Snyk MCP Server
for AI Agents

Create a new project collection in an organization. Provide the organization ID and a name for the collection.

List the project collections in an organization. Collections are user-defined groupings of projects used to organize and report on subsets of an org's projects.

Retrieve a single project collection by ID, including its name and metadata. Provide the organization ID and collection ID.

Rename a project collection. Provide the organization ID, the collection ID, and the new name.

Delete a project collection. This removes the grouping only; the underlying projects are not deleted. Provide the organization ID and collection ID.

Add a user to a Snyk group with a specific group role. Provide the group ID, the user ID, and the group role ID.

Remove a member from a Snyk group. Provide the group ID and the membership ID.

List the users provisioned through a specific SSO connection in a group. Provide the group ID and SSO connection ID.

Remove a user from a group's SSO connection. Provide the group ID, the SSO connection ID, and the user ID.

Invite a user to join an organization by email with a specific role. Provide the organization ID, the invitee's email, and the org role ID.

List the pending invitations to join an organization. Provide the organization ID.

Revoke a pending organization invitation. Provide the organization ID and the invitation ID.

List security issues (vulnerabilities, license problems, code, cloud, and config findings) aggregated across all organizations in a group. Supports extensive filtering by severity, type, status, and dates, with cursor pagination.

Retrieve a single security issue by ID at the group level, including its severity, type, and affected item. Provide the group ID and issue ID.

List security issues found in a Snyk organization — vulnerabilities, license, code, cloud, config, and secrets findings. Filter by severity, type, status, scan item, and time range. This is the primary action for pulling an org's vulnerability data.

Retrieve a single security issue by ID within an organization, including full detail on the vulnerability and the affected project or item. Provide the organization ID and issue ID.

Look up known issues for many packages at once by their Package URLs (purls). Provide the organization ID and a list of purls; returns the vulnerabilities affecting each package.

Look up known issues for a single package by its Package URL (purl). Provide the organization ID and the purl; returns the vulnerabilities affecting that package version.

List all Snyk organizations the authenticated user or service account can access. Supports filtering by group, name, slug, and personal flag, with cursor pagination. Use this to discover organization IDs needed by most other actions.

Retrieve a single Snyk organization by its ID, including its name, slug, and group association.

Update a Snyk organization's settings, such as its display name. Provide the organization ID and the attributes to change.

Add a user to a Snyk organization with a specific role. Provide the organization ID, the user ID, and the org role ID to grant.

Remove a member from a Snyk organization, revoking their access. Provide the organization ID and the membership ID.

Create a group-level policy that automatically applies an action to issues matching its conditions. Provide the group ID, a name, the condition group, the action type, and the action.

Update a group-level policy's name, conditions, or action. Provide the group ID and policy ID.

Delete a group-level policy. Provide the group ID and policy ID.

Create an organization-level policy that automatically applies an action to issues matching its conditions. Provide the organization ID, a name, the condition group, the action type, and the action.

Retrieve a single organization-level policy by ID, including its conditions and action. Provide the organization ID and policy ID.

Update an organization-level policy's name, conditions, action, or review setting. Provide the organization ID and policy ID.

Delete an organization-level policy. Provide the organization ID and policy ID.

List the monitored projects in a Snyk organization. Projects are the scanned targets (repositories, images, packages) where Snyk tracks issues. Supports rich filtering (by target, origin, type, tags, business criticality) and cursor pagination.

Retrieve a single monitored project by ID, including its target, settings, and metadata. Provide the organization ID and project ID.

Update a project's attributes such as tags, environment, lifecycle, business criticality, or test frequency. Provide the organization ID and project ID.

Delete a single monitored project, permanently stopping Snyk from tracking it. Provide the organization ID and project ID.

Create a group-level service account for API automation. Provide the group ID, a name, the group role ID, and the authentication type (API key, OAuth client secret, OAuth private key JWT, or access token).

List the service accounts defined at the group level. Service accounts provide machine credentials for automation against the Snyk API. Provide the group ID.

Retrieve a single group-level service account by ID. Provide the group ID and service account ID.

Update a group-level service account, such as renaming it. Provide the group ID and service account ID.

Delete a group-level service account, revoking its credentials. Provide the group ID and service account ID.

Create an organization-level service account for API automation. Provide the organization ID, a name, the org role ID, and the authentication type.

List the service accounts defined at the organization level. Provide the organization ID.

Retrieve a single organization-level service account by ID. Provide the organization ID and service account ID.

Update an organization-level service account, such as renaming it. Provide the organization ID and service account ID.

Delete an organization-level service account, revoking its credentials. Provide the organization ID and service account ID.

List the scan targets in an organization. A target is the source Snyk imports projects from — for example a Git repository, container registry image, or cloud account. Supports filtering and cursor pagination.

Retrieve a single scan target by ID, including its source integration and display name. Provide the organization ID and target ID.

Delete a scan target and all of its associated projects from an organization. Provide the organization ID and target ID. This permanently removes monitoring for everything under the target.