- Search the audit log for a Snyk group, returning security-relevant events (membership changes, setting updates, project changes) across all its organizations. Filter by event type and time range with cursor pagination.
- Search the audit log for a single organization, returning security-relevant events. Filter by event type, actor, project, and time range with cursor pagination.
- List the project collections in an organization. Collections are user-defined groupings of projects used to organize and report on subsets of an org's projects.
- Create a new project collection in an organization. Provide the organization ID and a name for the collection.
- Retrieve a single project collection by ID, including its name and metadata. Provide the organization ID and collection ID.
- Rename a project collection. Provide the organization ID, the collection ID, and the new name.
- Delete a project collection. This removes the grouping only; the underlying projects are not deleted. Provide the organization ID and collection ID.
- List the projects that belong to a collection. Provide the organization ID and collection ID; supports the same project filters and cursor pagination as List Projects.
- Add one or more projects to a collection. Provide the organization ID, the collection ID, and the list of project IDs to add.
- Remove one or more projects from a collection. Provide the organization ID, the collection ID, and the list of project IDs to remove. The projects themselves are not deleted.
- List the Snyk groups the authenticated account can access. Groups sit above organizations in the Snyk hierarchy and own group-level settings, policies, and service accounts.
- List the members of a Snyk group and their group-level roles. Provide the group ID.
- Add a user to a Snyk group with a specific group role. Provide the group ID, the user ID, and the group role ID.
- Change the group role assigned to an existing group member. Provide the group ID, the membership ID, and the new group role ID.
- Remove a member from a Snyk group. Provide the group ID and the membership ID.
- List, across all organizations in a group, the org-level memberships of the group's users. Use this to see which organizations each group user belongs to.
- List the SSO (single sign-on) connections configured for a Snyk group. Provide the group ID.
- List the users provisioned through a specific SSO connection in a group. Provide the group ID and SSO connection ID.
- Remove a user from a group's SSO connection. Provide the group ID, the SSO connection ID, and the user ID.
- List the pending invitations to join an organization. Provide the organization ID.
- Invite a user to join an organization by email with a specific role. Provide the organization ID, the invitee's email, and the org role ID.
- Revoke a pending organization invitation. Provide the organization ID and the invitation ID.
- List security issues (vulnerabilities, license problems, code, cloud, and config findings) aggregated across all organizations in a group. Supports extensive filtering by severity, type, status, and dates, with cursor pagination.
- Retrieve a single security issue by ID at the group level, including its severity, type, and affected item. Provide the group ID and issue ID.
- List security issues found in a Snyk organization — vulnerabilities, license, code, cloud, config, and secrets findings. Filter by severity, type, status, scan item, and time range. This is the primary action for pulling an org's vulnerability data.
- Retrieve a single security issue by ID within an organization, including full detail on the vulnerability and the affected project or item. Provide the organization ID and issue ID.
- Look up known issues for many packages at once by their Package URLs (purls). Provide the organization ID and a list of purls; returns the vulnerabilities affecting each package.
- Look up known issues for a single package by its Package URL (purl). Provide the organization ID and the purl; returns the vulnerabilities affecting that package version.
- List the organizations that belong to a specific group. Provide the group ID; returns each organization Snyk manages under that group.
- List all Snyk organizations the authenticated user or service account can access. Supports filtering by group, name, slug, and personal flag, with cursor pagination. Use this to discover organization IDs needed by most other actions.
- Retrieve a single Snyk organization by its ID, including its name, slug, and group association.
- Update a Snyk organization's settings, such as its display name. Provide the organization ID and the attributes to change.
- List the user and service-account memberships in an organization, including each member's assigned role. Use this to audit who has access to an org.
- Add a user to a Snyk organization with a specific role. Provide the organization ID, the user ID, and the org role ID to grant.
- Change the role assigned to an existing organization member. Provide the organization ID, the membership ID, and the new org role ID.
- Remove a member from a Snyk organization, revoking their access. Provide the organization ID and the membership ID.
- List the policies defined at the group level. Snyk policies automate actions on issues — for example ignoring or re-prioritizing findings that match a set of conditions. Provide the group ID.
- Create a group-level policy that automatically applies an action to issues matching its conditions. Provide the group ID, a name, the condition group, the action type, and the action.
- Update a group-level policy's name, conditions, or action. Provide the group ID and policy ID.
- Delete a group-level policy. Provide the group ID and policy ID.
- List the policies defined at the organization level. Provide the organization ID.
- Create an organization-level policy that automatically applies an action to issues matching its conditions. Provide the organization ID, a name, the condition group, the action type, and the action.
- Retrieve a single organization-level policy by ID, including its conditions and action. Provide the organization ID and policy ID.
- Update an organization-level policy's name, conditions, action, or review setting. Provide the organization ID and policy ID.
- Delete an organization-level policy. Provide the organization ID and policy ID.
- List the events (applications and changes) recorded for an organization-level policy. Provide the organization ID and policy ID.
- List the monitored projects in a Snyk organization. Projects are the scanned targets (repositories, images, packages) where Snyk tracks issues. Supports rich filtering (by target, origin, type, tags, business criticality) and cursor pagination.
- Retrieve a single monitored project by ID, including its target, settings, and metadata. Provide the organization ID and project ID.
- Update a project's attributes such as tags, environment, lifecycle, business criticality, or test frequency. Provide the organization ID and project ID.
- Delete a single monitored project, permanently stopping Snyk from tracking it. Provide the organization ID and project ID.
- Generate a Software Bill of Materials (SBOM) for a monitored project, listing all its dependencies in CycloneDX or SPDX format. Provide the organization ID, project ID, and the desired SBOM format.
- Submit an SBOM document to be tested for known vulnerabilities. Provide the organization ID, the SBOM format, and the SBOM document. Returns a job ID to poll for results.
- Check the status of a submitted SBOM test job. Provide the organization ID and job ID.
- Retrieve the results of a completed SBOM test job, listing the vulnerabilities found in the submitted SBOM. Provide the organization ID and job ID.
- List the service accounts defined at the group level. Service accounts provide machine credentials for automation against the Snyk API. Provide the group ID.
- Create a group-level service account for API automation. Provide the group ID, a name, the group role ID, and the authentication type (API key, OAuth client secret, OAuth private key JWT, or access token).
- Retrieve a single group-level service account by ID. Provide the group ID and service account ID.
- Update a group-level service account, such as renaming it. Provide the group ID and service account ID.
- Delete a group-level service account, revoking its credentials. Provide the group ID and service account ID.
- Rotate, create, or delete the secret of a group-level service account. Provide the group ID, service account ID, and the mode (replace, create, or delete).
- List the service accounts defined at the organization level. Provide the organization ID.
- Create an organization-level service account for API automation. Provide the organization ID, a name, the org role ID, and the authentication type.
- Retrieve a single organization-level service account by ID. Provide the organization ID and service account ID.
- Update an organization-level service account, such as renaming it. Provide the organization ID and service account ID.
- Delete an organization-level service account, revoking its credentials. Provide the organization ID and service account ID.
- Rotate, create, or delete the secret of an organization-level service account. Provide the organization ID, service account ID, and the mode (replace, create, or delete).
- List the scan targets in an organization. A target is the source Snyk imports projects from — for example a Git repository, container registry image, or cloud account. Supports filtering and cursor pagination.
- Retrieve a single scan target by ID, including its source integration and display name. Provide the organization ID and target ID.
- Delete a scan target and all of its associated projects from an organization. Provide the organization ID and target ID. This permanently removes monitoring for everything under the target.
- Retrieve a single user's profile within an organization by user ID. Provide the organization ID and user ID.
- Retrieve the profile of the currently authenticated user or service account, including the user ID, name, email, and default org. Useful for verifying credentials and discovering the caller's identity.
No matching actions