Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Snyk Settings (BYOK) — connector documentation

  • MCP endpoint: https://byok-snyk-settings.connectorbay.com/mcp
  • REST API: POST https://byok-snyk-settings.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-snyk-settings.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Snyk Settings personal access token or service account token, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-snyk-settings.connectorbay.com/health · Tool schemas: https://byok-snyk-settings.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-snyk-settings · agent@connectorbay.com

What Snyk Settings (BYOK) is for

Snyk Settings (BYOK) lets an AI assistant read your own Snyk Settings data through the Snyk Settings API with a key you supply (personal access token or service account token). Read-only: 12 tools (list_groups, get_group, list_group_orgs, list_tenants, get_iac_settings, get_sast_settings, get_secrets_settings, get_open_source_settings, list_collections, get_collection, list_container_images, list_custom_base_images). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.snyk.io. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Snyk Settings. Snyk Settings and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which Snyk groups can I access?"
  • "Show my Snyk group"
  • "Which organizations are in my Snyk group?"
  • "Which Snyk tenant am I in?"
  • "Are custom IaC rules enabled for my Snyk organization?"
  • "Is Snyk Code enabled for my organization?"

What it does

  • list_groups: List the Snyk groups (collections of organizations) the token can access with their name. Early Access endpoint.
  • get_group: Get one Snyk group: name, slug, creation and update times and the tenant it belongs to. Early Access endpoint.
  • list_group_orgs: List the organizations inside a Snyk group with name, slug, personal flag and dates; the total count is in meta.
  • list_tenants: List the Snyk tenants the token can access with name, slug and dates. Early Access endpoint.
  • get_iac_settings: Get an organization's Infrastructure as Code settings, mainly whether custom rules are enabled and from which OCI registry and tag they load.
  • get_sast_settings: Get an organization's Snyk Code settings: whether code analysis and autofix are enabled.
  • get_secrets_settings: Get an organization's secrets scanning setting: whether it is enabled. Early Access endpoint.
  • get_open_source_settings: Get an organization's open source scanning settings: whether reachability analysis is enabled. Early Access endpoint.
  • list_collections: List an organization's project collections with name, whether Snyk generated it, issue counts by severity and project count.
  • get_collection: Get one project collection: name and whether Snyk generated it.
  • list_container_images: List container image instances known to an organization with registry names, platform and layer digests. Filter by platform or name.
  • list_custom_base_images: List custom base images registered for recommendations, with repository, tag and whether they are recommended. Filter by org, group, repository or tag.

BYOK key

You bring your own Snyk Settings personal access token or service account token (https://app.snyk.io/account). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.snyk.io over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Snyk Settings API (api.snyk.io) with a BYOK key; documentation: https://docs.snyk.io/developer-tools/snyk-api/reference. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Snyk Settings. Snyk Settings and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Snyk Settings account.

Built for: Worldwide. Languages: English.