Add Projects To Collection
Add up to 100 projects to a Snyk collection. Warning: This may require collection product access or a qualifying account role.
Snyk helps development teams find, prioritize, and remediate security issues across code, dependencies, containers, and cloud infrastructure.
Add up to 100 projects to a Snyk collection. Warning: This may require collection product access or a qualifying account role.
Permanently delete up to 100 Snyk projects. This is destructive and cannot be undone; confirm the organization and every project ID before calling. A 200 response may include per-project failures, so inspect both meta.deleted and meta.failed.
Transactionally update attributes for up to 100 inventory assets in a Snyk organization. This Early Access endpoint is beta and its contract may change; the connected account must have access to Snyk Inventory.
Update 1-20 distinct Snyk projects using individual typed patches or one shared patch. Sends one request per project, does not roll back successful updates, and returns an explicit outcome for every project when at least one succeeds. If every update fails, the action returns a top-level error to prevent a no-op from being reported as successful.
Create a collection in a Snyk organization. This operation may require collection product access or a qualifying account role; the build account returned 403 with the documented collection scopes granted.
Start an asynchronous organization export and return the export ID and polling link. Use Get Export Job Status before retrieving the results. This operation may require reporting/export product access or a qualifying role; the build account returned 403 with org.report.read granted.
Create an organization-level ignore policy for a specific Snyk Code finding. This API requires Code Consistent Ignores to be enabled.
Link one or more alternate repository URLs to canonical repository assets in a Snyk organization. Warning: Snyk marks this endpoint as beta and its contract may change.
Start asynchronous vulnerability analysis of a CycloneDX 1.4-1.6 JSON or SPDX 2.3 JSON SBOM. Returns the job ID and polling URL for the SBOM test status and result actions. Components without supported PackageURLs are skipped. Warning: Snyk marks this endpoint as beta and its contract may change.
Permanently delete a Snyk collection. This destructive operation cannot be undone; confirm the organization and collection IDs before calling. May require collection product access or a qualifying account role.
Permanently delete an organization-level Snyk ignore policy. This destructive operation cannot be undone; confirm the organization and policy IDs before calling. Organization-level policy APIs require Code Consistent Ignores.
Permanently delete one Snyk project from an organization. This destructive operation cannot be undone; confirm the organization and project IDs before calling.
Detach 1-100 aliased URLs from their canonical repository assets in a Snyk organization. Each detached URL becomes a standalone asset. This destructive Early Access operation cannot be undone; confirm every asset ID and URL pair before calling. Snyk marks this endpoint beta and its contract may change.
Permanently delete a Snyk target and all projects associated with it. This destructive cascade cannot be undone; confirm the organization and target IDs before calling.
Download the raw bytes of a completed findings document and return an offloaded file reference. Supply an existing completed document ID because this toolkit does not provide the findings-document create/poll workflow. Warning: Snyk marks this endpoint beta and its contract may change.
Download a Snyk project's software bill of materials as CycloneDX JSON/XML or SPDX JSON and return an offloaded file reference.
Retrieve a collection from a Snyk organization. The connected account must have collection product access or a qualifying organization role.
Retrieve a container image by its SHA-256 digest from a Snyk organization.
Retrieve completed export results from a Snyk organization. This endpoint may require reporting/export product access or a qualifying organization role.
Get the current status of a Snyk organization export job. The connected account may need reporting or export product access or a qualifying role.
Retrieve Infrastructure as Code settings for a Snyk organization. This may require Snyk IaC product access or a qualifying account role.
Retrieve an organization-level ignore policy by ID. This API is available only for Snyk Code Consistent Ignores.
Retrieve one inventory asset by ID from a Snyk organization, optionally using sparse fieldsets. This Early Access endpoint is beta, may change, and requires Snyk Inventory access.
Retrieve one page of results from a previously started asynchronous Snyk inventory asset search. Supply a search ID created outside this toolkit because the search-start endpoint is not exposed. This Early Access endpoint is beta, may change, and requires Snyk Inventory access.
Retrieve whether the Open Source Broker setting is enabled for a Snyk organization.
Retrieve all Broker settings for a specific Open Source ecosystem in a Snyk organization. Ecosystem identifiers are case-sensitive.
Retrieve publicly accessible private registry settings for a specific Open Source ecosystem in a Snyk organization. These registries are reached directly with credentials rather than through Snyk Broker.
Retrieve the full details of a Snyk organization. Optionally expand the organization's tenant relationship.
Retrieve one Snyk issue by its organization and issue IDs, optionally including data flows for Snyk Code issues.
Retrieve a Snyk package test by ID, including its execution state, outcome, component facts, and finding summaries. The findings themselves are available through the returned findings link. This toolkit does not provide the package-test create/poll workflow, so supply an existing test ID. Warning: Snyk marks this endpoint as beta and its contract may change.
Retrieve a Snyk project by ID, including its settings and relationships. Optionally expand the target and include metadata from the latest scan.
Retrieve the SAST settings for a Snyk organization.
Retrieve one page of affected packages from a finished Snyk SBOM test, together with the test result resource. Poll Get SBOM Test Status first and call this action after the job finishes. Warning: Snyk marks this endpoint as beta and its contract may change.
Poll the status of an asynchronous Snyk SBOM test job. When the status is finished, use Get SBOM Test Result with the same job ID. Warning: Snyk marks this endpoint as beta and its contract may change.
Retrieve a target by ID from a Snyk organization.
List one page of Broker connections integrated with a Snyk organization.
List one page of projects in a Snyk collection, with issue counts and owning targets. May require collection product access or a qualifying account role.
List one page of a Snyk organization's collections, including project and issue counts. May require collection product access or a qualifying account role.
List one page of unsuppressed findings for a component in a completed Snyk package test. The organization, test, and component IDs select the findings; use the returned cursor to continue in finding-ID order. Supply existing test and component IDs because this toolkit does not provide the package-test create/poll workflow. Warning: Snyk marks this endpoint as beta and its contract may change.
List one page of target references associated with a container image in a Snyk organization.
List one page of container images in a Snyk organization, optionally filtered by image digest, platform, or registry name.
List one page of organization-level Snyk Code Consistent Ignore policies, with optional search, review, expiry, and sorting filters.
List one page of event history for a Snyk organization ignore policy. Warning: this beta API requires Code Consistent Ignores and the ignore approval workflow feature.
List one page of Snyk projects linked to an inventory asset, including project attributes and issue counts. This Early Access beta endpoint may require inventory product access or a qualifying account role.
List one page of Snyk targets linked to an inventory asset, including each target's origin, reference, manifest file, integration, and import time. This Early Access beta endpoint may require inventory product access or a qualifying account role.
List one page of a Snyk organization's inventory assets, with optional RSQL filtering, sorting, sparse fieldsets, and total count. This Early Access endpoint is beta, may change, and requires Snyk inventory product access.
List one page of fields available for filtering a Snyk organization's inventory assets with RSQL. This Early Access endpoint is beta and its contract may change.
List one page of distinct values for a Snyk inventory filter field for autocomplete. This inventory endpoint is in beta.
List one page of fields available for grouping inventory assets in a Snyk organization, optionally filtered by asset type. This Early Access beta capability may require additional Snyk product access.
List one page of aggregated values for a Snyk inventory group field. This Early Access capability may require inventory product access or a qualifying account role.
List one offset page of direct vulnerabilities for a versioned Package URL. Transitive vulnerabilities are not included. Pass the returned opaque cursor unchanged to continue; Maven checksum qualifiers also return match metadata.
List direct vulnerabilities for a batch of versioned Package URLs. Snyk restricts this endpoint and does not make it available to all customers; availability depends on the connected account's product entitlement. Transitive vulnerabilities are not included.
Get one page of language and package-manager settings for a Snyk organization. This beta Early Access contract is deprecated and marked for sunset; use it only while the pinned API version remains available.
List one page of issues for a Snyk organization, with filters for scan item, issue type, timestamps, effective severity, status, ignored state, and Code data flows.
List one page of Snyk organizations accessible to the connected account, with group, personal-organization, slug, name, and relationship-expansion filters.
List one page of a Snyk organization's projects. Filter by target, identity, name, origin, type, CLI monitoring time, importing user, tags, or project classifications, and optionally include target and latest-scan metadata.
List one page of a Snyk organization's targets. Filter by privacy, project presence, remote URL, integration source type, display-name prefix, or creation time, and optionally include the total matching count.
List one page of non-threshold-violating, policy-unsuppressed findings from a Snyk package test. Findings are scanner-independent vulnerability and policy-breach records sorted by ID. Supply an existing completed test ID because this toolkit does not provide the package-test create/poll workflow. Warning: Snyk marks this endpoint as beta and its contract may change.
Look up one inventory asset in a Snyk organization by natural key or alias. A natural-key match takes precedence over an alias match. This Early Access endpoint is beta, may change, and requires Snyk Inventory access.
Remove up to 100 projects from a Snyk collection. Warning: This may require collection product access or a qualifying account role.
Rename a Snyk collection. This may require collection product access or a qualifying account role.
Update Infrastructure as Code custom-rule inheritance, enablement, or OCI registry URL and tag for a Snyk organization. This may require Snyk IaC product access or a qualifying organization role.
Update an organization-level ignore policy. This API is available only when Snyk Code Consistent Ignores is enabled.
Partially update the classification, labels, or tags of one Snyk inventory asset. This Early Access endpoint is beta and its contract may change; the connected account must have access to Snyk Inventory.
Update package-manager settings for one programming language in a Snyk organization. Warning: Snyk marks this beta contract as deprecated or sunset; use it only while the pinned version remains served.
Update selected Broker integrations for a specific Open Source ecosystem in a Snyk organization. Only provided integrations are changed; omitting an integration's URLs or providing an empty list removes that integration.
Add, update, or remove private registry integrations for one Open Source ecosystem in a Snyk organization. The endpoint uses patch semantics, so unlisted integrations remain unchanged.
Update the Early Access Secrets settings for a Snyk organization. Availability depends on product enablement; Snyk marks this contract beta and it may change.
Update the display name of a Snyk organization.
Update a Snyk project's classifications, tags, test frequency, or owner.
Enable or disable Snyk Code SAST for an organization.
The Snyk integration connects your Dench AI CRM directly to Snyk, so agents can read and act on your Snyk data as part of everyday work — answering questions in chat, keeping your CRM in sync, and running automations without anyone copying data between tools.
71 actions are available for agents to invoke on your behalf. Every call runs through Snyk's own authorization, scoped to the account you connect.
Sign in to your Dench workspace and open Integrations.
Find Snyk and click Connect — you'll authorize access through Snyk's own sign-in flow. No API keys or code required.
Ask an agent to use Snyk in chat, or call it from an automation.
Manage or disconnect the connection any time from workspace settings.
The Dench Snyk integration connects your AI CRM to Snyk, so AI agents can work with your Snyk data as part of chats, automations, and CRM workflows. You connect your account once, and every agent in your workspace can use it — governed by your workspace permissions.
The Snyk integration currently exposes 71 actions, including Add Projects To Collection, Bulk Delete Projects, Bulk Update Inventory Assets, Bulk Update Projects, Create Collection, and Create Export. Agents invoke them on your behalf from chat or from automations.
No. You connect Snyk from your Dench workspace using Snyk's own sign-in and authorization flow — no API keys to copy, no glue code to maintain.
Connections are authorized through Snyk's own authentication flow, and Dench stores only the authorization needed to act on your behalf. You can review and disconnect the Snyk connection from your workspace settings at any time.