk.v1_integrations.add_new_integrationAdd new integrationwrite
  • snyk.v1_integrations.clone_an_integration_with_settings_and_credentialsClone an integration (with settings and credentials)write
  • snyk.v1_integrations.listListread
  • snyk.v1_integrations.provision_new_broker_tokenProvision new broker tokenwrite
  • snyk.v1_integrations.delete_credentialsDelete credentialsdestructive
  • snyk.v1_integrations.get_existing_integration_by_typeGet existing integration by typeread
  • and 4 more in this area
Cloud9
  • snyk.cloud.create_environmentCreate New Environment (Early Access)write
  • snyk.cloud.create_scanCreate Scan (Early Access)write
  • snyk.cloud.get_permissionsGenerate Cloud Provider Permissions (Early Access)read
  • snyk.cloud.list_environmentsList Environments (Early Access)read
  • snyk.cloud.delete_environmentDelete Environment (Early Access)destructive
  • snyk.cloud.get_scanGet scan (Early Access)read
  • and 3 more in this area
Groups9
  • snyk.groups.create_group_membershipCreate a group membership for a user with rolewrite
  • snyk.groups.list_group_membershipsGet all memberships of the groupread
  • snyk.groups.list_group_sso_connection_usersGet all users using a given SSO connection (Early Access)read
  • snyk.groups.list_group_sso_connectionsGet all SSO connections for a group (Early Access)read
  • snyk.groups.delete_group_membershipDelete a membership from a groupdestructive
  • snyk.groups.delete_userDelete a user from a Group SSO connection (Early Access)destructive
  • and 3 more in this area
Broker contexts8
  • snyk.broker_contexts.create_broker_contextCreate broker Contextwrite
  • snyk.broker_contexts.get_connection_contextList Connection contextread
  • snyk.broker_contexts.list_connection_contextsList Connection contextsread
  • snyk.broker_contexts.list_deployment_contextsList Deployment contextsread
  • snyk.broker_contexts.delete_broker_contextDeletes broker contextdestructive
  • snyk.broker_contexts.delete_broker_context_integrationDeletes the Broker context association with an Integrationdestructive
  • and 2 more in this area
Collection8
  • snyk.collection.create_collectionCreate a collectionwrite
  • snyk.collection.get_collectionsGet collectionsread
  • snyk.collection.get_projects_of_collectionGet projects from the specified collectionread
  • snyk.collection.update_collection_with_projectsAdd projects to a collectionwrite
  • snyk.collection.delete_collectionDelete a collectiondestructive
  • snyk.collection.delete_projects_collectionRemove projects from a collectiondestructive
  • and 2 more in this area
Orgs8
  • snyk.orgs.create_org_membershipCreate an org membership for a user with rolewrite
  • snyk.orgs.list_org_membershipsGet all memberships of the orgread
  • snyk.orgs.list_orgsList accessible organizationsread
  • snyk.orgs.list_orgs_in_groupList all organizations in groupread
  • snyk.orgs.delete_org_membershipRemove user's org membershipdestructive
  • snyk.orgs.get_orgGet organizationread
  • and 2 more in this area
Sast rule extensions8
  • snyk.sast_rule_extensions.create_sast_impact_testTrigger an SAST rule extension impact test.write
  • snyk.sast_rule_extensions.create_sast_rule_extensionCreate an SAST rule extensionwrite
  • snyk.sast_rule_extensions.get_sast_impact_test_resultRetrieve the impact test result for an SAST rule extension.read
  • snyk.sast_rule_extensions.list_sast_rule_extensions_by_groupGet a list of all the SAST rule extensions for the requested Groupread
  • snyk.sast_rule_extensions.delete_sast_rule_extensionDelete an SAST rule extension by SAST rule extension IDdestructive
  • snyk.sast_rule_extensions.get_sast_impact_test_statusRetrieve the SAST rule extension impact test status.read
  • and 2 more in this area
V1 groups8
  • snyk.v1_groups.add_a_member_to_an_organization_within_a_groupAdd a member to an organization within a groupwrite
  • snyk.v1_groups.list_all_members_in_a_groupList all members in a groupread
  • snyk.v1_groups.list_all_organizations_in_a_groupList all organizations in a groupread
  • snyk.v1_groups.list_all_roles_in_a_groupList all roles in a groupread
  • snyk.v1_groups.delete_tag_from_groupDelete tag from groupdestructive
  • snyk.v1_groups.list_all_tags_in_a_groupList all tags in a groupread
  • and 2 more in this area
Slack settings7
  • snyk.slack_settings.create_slack_default_notification_settingsCreate new Slack notification default settings.write
  • snyk.slack_settings.create_slack_project_notification_settingsCreate a new Slack settings override for a given project.write
  • snyk.slack_settings.get_slack_default_notification_settingsGet Slack integration default notification settings.read
  • snyk.slack_settings.get_slack_project_notification_settings_collectionSlack notification settings overrides for projectsread
  • snyk.slack_settings.delete_slack_default_notification_settingsRemove the given Slack App integrationdestructive
  • snyk.slack_settings.delete_slack_project_notification_settingsRemove Slack settings override for a project.destructive
  • and 1 more in this area
V1 reporting API7
  • snyk.v1_reporting_api.get_issue_countsGet issue countsread
  • snyk.v1_reporting_api.get_latest_issue_countsGet latest issue countsread
  • snyk.v1_reporting_api.get_latest_project_countsGet latest project countsread
  • snyk.v1_reporting_api.get_list_of_issuesGet list of issuesread
  • snyk.v1_reporting_api.get_list_of_latest_issuesGet list of latest issuesread
  • snyk.v1_reporting_api.get_project_countsGet project countsread
  • and 1 more in this area
Container registry import policy6
  • snyk.container_registry_import_policy.create_container_registry_import_policyCreate a container registry import policywrite
  • snyk.container_registry_import_policy.create_container_registry_import_policy_dry_runCreate a dry run job for a container registry import policywrite
  • snyk.container_registry_import_policy.get_container_registry_import_policyGet a container registry import policyread
  • snyk.container_registry_import_policy.get_dry_run_jobGet a dry run jobread
  • snyk.container_registry_import_policy.delete_container_registry_import_policyDelete a container registry import policydestructive
  • snyk.container_registry_import_policy.update_container_registry_import_policyUpdate a container registry import policywrite
Export6
  • snyk.export.create_exportStart an exportwrite
  • snyk.export.create_group_exportStart an exportwrite
  • snyk.export.get_exportGet export resultsread
  • snyk.export.get_export_job_statusGet export statusread
  • snyk.export.get_group_exportGet export resultsread
  • snyk.export.get_group_export_job_statusGet export statusread
Issues6
  • snyk.issues.get_group_issue_by_issue_idGet an issueread
  • snyk.issues.get_issues_per_purlList issues for a packageread
  • snyk.issues.get_org_issue_by_issue_idGet an issueread
  • snyk.issues.list_group_issuesGet issues by group IDread
  • snyk.issues.list_org_issuesGet issues by org IDread
  • snyk.issues.list_issues_for_many_purlsList issues for a given set of packages (Currently not available to all customers)write
Tenants6
  • snyk.tenants.get_tenantGet a single Tenant by IDread
  • snyk.tenants.get_tenant_membershipsGet all memberships of the tenant (Early Access)read
  • snyk.tenants.list_tenantsGet a list of all accessible Tenantsread
  • snyk.tenants.update_tenantUpdate tenantwrite
  • snyk.tenants.delete_tenant_membershipDelete an individual tenant membership for a single user. (Early Access)destructive
  • snyk.tenants.update_tenant_membershipUpdate tenant membership (Early Access)write
V1 users6
  • snyk.v1_users.get_my_detailsGet My Detailsread
  • snyk.v1_users.get_organization_notification_settingsGet organization notification settingsread
  • snyk.v1_users.get_project_notification_settingsGet project notification settingsread
  • snyk.v1_users.get_user_detailsGet User Detailsread
  • snyk.v1_users.modify_organization_notification_settingsModify organization notification settingswrite
  • snyk.v1_users.modify_project_notification_settingsModify project notification settingswrite
Broker deployments5
  • snyk.broker_deployments.create_broker_deploymentCreates Broker Deploymentwrite
  • snyk.broker_deployments.list_broker_deploymentsList Broker deploymentsread
  • snyk.broker_deployments.list_broker_deployments_for_tenantList Broker deployments for tenantread
  • snyk.broker_deployments.update_broker_deploymentUpdates Broker deploymentwrite
  • snyk.broker_deployments.delete_broker_deploymentDeletes Broker deploymentdestructive
Custom base images5
  • snyk.custom_base_images.create_custom_base_imageCreate a Custom Base Image from an existing container projectwrite
  • snyk.custom_base_images.get_custom_base_imageGet a custom base imageread
  • snyk.custom_base_images.get_custom_base_imagesGet a custom base image collectionread
  • snyk.custom_base_images.update_custom_base_imageUpdate a custom base imagewrite
  • snyk.custom_base_images.delete_custom_base_imageDelete a custom base imagedestructive
Deployment credentials5
  • snyk.deployment_credentials.create_deployment_credentialCreate deployment credentialwrite
  • snyk.deployment_credentials.get_deployment_credentialGet Deployment credentialread
  • snyk.deployment_credentials.list_deployment_credentialsList Deployment credentialsread
  • snyk.deployment_credentials.update_deployment_credentialUpdates Deployment credentialwrite
  • snyk.deployment_credentials.delete_deployment_credentialDeletes Deployment credentialdestructive
Learn assignment5
  • snyk.learn_assignment.create_org_assignmentsBulk creation of assignments for users in an organization. (Early Access)write
  • snyk.learn_assignment.delete_org_assignmentsBulk deletion of assignments in an organization (Early Access)destructive
  • snyk.learn_assignment.delete_org_assignments_bulkBulk deletion of assignments in an organization (Early Access)destructive
  • snyk.learn_assignment.list_org_assignmentsRetrieve a list of assignments for an organization (Early Access)read
  • snyk.learn_assignment.update_org_assignmentsUpdate due date for assignments in an organization. (Early Access)write
Projects5
  • snyk.projects.delete_org_projectDelete project by project ID.destructive
  • snyk.projects.get_org_projectGet project by project ID.read
  • snyk.projects.list_org_projectsList all Projects for an Org with the given Org ID.read
  • snyk.projects.update_org_projectUpdates project by project ID.write
  • snyk.projects.delete_org_projectsDelete several projects in one request.destructive
Secrets rule extensions5
  • snyk.secrets_rule_extensions.create_secrets_rule_extensionCreate a secrets rule extensionwrite
  • snyk.secrets_rule_extensions.get_secrets_rule_extensionGet a secrets rule extension by rule extension IDread
  • snyk.secrets_rule_extensions.list_secrets_rule_extensionsGet a list of all secrets rule extensions for the requested Groupread
  • snyk.secrets_rule_extensions.update_secrets_rule_extensionUpdate a secrets rule extension by rule extension IDwrite
  • snyk.secrets_rule_extensions.delete_secrets_rule_extensionDelete a secrets rule extension by rule extension IDdestructive
Tenant role5
  • snyk.tenant_role.create_tenant_roleCreate a custom tenant role for a given tenant (Early Access)write
  • snyk.tenant_role.get_tenant_roleReturn a specific role by its id and its tenant id. (Early Access)read
  • snyk.tenant_role.list_tenant_rolesList all available roles for a given tenant (Early Access)read
  • snyk.tenant_role.update_tenant_roleUpdate a specific tenant role by its id and its tenant id. (Early Access)write
  • snyk.tenant_role.delete_tenant_roleDelete a specific tenant role by its id and its tenant id. (Early Access)destructive
V1 webhooks5
  • snyk.v1_webhooks.create_a_webhookCreate a webhookwrite
  • snyk.v1_webhooks.delete_a_webhookDelete a webhookdestructive
  • snyk.v1_webhooks.list_webhooksList webhooksread
  • snyk.v1_webhooks.retrieve_a_webhookRetrieve a webhookread
  • snyk.v1_webhooks.ping_a_webhookPing a webhookwrite
AI bom4
  • snyk.ai_bom.create_ai_bomCreate a new AI-BOM (Early Access)write
  • snyk.ai_bom.create_and_upload_ai_bomCreate and upload an AI-BOM (Early Access)write
  • snyk.ai_bom.get_ai_bomGet an AI-BOM. (Early Access)read
  • snyk.ai_bom.get_ai_bom_jobGet an AI-BOM job status (Early Access)read
Findings4
  • snyk.findings.create_test_findings_docCreate a new findings document. (Early Access)write
  • snyk.findings.get_findings_document_jobGet a findings-document job. (Early Access)read
  • snyk.findings.list_component_findingsList findings for a component. (Early Access)read
  • snyk.findings.list_findingsList findings for a test. (Early Access)read
Iac settings4
  • snyk.iac_settings.get_iac_settings_for_groupGet the Infrastructure as Code Settings for a groupread
  • snyk.iac_settings.get_iac_settings_for_orgGet the Infrastructure as Code Settings for an org.read
  • snyk.iac_settings.update_iac_settings_for_groupUpdate the Infrastructure as Code Settings for a groupwrite
  • snyk.iac_settings.update_iac_settings_for_orgUpdate the Infrastructure as Code Settings for an orgwrite
Sbom4
  • snyk.sbom.create_sbom_test_runCreate an SBOM test run (Early Access)write
  • snyk.sbom.get_sbomGet a project’s SBOM documentread
  • snyk.sbom.get_sbom_test_resultGets an SBOM test run result (Early Access)read
  • snyk.sbom.get_sbom_test_statusGets an SBOM test run status (Early Access)read
Assignments3
  • snyk.assignments.create_assignmentsCreate bulk assignments for rule extensionswrite
  • snyk.assignments.delete_assignmentsDelete assignments for rule extensionsdestructive
  • snyk.assignments.list_assignmentsList all assignments for a groupread
Container image3
  • snyk.container_image.get_container_imageGet instance of container imageread
  • snyk.container_image.list_container_imageList instances of container imageread
  • snyk.container_image.list_image_target_refsList instances of image target references for a container imageread
Invites3
  • snyk.invites.create_org_invitationInvite a user to an organizationwrite
  • snyk.invites.delete_org_invitationCancel a pending user invitations to an organization.destructive
  • snyk.invites.list_org_invitationList pending user invitations to an organization.read
Pull request templates3
  • snyk.pull_request_templates.create_or_update_pull_request_templateCreate or update pull request template for groupwrite
  • snyk.pull_request_templates.delete_pull_request_templateDelete pull request template for groupdestructive
  • snyk.pull_request_templates.get_pull_request_templateGet pull request template for groupread
Targets3
  • snyk.targets.delete_orgs_targetDelete target by target IDdestructive
  • snyk.targets.get_orgs_targetGet target by target IDread
  • snyk.targets.get_orgs_targetsGet targets by org IDread
Tests3
  • snyk.tests.create_testCreate a new test. (Early Access)write
  • snyk.tests.get_jobGet a test job. (Early Access)read
  • snyk.tests.get_testGet a test. (Early Access)read
Users3
  • snyk.users.get_selfMy User Detailsread
  • snyk.users.get_userGet user by ID (Early Access)read
  • snyk.users.update_userUpdate a user's role in a group (Early Access)write
Audit logs2
  • snyk.audit_logs.list_group_audit_logsSearch Group audit logs.read
  • snyk.audit_logs.list_org_audit_logsSearch Organization audit logs.read
Languages settings2
  • snyk.languages_settings.get_org_languages_settingsGet language settings for an organization (Early Access)read
  • snyk.languages_settings.update_org_languages_settingsUpdate language settings for an organization (Early Access)write
Learn progress2
  • snyk.learn_progress.get_catalog_progressGet collective learning progress (Early Access)read
  • snyk.learn_progress.get_users_progressGet individual user learning progress (Early Access)read
Model2
  • snyk.model.get_modelGet a model (Early Access)read
  • snyk.model.list_modelsList models (Early Access)read
Open API2
  • snyk.open_api.get_apiversiongetAPIVersionread
  • snyk.open_api.list_apiversionslistAPIVersionsread
Personal access token2
  • snyk.personal_access_token.delete_personal_access_tokenDeletes a personal access tokendestructive
  • snyk.personal_access_token.list_personal_access_tokenList personal access tokensread
Sast settings2
  • snyk.sast_settings.get_sast_settingsRetrieves the SAST settings for an orgread
  • snyk.sast_settings.update_org_sast_settingsEnable/Disable the Snyk Code settings for an orgwrite
Secrets settings2
  • snyk.secrets_settings.get_secrets_settingsRetrieves the Secrets settings for an org (Early Access)read
  • snyk.secrets_settings.update_org_secrets_settingsUpdate the Secrets settings for an org (Early Access)write
Slack2
  • snyk.slack.get_channel_name_by_idGet Slack Channel name by Slack Channel ID.read
  • snyk.slack.list_channelsGet a list of Slack channelsread
V1 entitlements2
  • snyk.v1_entitlements.get_an_organization_s_entitlement_valueGet an organization's entitlement valueread
  • snyk.v1_entitlements.list_all_entitlementsList all entitlementsread
V1 import projects2
  • snyk.v1_import_projects.get_import_job_detailsGet import job detailsread
  • snyk.v1_import_projects.import_targetsImport targetswrite
Access requests1
  • snyk.access_requests.get_access_requestsGet access requests (Early Access)read
Catalog resource1
  • snyk.catalog_resource.list_learn_catalogList and filter Snyk Learn catalog resources (Early Access)read
Group1
  • snyk.group.get_groupGet Group (Early Access)read
Open source settings1
  • snyk.open_source_settings.get_open_source_settings_for_orgGet the Open Source Settings for an Org. (Early Access)read
Package1
  • snyk.package.get_packageGet a package (Early Access)read
Package version1
  • snyk.package_version.get_package_versionGet a package version (Early Access)read
V1 dependencies1
  • snyk.v1_dependencies.list_all_dependenciesList all dependenciesread
V1 licenses1
  • snyk.v1_licenses.list_all_licensesList all licensesread
V1 monitor1
  • snyk.v1_monitor.monitor_dep_graphMonitor Dep Graphwrite

This index shows a sample of each area. All 399 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.

Questions

The Snyk MCP server, answered.

Is there a Snyk MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 399 Snyk actions across inventory assets, apps, v1 projects and v1 test, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Snyk.

What do I need to connect Snyk?

Snyk API token. Plus your host. The free call account { op: "connections.requirements", service: "snyk" } lists exactly what to paste.

Can an AI agent delete or change things in Snyk?

Only if its key allows it, and only with an explicit confirmation. 56 Snyk actions are destructive, including delete a service account in an organization., delete a specific tenant role by its id and its tenant id. (Early Access) and delete an org-level policy. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Snyk API limit?

actionlake paces every call to the limits in the Snyk service file: 1,620 calls a minute per connection. Repeated reads are answered from cache (173 Snyk actions can be), which never reaches Snyk.

What does a Snyk action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (399 Snyk actions page). Cache hits, searches, dry runs and calls Snyk refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Snyk API does it cover?

The Snyk REST API 2026-03-25 (GA, beta endpoints via ~beta) + Snyk V1 API at your Snyk instance's API base URL, which you enter when connecting. It is built from Snyk's documentation as read on 22 October 2026. 399 actions in 64 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Snyk data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Snyk credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

More connectors like Snyk

Shares the most action names with

Joins with, on shared entities

Browse

actionlake is independent. It is not made or endorsed by Snyk; the name is the vendor's own. Counts are from the Snyk service file, version 1.0.0.

Give your agent Snyk today.

Connect Snyk freeSee pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.