--- title: "Snyk MCP server for AI agents - actionlake" description: "Give Claude 399 Snyk actions through one MCP server: inventory assets, apps, V1 projects. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/snyk updated: 2026-10-22 --- Connectors · Work & projects # Snyk MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Snyk and the rest of your systems. It gives your agent 399 Snyk actions (217 reads, 126 writes and 56 that wait for a confirmation) and holds the Snyk credential itself, so the agent never does. It paces Snyk's limits and records every call. [Connect Snyk free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "snyk.orgs.list_orgs", intent: "check which Snyk account is connected" } # List accessible organizations · read · 1 upstream call ``` - 399 actions in one signed file - 217 read look, never change - 126 write create and update - 56 wait for a yes destructive, confirmed first Set up ## Connect Snyk in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Snyk. API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `api_token` Snyk API token - `host` Where your Snyk lives: your host ``` account { op: "connections.requirements", service: "snyk" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "snyk.orgs.list_orgs" } # list accessible organizations · read · 1 upstream call check { action: "snyk.service_accounts.create_org_service_account", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Snyk at a glance **Sign-in** API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `api_token` **Setup fields** `host` **Limits we pace to** 1,620 calls a minute, per connection **API covered** Snyk REST API 2026-03-25 (GA, beta endpoints via ~beta) + Snyk V1 API, at your Snyk instance's API base URL, which you enter when connecting **Built from** Snyk's documentation, read 22 October 2026[api.snyk.io](https://api.snyk.io/rest/openapi/2026-03-25) [docs.snyk.io](https://docs.snyk.io/snyk-api%20(V1%20OpenAPI%20v1-api-spec.yaml)) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 173 of 217 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 5, so ask can line Snyk up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Snyk. 399 actions in 64 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **217** read look, never change - **126** write create and update - **56** destructive wait for a confirmation 1. ### Inventory assets 39 30 read · 9 write · 0 destructive Create an asset search (asynchronous) - Group scope (Early Access) · Create an asset search (asynchronous) - Org scope (Early Access) · Create an asset search (asynchronous) (Early Access) · Retrieve asset search results (asynchronous) - Group scope (Early Access) 2. ### Apps 28 10 read · 10 write · 8 destructive Create a new app for an organization. · Install a Snyk App for a Group · Create a new Snyk App for an organization · Install a Snyk App for an Organization 3. ### V1 projects 25 11 read · 10 write · 4 destructive Add a tag to a project · Add ignore · Applying attributes · Create jira issue 4. ### V1 test 17 17 read · 0 write · 0 destructive Test composer.json & composer.lock file · Test Dep Graph · Test gemfile.lock file · Test Gopkg.toml & Gopkg.lock File 5. ### V1 organizations 15 5 read · 7 write · 3 destructive Create a new organization · Invite users · List all the organizations a user belongs to · List Members 6. ### Broker connections 12 5 read · 4 write · 3 destructive Creates Broker connection · Creates Broker connection Integration Configuration · Performs bulk migration integrations to universal broker · Get Integrations using the current Broker connection 7. ### Service accounts 12 4 read · 6 write · 2 destructive Get a list of organization service accounts. · Create a service account for an organization. · Get an organization service account. · Update an organization service account. 8. ### Asset 11 6 read · 3 write · 2 destructive Add alias for a repository asset in group (Early Access) · Add alias for a repository asset in org (Early Access) · List asset projects with pagination (Early Access) · List Assets with filters (Early Access) **56 more areas · 240 actions** - Opensource settings **10** - Policies **10** - V1 integrations **10** - Cloud **9** - Groups **9** - Broker contexts **8** - Collection **8** - Orgs **8** - Sast rule extensions **8** - V1 groups **8** - Slack settings **7** - V1 reporting API **7** - Container registry import policy **6** - Export **6** - Issues **6** - Tenants **6** - V1 users **6** - Broker deployments **5** - Custom base images **5** - Deployment credentials **5** - Learn assignment **5** - Projects **5** - Secrets rule extensions **5** - Tenant role **5** - V1 webhooks **5** - AI bom **4** - Findings **4** - Iac settings **4** - Sbom **4** - Assignments **3** - Container image **3** - Invites **3** - Pull request templates **3** - Targets **3** - Tests **3** - Users **3** - Audit logs **2** - Languages settings **2** - Learn progress **2** - Model **2** - Open API **2** - Personal access token **2** - Sast settings **2** - Secrets settings **2** - Slack **2** - V1 entitlements **2** - V1 import projects **2** - Access requests **1** - Catalog resource **1** - Group **1** - Open source settings **1** - Package **1** - Package version **1** - V1 dependencies **1** - V1 licenses **1** - V1 monitor **1** Top actions ## The Snyk API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 28 of Snyk's 28 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `snyk.users.get_self` My User Details | My User Details. | read | `identity.current_user.get` 307 connectors | | `snyk.users.get_user` Get user by ID (Early Access) | Get user by ID (Early Access). | read | `identity.user.get` 399 connectors | | `snyk.service_accounts.get_many_org_service_accounts` Get a list of organization service accounts. | Get a list of organization service accounts. | read | `identity.service_account.list` 35 connectors | | `snyk.v1_users.get_user_details` Get User Details | Get User Details. | read | `identity.user.get` 399 connectors | | `snyk.v1_users.get_my_details` Get My Details | Get My Details. | read | `identity.current_user.get` 307 connectors | | `snyk.policies.get_org_policies` Get org-level policies | Get org-level policies. | read | `security.policy.list` 36 connectors | | `snyk.service_accounts.create_org_service_account` Create a service account for an organization. | Create a service account for an organization. | write | `identity.service_account.create` 32 connectors | | `snyk.tenant_role.list_tenant_roles` List all available roles for a given tenant (Early Access) | List all available roles for a given tenant (Early Access). | read | `identity.role.list` 184 connectors | | `snyk.tenant_role.create_tenant_role` Create a custom tenant role for a given tenant (Early Access) | Create a custom tenant role for a given tenant (Early Access). | write | `identity.role.create` 105 connectors | | `snyk.policies.create_org_policy` Create a new org-level policy | Create a new org-level policy. | write | `security.policy.create` 25 connectors | | `snyk.service_accounts.delete_service_account` Delete a service account in an organization. | Delete a service account in an organization. | destructive | `identity.service_account.delete` 25 connectors | | `snyk.issues.list_org_issues` Get issues by org ID | Get issues by org ID. | read | `security.vulnerability.list` 14 connectors | Try it ## Prompts to paste into Claude. Each one names the Snyk actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Who has access in Snyk? List every user and their role. calls `snyk.orgs.list_org_memberships` 2. Write write Create a service account for an organization in Snyk. Show me exactly what you will send before you save it. calls `snyk.service_accounts.create_org_service_account` Governance for Snyk ## Destructive actions wait for a yes. 56 Snyk actions are destructive. The first 10: - Delete a service account in an organization. `snyk.service_accounts.delete_service_account` - Delete a specific tenant role by its id and its tenant id. (Early Access) `snyk.tenant_role.delete_tenant_role` - Delete an org-level policy `snyk.policies.delete_org_policy` - Delete a webhook `snyk.v1_webhooks.delete_a_webhook` - Delete a user from a Group SSO connection (Early Access) `snyk.groups.delete_user` - Remove user's org membership `snyk.orgs.delete_org_membership` - Delete target by target ID `snyk.targets.delete_orgs_target` - Delete project by project ID. `snyk.projects.delete_org_project` - Delete several projects in one request. `snyk.projects.delete_org_projects` - Delete a membership from a group `snyk.groups.delete_group_membership` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do snyk.service_accounts.delete_service_account confirm_policy: **human** Delete a service account in an organization.? **intent:** the user asked me to delete a service account in an organization. run suspended · waiting for a named person · key _snyk-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "snyk-agent", allowed_actions: ["snyk.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "snyk.service_accounts.delete_service_account", approver: "lead@example.com" }, { match: "snyk.tenant_role.delete_tenant_role", approver: "lead@example.com" }, { match: "snyk.policies.delete_org_policy", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Snyk only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Snyk costs on actionlake. Every Snyk action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Snyk refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 399 Snyk actions - 399 actions page each page of a long list is one call - 173 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Snyk action. 399 actions by area: the id your agent calls, what it does, and its effect. **Inventory assets 39** - `snyk.inventory_assets.create_asset_search_group` Create an asset search (asynchronous) - Group scope (Early Access) write - `snyk.inventory_assets.create_asset_search_org` Create an asset search (asynchronous) - Org scope (Early Access) write - `snyk.inventory_assets.create_asset_search_tenant` Create an asset search (asynchronous) (Early Access) write - `snyk.inventory_assets.get_asset_search_results_group` Retrieve asset search results (asynchronous) - Group scope (Early Access) read - `snyk.inventory_assets.get_asset_by_key_group` Look up an asset by natural key or alias - Group scope (Early Access) read - `snyk.inventory_assets.get_asset_by_key_org` Look up an asset by natural key or alias - Org scope (Early Access) read - and 33 more in this area **Apps 28** - `snyk.apps.create_app` Create a new app for an organization. write - `snyk.apps.create_group_app_install` Install a Snyk App for a Group write - `snyk.apps.create_org_app` Create a new Snyk App for an organization write - `snyk.apps.create_org_app_install` Install a Snyk App for an Organization write - `snyk.apps.delete_app` Delete an app destructive - `snyk.apps.delete_app_bot` Revoke app bot authorization destructive - and 22 more in this area **V1 projects 25** - `snyk.v1_projects.add_a_tag_to_a_project` Add a tag to a project write - `snyk.v1_projects.add_ignore` Add ignore write - `snyk.v1_projects.applying_attributes` Applying attributes write - `snyk.v1_projects.create_jira_issue` Create jira issue write - `snyk.v1_projects.activate_a_project` Activate a project write - `snyk.v1_projects.deactivate_a_project` Deactivate a project write - and 19 more in this area **V1 test 17** - `snyk.v1_test.test_composer_json_composer_lock_file` Test composer.json & composer.lock file read - `snyk.v1_test.test_dep_graph` Test Dep Graph read - `snyk.v1_test.test_gemfile_lock_file` Test gemfile.lock file read - `snyk.v1_test.test_gopkg_toml_gopkg_lock_file` Test Gopkg.toml & Gopkg.lock File read - `snyk.v1_test.pip_test_for_issues_in_a_public_package_by_name_and_version` pip_Test for issues in a public package by name and version read - `snyk.v1_test.sbt_test_for_issues_in_a_public_package_by_group_id_artifact_id_and_version` sbt_Test for issues in a public package by group id, artifact id and version read - and 11 more in this area **V1 organizations 15** - `snyk.v1_organizations.create_a_new_organization` Create a new organization write - `snyk.v1_organizations.invite_users` Invite users write - `snyk.v1_organizations.list_all_the_organizations_a_user_belongs_to` List all the organizations a user belongs to read - `snyk.v1_organizations.list_members` List Members read - `snyk.v1_organizations.delete_pending_user_provision` Delete pending user provision destructive - `snyk.v1_organizations.get_organization_notification_settings` Get organization notification settings read - and 9 more in this area **Broker connections 12** - `snyk.broker_connections.create_broker_connection` Creates Broker connection write - `snyk.broker_connections.create_broker_connection_integration` Creates Broker connection Integration Configuration write - `snyk.broker_connections.create_broker_orgs_for_bulk_migration` Performs bulk migration integrations to universal broker write - `snyk.broker_connections.get_broker_connection_integrations` Get Integrations using the current Broker connection read - `snyk.broker_connections.delete_broker_connection` Deletes Broker connection destructive - `snyk.broker_connections.delete_broker_connection_integration` Deletes an Integration for a Broker connection destructive - and 6 more in this area **Service accounts 12** - `snyk.service_accounts.create_org_service_account` Create a service account for an organization. write - `snyk.service_accounts.get_many_org_service_accounts` Get a list of organization service accounts. read - `snyk.service_accounts.get_one_org_service_account` Get an organization service account. read - `snyk.service_accounts.update_org_service_account` Update an organization service account. write - `snyk.service_accounts.create_group_service_account` Create a service account for a group. write - `snyk.service_accounts.delete_one_group_service_account` Delete a group service account. destructive - and 6 more in this area **Asset 11** - `snyk.asset.create_alias_in_group` Add alias for a repository asset in group (Early Access) write - `snyk.asset.create_alias_in_org` Add alias for a repository asset in org (Early Access) write - `snyk.asset.list_asset_projects` List asset projects with pagination (Early Access) read - `snyk.asset.list_assets` List Assets with filters (Early Access) read - `snyk.asset.delete_aliases_in_group` Bulk remove aliases from repository assets in group (Early Access) destructive - `snyk.asset.delete_aliases_in_org` Bulk remove aliases from repository assets in org (Early Access) destructive - and 5 more in this area **Opensource settings 10** - `snyk.opensource_settings.enable_opensource_broker_for_group` Enable opensource broker for group write - `snyk.opensource_settings.enable_opensource_broker_for_org` Enable opensource broker for organization write - `snyk.opensource_settings.get_opensource_broker_ecosystem_settings_for_org` Get opensource broker settings of ecosystem for organization read - `snyk.opensource_settings.get_opensource_broker_setting` Get opensource broker setting for organization read - `snyk.opensource_settings.delete_opensource_broker_setting_for_group` Delete opensource broker setting for group destructive - `snyk.opensource_settings.delete_opensource_broker_setting_for_org` Delete opensource broker setting for organization destructive - and 4 more in this area **Policies 10** - `snyk.policies.create_org_policy` Create a new org-level policy write - `snyk.policies.get_org_policies` Get org-level policies read - `snyk.policies.get_org_policy` Get an org-level policy read - `snyk.policies.update_org_policy` Update an org-level policy write - `snyk.policies.create_group_policy` Create a new group level policy (Early Access) write - `snyk.policies.delete_group_policy` Delete an group-level policy (Early Access) destructive - and 4 more in this area **V1 integrations 10** - `snyk.v1_integrations.add_new_integration` Add new integration write - `snyk.v1_integrations.clone_an_integration_with_settings_and_credentials` Clone an integration (with settings and credentials) write - `snyk.v1_integrations.list` List read - `snyk.v1_integrations.provision_new_broker_token` Provision new broker token write - `snyk.v1_integrations.delete_credentials` Delete credentials destructive - `snyk.v1_integrations.get_existing_integration_by_type` Get existing integration by type read - and 4 more in this area **Cloud 9** - `snyk.cloud.create_environment` Create New Environment (Early Access) write - `snyk.cloud.create_scan` Create Scan (Early Access) write - `snyk.cloud.get_permissions` Generate Cloud Provider Permissions (Early Access) read - `snyk.cloud.list_environments` List Environments (Early Access) read - `snyk.cloud.delete_environment` Delete Environment (Early Access) destructive - `snyk.cloud.get_scan` Get scan (Early Access) read - and 3 more in this area **Groups 9** - `snyk.groups.create_group_membership` Create a group membership for a user with role write - `snyk.groups.list_group_memberships` Get all memberships of the group read - `snyk.groups.list_group_sso_connection_users` Get all users using a given SSO connection (Early Access) read - `snyk.groups.list_group_sso_connections` Get all SSO connections for a group (Early Access) read - `snyk.groups.delete_group_membership` Delete a membership from a group destructive - `snyk.groups.delete_user` Delete a user from a Group SSO connection (Early Access) destructive - and 3 more in this area **Broker contexts 8** - `snyk.broker_contexts.create_broker_context` Create broker Context write - `snyk.broker_contexts.get_connection_context` List Connection context read - `snyk.broker_contexts.list_connection_contexts` List Connection contexts read - `snyk.broker_contexts.list_deployment_contexts` List Deployment contexts read - `snyk.broker_contexts.delete_broker_context` Deletes broker context destructive - `snyk.broker_contexts.delete_broker_context_integration` Deletes the Broker context association with an Integration destructive - and 2 more in this area **Collection 8** - `snyk.collection.create_collection` Create a collection write - `snyk.collection.get_collections` Get collections read - `snyk.collection.get_projects_of_collection` Get projects from the specified collection read - `snyk.collection.update_collection_with_projects` Add projects to a collection write - `snyk.collection.delete_collection` Delete a collection destructive - `snyk.collection.delete_projects_collection` Remove projects from a collection destructive - and 2 more in this area **Orgs 8** - `snyk.orgs.create_org_membership` Create an org membership for a user with role write - `snyk.orgs.list_org_memberships` Get all memberships of the org read - `snyk.orgs.list_orgs` List accessible organizations read - `snyk.orgs.list_orgs_in_group` List all organizations in group read - `snyk.orgs.delete_org_membership` Remove user's org membership destructive - `snyk.orgs.get_org` Get organization read - and 2 more in this area **Sast rule extensions 8** - `snyk.sast_rule_extensions.create_sast_impact_test` Trigger an SAST rule extension impact test. write - `snyk.sast_rule_extensions.create_sast_rule_extension` Create an SAST rule extension write - `snyk.sast_rule_extensions.get_sast_impact_test_result` Retrieve the impact test result for an SAST rule extension. read - `snyk.sast_rule_extensions.list_sast_rule_extensions_by_group` Get a list of all the SAST rule extensions for the requested Group read - `snyk.sast_rule_extensions.delete_sast_rule_extension` Delete an SAST rule extension by SAST rule extension ID destructive - `snyk.sast_rule_extensions.get_sast_impact_test_status` Retrieve the SAST rule extension impact test status. read - and 2 more in this area **V1 groups 8** - `snyk.v1_groups.add_a_member_to_an_organization_within_a_group` Add a member to an organization within a group write - `snyk.v1_groups.list_all_members_in_a_group` List all members in a group read - `snyk.v1_groups.list_all_organizations_in_a_group` List all organizations in a group read - `snyk.v1_groups.list_all_roles_in_a_group` List all roles in a group read - `snyk.v1_groups.delete_tag_from_group` Delete tag from group destructive - `snyk.v1_groups.list_all_tags_in_a_group` List all tags in a group read - and 2 more in this area **Slack settings 7** - `snyk.slack_settings.create_slack_default_notification_settings` Create new Slack notification default settings. write - `snyk.slack_settings.create_slack_project_notification_settings` Create a new Slack settings override for a given project. write - `snyk.slack_settings.get_slack_default_notification_settings` Get Slack integration default notification settings. read - `snyk.slack_settings.get_slack_project_notification_settings_collection` Slack notification settings overrides for projects read - `snyk.slack_settings.delete_slack_default_notification_settings` Remove the given Slack App integration destructive - `snyk.slack_settings.delete_slack_project_notification_settings` Remove Slack settings override for a project. destructive - and 1 more in this area **V1 reporting API 7** - `snyk.v1_reporting_api.get_issue_counts` Get issue counts read - `snyk.v1_reporting_api.get_latest_issue_counts` Get latest issue counts read - `snyk.v1_reporting_api.get_latest_project_counts` Get latest project counts read - `snyk.v1_reporting_api.get_list_of_issues` Get list of issues read - `snyk.v1_reporting_api.get_list_of_latest_issues` Get list of latest issues read - `snyk.v1_reporting_api.get_project_counts` Get project counts read - and 1 more in this area **Container registry import policy 6** - `snyk.container_registry_import_policy.create_container_registry_import_policy` Create a container registry import policy write - `snyk.container_registry_import_policy.create_container_registry_import_policy_dry_run` Create a dry run job for a container registry import policy write - `snyk.container_registry_import_policy.get_container_registry_import_policy` Get a container registry import policy read - `snyk.container_registry_import_policy.get_dry_run_job` Get a dry run job read - `snyk.container_registry_import_policy.delete_container_registry_import_policy` Delete a container registry import policy destructive - `snyk.container_registry_import_policy.update_container_registry_import_policy` Update a container registry import policy write **Export 6** - `snyk.export.create_export` Start an export write - `snyk.export.create_group_export` Start an export write - `snyk.export.get_export` Get export results read - `snyk.export.get_export_job_status` Get export status read - `snyk.export.get_group_export` Get export results read - `snyk.export.get_group_export_job_status` Get export status read **Issues 6** - `snyk.issues.get_group_issue_by_issue_id` Get an issue read - `snyk.issues.get_issues_per_purl` List issues for a package read - `snyk.issues.get_org_issue_by_issue_id` Get an issue read - `snyk.issues.list_group_issues` Get issues by group ID read - `snyk.issues.list_org_issues` Get issues by org ID read - `snyk.issues.list_issues_for_many_purls` List issues for a given set of packages (Currently not available to all customers) write **Tenants 6** - `snyk.tenants.get_tenant` Get a single Tenant by ID read - `snyk.tenants.get_tenant_memberships` Get all memberships of the tenant (Early Access) read - `snyk.tenants.list_tenants` Get a list of all accessible Tenants read - `snyk.tenants.update_tenant` Update tenant write - `snyk.tenants.delete_tenant_membership` Delete an individual tenant membership for a single user. (Early Access) destructive - `snyk.tenants.update_tenant_membership` Update tenant membership (Early Access) write **V1 users 6** - `snyk.v1_users.get_my_details` Get My Details read - `snyk.v1_users.get_organization_notification_settings` Get organization notification settings read - `snyk.v1_users.get_project_notification_settings` Get project notification settings read - `snyk.v1_users.get_user_details` Get User Details read - `snyk.v1_users.modify_organization_notification_settings` Modify organization notification settings write - `snyk.v1_users.modify_project_notification_settings` Modify project notification settings write **Broker deployments 5** - `snyk.broker_deployments.create_broker_deployment` Creates Broker Deployment write - `snyk.broker_deployments.list_broker_deployments` List Broker deployments read - `snyk.broker_deployments.list_broker_deployments_for_tenant` List Broker deployments for tenant read - `snyk.broker_deployments.update_broker_deployment` Updates Broker deployment write - `snyk.broker_deployments.delete_broker_deployment` Deletes Broker deployment destructive **Custom base images 5** - `snyk.custom_base_images.create_custom_base_image` Create a Custom Base Image from an existing container project write - `snyk.custom_base_images.get_custom_base_image` Get a custom base image read - `snyk.custom_base_images.get_custom_base_images` Get a custom base image collection read - `snyk.custom_base_images.update_custom_base_image` Update a custom base image write - `snyk.custom_base_images.delete_custom_base_image` Delete a custom base image destructive **Deployment credentials 5** - `snyk.deployment_credentials.create_deployment_credential` Create deployment credential write - `snyk.deployment_credentials.get_deployment_credential` Get Deployment credential read - `snyk.deployment_credentials.list_deployment_credentials` List Deployment credentials read - `snyk.deployment_credentials.update_deployment_credential` Updates Deployment credential write - `snyk.deployment_credentials.delete_deployment_credential` Deletes Deployment credential destructive **Learn assignment 5** - `snyk.learn_assignment.create_org_assignments` Bulk creation of assignments for users in an organization. (Early Access) write - `snyk.learn_assignment.delete_org_assignments` Bulk deletion of assignments in an organization (Early Access) destructive - `snyk.learn_assignment.delete_org_assignments_bulk` Bulk deletion of assignments in an organization (Early Access) destructive - `snyk.learn_assignment.list_org_assignments` Retrieve a list of assignments for an organization (Early Access) read - `snyk.learn_assignment.update_org_assignments` Update due date for assignments in an organization. (Early Access) write **Projects 5** - `snyk.projects.delete_org_project` Delete project by project ID. destructive - `snyk.projects.get_org_project` Get project by project ID. read - `snyk.projects.list_org_projects` List all Projects for an Org with the given Org ID. read - `snyk.projects.update_org_project` Updates project by project ID. write - `snyk.projects.delete_org_projects` Delete several projects in one request. destructive **Secrets rule extensions 5** - `snyk.secrets_rule_extensions.create_secrets_rule_extension` Create a secrets rule extension write - `snyk.secrets_rule_extensions.get_secrets_rule_extension` Get a secrets rule extension by rule extension ID read - `snyk.secrets_rule_extensions.list_secrets_rule_extensions` Get a list of all secrets rule extensions for the requested Group read - `snyk.secrets_rule_extensions.update_secrets_rule_extension` Update a secrets rule extension by rule extension ID write - `snyk.secrets_rule_extensions.delete_secrets_rule_extension` Delete a secrets rule extension by rule extension ID destructive **Tenant role 5** - `snyk.tenant_role.create_tenant_role` Create a custom tenant role for a given tenant (Early Access) write - `snyk.tenant_role.get_tenant_role` Return a specific role by its id and its tenant id. (Early Access) read - `snyk.tenant_role.list_tenant_roles` List all available roles for a given tenant (Early Access) read - `snyk.tenant_role.update_tenant_role` Update a specific tenant role by its id and its tenant id. (Early Access) write - `snyk.tenant_role.delete_tenant_role` Delete a specific tenant role by its id and its tenant id. (Early Access) destructive **V1 webhooks 5** - `snyk.v1_webhooks.create_a_webhook` Create a webhook write - `snyk.v1_webhooks.delete_a_webhook` Delete a webhook destructive - `snyk.v1_webhooks.list_webhooks` List webhooks read - `snyk.v1_webhooks.retrieve_a_webhook` Retrieve a webhook read - `snyk.v1_webhooks.ping_a_webhook` Ping a webhook write **AI bom 4** - `snyk.ai_bom.create_ai_bom` Create a new AI-BOM (Early Access) write - `snyk.ai_bom.create_and_upload_ai_bom` Create and upload an AI-BOM (Early Access) write - `snyk.ai_bom.get_ai_bom` Get an AI-BOM. (Early Access) read - `snyk.ai_bom.get_ai_bom_job` Get an AI-BOM job status (Early Access) read **Findings 4** - `snyk.findings.create_test_findings_doc` Create a new findings document. (Early Access) write - `snyk.findings.get_findings_document_job` Get a findings-document job. (Early Access) read - `snyk.findings.list_component_findings` List findings for a component. (Early Access) read - `snyk.findings.list_findings` List findings for a test. (Early Access) read **Iac settings 4** - `snyk.iac_settings.get_iac_settings_for_group` Get the Infrastructure as Code Settings for a group read - `snyk.iac_settings.get_iac_settings_for_org` Get the Infrastructure as Code Settings for an org. read - `snyk.iac_settings.update_iac_settings_for_group` Update the Infrastructure as Code Settings for a group write - `snyk.iac_settings.update_iac_settings_for_org` Update the Infrastructure as Code Settings for an org write **Sbom 4** - `snyk.sbom.create_sbom_test_run` Create an SBOM test run (Early Access) write - `snyk.sbom.get_sbom` Get a project’s SBOM document read - `snyk.sbom.get_sbom_test_result` Gets an SBOM test run result (Early Access) read - `snyk.sbom.get_sbom_test_status` Gets an SBOM test run status (Early Access) read **Assignments 3** - `snyk.assignments.create_assignments` Create bulk assignments for rule extensions write - `snyk.assignments.delete_assignments` Delete assignments for rule extensions destructive - `snyk.assignments.list_assignments` List all assignments for a group read **Container image 3** - `snyk.container_image.get_container_image` Get instance of container image read - `snyk.container_image.list_container_image` List instances of container image read - `snyk.container_image.list_image_target_refs` List instances of image target references for a container image read **Invites 3** - `snyk.invites.create_org_invitation` Invite a user to an organization write - `snyk.invites.delete_org_invitation` Cancel a pending user invitations to an organization. destructive - `snyk.invites.list_org_invitation` List pending user invitations to an organization. read **Pull request templates 3** - `snyk.pull_request_templates.create_or_update_pull_request_template` Create or update pull request template for group write - `snyk.pull_request_templates.delete_pull_request_template` Delete pull request template for group destructive - `snyk.pull_request_templates.get_pull_request_template` Get pull request template for group read **Targets 3** - `snyk.targets.delete_orgs_target` Delete target by target ID destructive - `snyk.targets.get_orgs_target` Get target by target ID read - `snyk.targets.get_orgs_targets` Get targets by org ID read **Tests 3** - `snyk.tests.create_test` Create a new test. (Early Access) write - `snyk.tests.get_job` Get a test job. (Early Access) read - `snyk.tests.get_test` Get a test. (Early Access) read **Users 3** - `snyk.users.get_self` My User Details read - `snyk.users.get_user` Get user by ID (Early Access) read - `snyk.users.update_user` Update a user's role in a group (Early Access) write **Audit logs 2** - `snyk.audit_logs.list_group_audit_logs` Search Group audit logs. read - `snyk.audit_logs.list_org_audit_logs` Search Organization audit logs. read **Languages settings 2** - `snyk.languages_settings.get_org_languages_settings` Get language settings for an organization (Early Access) read - `snyk.languages_settings.update_org_languages_settings` Update language settings for an organization (Early Access) write **Learn progress 2** - `snyk.learn_progress.get_catalog_progress` Get collective learning progress (Early Access) read - `snyk.learn_progress.get_users_progress` Get individual user learning progress (Early Access) read **Model 2** - `snyk.model.get_model` Get a model (Early Access) read - `snyk.model.list_models` List models (Early Access) read **Open API 2** - `snyk.open_api.get_apiversion` getAPIVersion read - `snyk.open_api.list_apiversions` listAPIVersions read **Personal access token 2** - `snyk.personal_access_token.delete_personal_access_token` Deletes a personal access token destructive - `snyk.personal_access_token.list_personal_access_token` List personal access tokens read **Sast settings 2** - `snyk.sast_settings.get_sast_settings` Retrieves the SAST settings for an org read - `snyk.sast_settings.update_org_sast_settings` Enable/Disable the Snyk Code settings for an org write **Secrets settings 2** - `snyk.secrets_settings.get_secrets_settings` Retrieves the Secrets settings for an org (Early Access) read - `snyk.secrets_settings.update_org_secrets_settings` Update the Secrets settings for an org (Early Access) write **Slack 2** - `snyk.slack.get_channel_name_by_id` Get Slack Channel name by Slack Channel ID. read - `snyk.slack.list_channels` Get a list of Slack channels read **V1 entitlements 2** - `snyk.v1_entitlements.get_an_organization_s_entitlement_value` Get an organization's entitlement value read - `snyk.v1_entitlements.list_all_entitlements` List all entitlements read **V1 import projects 2** - `snyk.v1_import_projects.get_import_job_details` Get import job details read - `snyk.v1_import_projects.import_targets` Import targets write **Access requests 1** - `snyk.access_requests.get_access_requests` Get access requests (Early Access) read **Catalog resource 1** - `snyk.catalog_resource.list_learn_catalog` List and filter Snyk Learn catalog resources (Early Access) read **Group 1** - `snyk.group.get_group` Get Group (Early Access) read **Open source settings 1** - `snyk.open_source_settings.get_open_source_settings_for_org` Get the Open Source Settings for an Org. (Early Access) read **Package 1** - `snyk.package.get_package` Get a package (Early Access) read **Package version 1** - `snyk.package_version.get_package_version` Get a package version (Early Access) read **V1 dependencies 1** - `snyk.v1_dependencies.list_all_dependencies` List all dependencies read **V1 licenses 1** - `snyk.v1_licenses.list_all_licenses` List all licenses read **V1 monitor 1** - `snyk.v1_monitor.monitor_dep_graph` Monitor Dep Graph write This index shows a sample of each area. All 399 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The Snyk MCP server, answered. **Is there a Snyk MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 399 Snyk actions across inventory assets, apps, v1 projects and v1 test, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Snyk. **What do I need to connect Snyk?** Snyk API token. Plus your host. The free call account { op: "connections.requirements", service: "snyk" } lists exactly what to paste. **Can an AI agent delete or change things in Snyk?** Only if its key allows it, and only with an explicit confirmation. 56 Snyk actions are destructive, including delete a service account in an organization., delete a specific tenant role by its id and its tenant id. (Early Access) and delete an org-level policy. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Snyk API limit?** actionlake paces every call to the limits in the Snyk service file: 1,620 calls a minute per connection. Repeated reads are answered from cache (173 Snyk actions can be), which never reaches Snyk. **What does a Snyk action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (399 Snyk actions page). Cache hits, searches, dry runs and calls Snyk refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Snyk API does it cover?** The Snyk REST API 2026-03-25 (GA, beta endpoints via ~beta) + Snyk V1 API at your Snyk instance's API base URL, which you enter when connecting. It is built from Snyk's documentation as read on 22 October 2026. 399 actions in 64 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Snyk data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Snyk credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Snyk Shares the most action names with - [Cal.com 10](https://actionlake.com/connectors/cal-com) - [Tempo Timesheets (Jira) 9](https://actionlake.com/connectors/tempo-timesheets-jira) - [SmartRecruiters 7](https://actionlake.com/connectors/smartrecruiters) - [TravelPerk (Perk) 6](https://actionlake.com/connectors/travelperk-perk) - [TimeCamp 6](https://actionlake.com/connectors/timecamp) - [Productboard 5](https://actionlake.com/connectors/productboard) Joins with, on shared entities - [Rubrik Security Cloud 3](https://actionlake.com/connectors/rubrik-security-cloud) - [Cloudflare 3](https://actionlake.com/connectors/cloudflare) - [Docebo 3](https://actionlake.com/connectors/docebo) - [HashiCorp Vault 3](https://actionlake.com/connectors/hashicorp-vault) - [Hugging Face 3](https://actionlake.com/connectors/hugging-face) - [Unleash 3](https://actionlake.com/connectors/unleash) Browse - [All Work & projects connectors](https://actionlake.com/connectors/category/work-and-projects) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Snyk; the name is the vendor's own. Counts are from the Snyk service file, version 1.0.0. ## Give your agent Snyk today. [Connect Snyk free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/snyk More: https://actionlake.com/llms.txt