Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Snyk (BYOK) — connector documentation

  • MCP endpoint: https://byok-snyk.connectorbay.com/mcp
  • REST API: POST https://byok-snyk.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-snyk.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Snyk personal access token or service account token, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-snyk.connectorbay.com/health · Tool schemas: https://byok-snyk.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-snyk · agent@connectorbay.com

What Snyk (BYOK) is for

Snyk (BYOK) lets an AI assistant read your own Snyk data through the Snyk API with a key you supply (personal access token or service account token). Read-only: 8 tools (get_self, list_organizations, get_organization, list_projects, get_project, list_issues, get_issue, list_targets). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.snyk.io. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Snyk. Snyk and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which Snyk account is my token connected to?"
  • "Which Snyk organizations can I access?"
  • "Show my Snyk organization"
  • "Which Snyk projects have critical issues?"
  • "Show details of a Snyk project"
  • "What open critical issues does my Snyk organization have?"

What it does

  • get_self: Show the Snyk user or service account the token belongs to: id, name, username, email and default organization.
  • list_organizations: List the Snyk organizations the token can access with name, slug, group id and personal-org flag. The id is what other tools take as org_id.
  • get_organization: Get one Snyk organization by id: name, slug, group id, personal flag and dates.
  • list_projects: List the Snyk projects of an organization with type, origin, status, target and latest issue counts by severity. Page with links.next.
  • get_project: Get one Snyk project: type, origin, status, target file, lifecycle, environment, business criticality and latest issue counts.
  • list_issues: List the security issues of a Snyk organization (vulnerabilities, licenses, code, cloud, secrets) with severity, status, type and dates. Filter by type, status or severity. Page with links.next.
  • get_issue: Get one Snyk issue by id: title, type, severity, status, ignored flag, key and dates.
  • list_targets: List the targets (repositories, images) scanned in a Snyk organization with display name, URL, privacy flag and creation date. Page with links.next.

BYOK key

You bring your own Snyk personal access token or service account token (https://app.snyk.io/account). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.snyk.io over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Snyk API (api.snyk.io) with a BYOK key; documentation: https://docs.snyk.io/snyk-api. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Snyk. Snyk and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Snyk account.

Built for: Worldwide. Languages: English.