Integration

Snyk integration

Snyk Security API for vulnerability scanning and dependency management. Scan code, open-source dependencies, containers, and infrastructure as code for security vulnerabilities. Integrate security into CI/CD pipelines, monitor projects for new vulnerabilities, and get actionable remediation advice. Essential for DevSecOps workflows and secure software development lifecycle.

Connect Snyk How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in Snyk.Built from the 10 Snyk tools below, on the connection you add once.

Common Snyk use cases

CI/CD security gates
managing false positives
onboarding new repositories
auditing notification config
waiting for an import to finish
pre-installation security checks
vulnerability assessment reports
finding integration IDs for imports
inventory of monitored repositories
finding organization IDs for API calls

What you can do with Snyk

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Project, 2 operations

import_projectImport projectPOSTImports a repository into Snyk for continuous vulnerability monitoring. Creates a project that is automatically scanned on schedule and when new vulnerabilities are disclosed.
list_projectsList projectsGETLists all projects in a Snyk organization using the REST API (requires org_id and a version date such as 2024-10-15). Returns a JSON:API data array where each project has id and attributes (name, type, origin, target_reference, status, created), p...

Ignore, 1 operation

ignore_issueIgnore issuePOSTCreates an ignore rule for a vulnerability in a Snyk project. Suppresses the issue from reports with documented justification and optional expiration.

Import job, 1 operation

get_import_jobGet import jobGETRetrieves the status and results of a Snyk import job. Returns the job status and, once complete, the projects created by the import.

Integration, 1 operation

get_integrationsGet integrationsGETLists all integrations configured in a Snyk organization. Returns integration IDs and types for GitHub, GitLab, Bitbucket, container registries, and other connected services.

Issue, 1 operation

get_project_issuesGet project issuesPOSTRetrieves aggregated vulnerability issues for a Snyk project. Returns CVE details, severity scores, affected packages, exploit maturity, and fix availability for all detected vulnerabilities.

Notification, 1 operation

get_org_notification_settingsGet org notification settingsGETRetrieves notification settings for a Snyk organization. Returns configuration for vulnerability alerts, weekly reports, and integration-specific notifications.

Npm, 1 operation

test_npm_fileTest npm filePOSTTests a package.json file for npm dependency vulnerabilities. Analyzes all declared dependencies and returns comprehensive vulnerability report with remediation guidance.

Organization, 1 operation

list_organizationsList organizationsGETLists all Snyk organizations the user belongs to. Returns organization metadata including IDs, names, and group associations needed for project and vulnerability management.

Package, 1 operation

test_packageTest packageGETTests an npm package version for vulnerabilities without creating a Snyk project. Performs an on-demand security check for a package on the npm ecosystem.

Use Snyk from Claude Code, Cursor or Codex

Connect Snyk in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its Snyk operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect Snyk

Create your workspace
Sign up free. Nothing to install.
Connect Snyk once
Add your Snyk connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

Snyk integration FAQ

What can you do with the Snyk integration?

LiveContext exposes 10 operations on Snyk, covering project, ignore, import job and integration. Common uses include CI/CD security gates, managing false positives and onboarding new repositories.