How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Snyk

Snyk Apps API

The Apps API from Snyk — 20 operation(s) for apps.

Documentation Provider Profile APIs.io OpenAPI GitHub

Snyk Apps API is one of 51 APIs that Snyk publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Application. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

This API exposes 28 operations across 20 paths, and defines 56 schemas. It is described by OpenAPI 3.2.0, at version REST.

Requests are made against a single base URL, https://api.snyk.io/rest.

28 operations 20 paths 56 schemas 8 DELETE10 GET2 PATCH8 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
REST
Base URL
https://api.snyk.io/rest
Authentication
API Key, HTTP Bearer
Resource Areas
1

Authentication & Security 2

Snyk Apps API declares 2 security schemes for authenticating requests. An API key is passed in the header as Authorization (APIToken). It accepts HTTP bearer tokens (BearerAuth). By default, every request must be authenticated.

  • APIToken — API key value must be prefixed with \"Token \".

Paths & Operations 28

Across 20 paths, the API surfaces 28 operations — 8 DELETE, 10 GET, 2 PATCH, 8 POST. Each is listed below with its method, path, parameters, and response codes.

Apps 28
GET
/groups/{group_id}/apps/installs
Get a list of Snyk Apps installed for a Group
getAppInstallsForGroup 6 params → 200400401403404409500
POST
/groups/{group_id}/apps/installs
Install a Snyk App for a Group
createGroupAppInstall 2 params body → 201400401403404409500
DELETE
/groups/{group_id}/apps/installs/{install_id}
Revoke app authorization for a Snyk group with install ID
deleteGroupAppInstallById 3 params → 204400401403404409500
POST
/groups/{group_id}/apps/installs/{install_id}/secrets
Manage client secret for non-interactive Snyk App installations
updateGroupAppInstallSecret 3 params body → 200400401403404409500
GET
/orgs/{org_id}/app_botsdeprecated
Get a list of app bots authorized to an organization.
getAppBots 6 params → 200400401403404409500
DELETE
/orgs/{org_id}/app_bots/{bot_id}deprecated
Revoke app bot authorization
deleteAppBot 3 params → 204400401403404409500
GET
/orgs/{org_id}/appsdeprecated
Get a list of Snyk Apps created by an Organization
getApps 5 params → 200400401403404409500
POST
/orgs/{org_id}/appsdeprecated
Create a new app for an organization.
createApp 2 params body → 201400401403404409500
GET
/orgs/{org_id}/apps/creations
Get a list of Snyk Apps created by an Organization
getOrgApps 5 params → 200400401403404409500
POST
/orgs/{org_id}/apps/creations
Create a new Snyk App for an organization
createOrgApp 2 params body → 201400401403404409500
DELETE
/orgs/{org_id}/apps/creations/{app_id}
Delete a Snyk App by app ID
deleteAppByID 3 params → 204400401403404409500
GET
/orgs/{org_id}/apps/creations/{app_id}
Get a Snyk App by app ID
getAppByID 3 params → 200400401403404409500
PATCH
/orgs/{org_id}/apps/creations/{app_id}
Update app creation attributes such as name, redirect URIs, and access token time to live using the App ID
updateAppCreationByID 3 params body → 200400401403404409500
POST
/orgs/{org_id}/apps/creations/{app_id}/secrets
Manage client secret for a Snyk App
manageAppCreationSecret 3 params body → 200400401403404409500
GET
/orgs/{org_id}/apps/installs
Get a list of Snyk Apps installed for an Organization
getAppInstallsForOrg 6 params → 200400401403404409500
POST
/orgs/{org_id}/apps/installs
Install a Snyk App for an Organization
createOrgAppInstall 2 params body → 201400401403404409500
DELETE
/orgs/{org_id}/apps/installs/{install_id}
Revoke app authorization for a Snyk organization with install ID
deleteAppOrgInstallById 3 params → 204400401403404409500
POST
/orgs/{org_id}/apps/installs/{install_id}/secrets
Manage client secret for non-interactive Snyk App installations
updateOrgAppInstallSecret 3 params body → 200400401403404409500
DELETE
/orgs/{org_id}/apps/{client_id}deprecated
Delete an app
deleteApp 3 params → 204400401403404409500
GET
/orgs/{org_id}/apps/{client_id}deprecated
Get an app by client id
getApp 3 params → 200400401403404409500
PATCH
/orgs/{org_id}/apps/{client_id}deprecated
Update app attributes that are name, redirect URIs, and access token time to live
updateApp 3 params body → 200400401403404409500
POST
/orgs/{org_id}/apps/{client_id}/secretsdeprecated
Manage client secrets for an app.
manageSecrets 3 params body → 200400401403404409500
GET
/self/apps
Get a list of Snyk Apps that can act on your behalf
getUserInstalledApps 4 params → 200400401403404409500
GET
/self/apps/installs
Get a list of Snyk Apps installed for a user
getAppInstallsForUser 5 params → 200400401403404409500
DELETE
/self/apps/installs/{install_id}
Revoke a Snyk App by install ID
deleteUserAppInstallById 2 params → 204400401403404409500
DELETE
/self/apps/{app_id}
Revoke a Snyk App by app ID
revokeUserInstalledApp 2 params → 204400401403404409500
GET
/self/apps/{app_id}/sessions
Get a list of active OAuth sessions by app ID
getUserAppSessions 5 params → 200400401403404409500
DELETE
/self/apps/{app_id}/sessions/{session_id}
Revoke the Snyk App session of an active user
revokeUserAppSession 3 params → 204400401403404409500

Schemas 56

The contract defines 56 schemas that model the data the API accepts and returns. The most detailed are AppResourceAttributesWithSecret (11 properties), AppResourceAttributesWithSecret20220311 (11 properties), AppResourceAttributes (10 properties), AppResourceAttributes20220311 (10 properties). Each schema is shown below with its type and property counts.

QueryVersion
string
Requested API version
AppResourceAttributes20220311
object
10 properties 9 required
RedirectUrisNoMin
array
List of allowed redirect URIs (OAuth callbacks) where Snyk will redirect users after authorization. These are URLs controlled by your application that Snyk wil…
ClientId__1
string
The OAuth2 client id for the app when available. If an app can have multiple OAuth2 clients then this field with return all zeros. This field is not present fo…
SessionData
object
3 properties 3 required
AppResourceAttributesWithSecret
object
11 properties 10 required
IsConfidential
boolean
A boolean to indicate if an app is confidential or not as per the OAuth2 RFC. Confidential apps can securely store secrets. Examples of non-confidential apps a…
AppPatchRequest20220311
object
3 properties
AccessTokenTtlSeconds
number
The access token time to live for your app, in seconds. It only affects the newly generated access tokens, existing access token will continue to have their pr…
AppData20220311
object
3 properties 3 required
PublicAppData
object
4 properties 2 required
AppPostRequest
object
1 property 1 required
AppData
object
3 properties 3 required
AppInstallDataWithSecret
object
5 properties 3 required
AppPostRequest20220311
object
5 properties 3 required
ClientSecret
string
The oauth2 client secret for the app. This is the only time this secret will be returned, store it securely and don’t lose it.
AppPostResponse
object
3 properties
AppPostResponse20220311
object
3 properties
ErrorDocument
object
2 properties 2 required
Error__0
object
8 properties 2 required
ActualVersion
string
Resolved API version
InstalledAt
string
Timestamp at which this app was first installed at.
LinkProperty
Id
string
AppResourceAttributesWithSecret20220311
object
11 properties 10 required
AppName
string
New name of the app to display to users during authorization flow.
GrantType
string
An authorization grant is a credential representing the resource owner's authorization (to access its protected resources) used by the client to obtain an acce…
SelfLink
object
1 property
ClientSecret20240523
string
The OAuth2 client secret for the app. This is the only time this secret will be returned, store it securely and don’t lose it. Only provided for installations…
IsConfidential20220311
boolean
A boolean to indicate if an app is confidential or not as per the OAuth2 RFC.
RedirectUris
array
List of allowed redirect URIs (OAuth callbacks) where Snyk will redirect users after authorization. These are URLs controlled by your application that Snyk wil…
Context
string
Allow installing the app to a org/group or to a user, default tenant.
AppDataWithSecret
object
3 properties 3 required
ErrorDocument__0
object
2 properties 2 required
ErrorLink
object
A link that leads to further details about this particular occurrance of the problem.
1 property
GrantType20220311
string
An authorization grant is a credential representing the resource owner's authorization (to access its protected resources) used by the client to obtain an acce…
ClientId
string
The OAuth2 client id for the app installation. Only provided for installations of non-interactive Snyk Apps.
PublicAppAttributes
object
4 properties 2 required
PaginatedLinks
object
5 properties
ClientId__0
string
The oauth2 client id for the app.
AppInstallData
object
5 properties 3 required
Scopes
array
The scopes this app is allowed to request during authorization.
Links
object
6 properties
AppDataWithSecret20220311
object
3 properties 3 required
Uuid
string
SessionAttributes
object
1 property 1 required
Type
string
AppBot
object
5 properties 3 required
AppPatchRequest
object
1 property 1 required
PublicApp
object
4 properties 2 required
PublicAppAttributes__0
object
4 properties 2 required
JsonApi
object
1 property 1 required
AppInstallWithClient
object
5 properties 4 required
AppResourceAttributes
object
10 properties 7 required
IsPublic
boolean
A boolean to indicate if an app is publicly available or not.
Context__0
string
Allow installing the app to at org/group level or user level. Defaults to tenant.

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

snyk-apps-api-openapi.yml Raw ↑

Other APIs Snyk publishes across the network.

Snyk REST API - Apps (OAuth)
AE Profile APIs.io
Snyk V1 API (Legacy)
AE Profile APIs.io
Snyk OAuth2 API - Authorize
AE Profile APIs.io
Snyk OAuth2 API - Token
AE Profile APIs.io
Snyk MCP Server (Snyk Studio)
AE Profile APIs.io
Snyk AccessRequests API
AE Profile APIs.io
Snyk AiBom API
AE Profile APIs.io
Snyk Asset API
AE Profile APIs.io
Snyk Audit Logs API
AE Profile APIs.io
Snyk BrokerConnections API
AE Profile APIs.io
Snyk BrokerContexts API
AE Profile APIs.io
Snyk BrokerDeployments API
AE Profile APIs.io
#Application
← Back to S APIs
API Details
ID
snyk:snyk-apps-api
Base URL
https://api.snyk.io/rest
Docs
https://apidocs.snyk.io/?version=2024-10-15
Provider
Snyk
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=snyk-apps-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/snyk-apps-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Snyk Apps API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.