Snyk Connection Instructions

​

Required Permissions

​

User Authorization Flow

​

Snyk Organization Roles

• Can add and delete projects
• Can view all projects, vulnerabilities, and reports
• Can manage organization settings and integrations
• Can override Snyk checks and manage users
• Full access to all organization resources
• Best choice for comprehensive data access across the organization

• Can view and test projects
• Can view project history and reports
• Can create pull requests and manage ignores
• Limitation: Cannot add/remove projects or manage users
• May have sufficient permissions depending on data requirements

• Has full permissions at both Group and Organization levels
• Automatically acts as Organization Admin for all organizations in the Group
• Can manage multiple organizations within a group
• Useful if you need to pull data from multiple Snyk organizations

• Read-only access at Group level
• Limited Organization permissions
• Primarily for monitoring purposes

​

Key Points

• No admin consent required - this is individual user authorization
• The user authorizes access to Snyk resources they have access to
• Permissions are scoped based on the user’s role in the Snyk organization
• Both Organization Admin and Organization Collaborator can view projects, but Admin has broader access

​

Snyk App

​

Base URL

{
  "type": "invalid_request",
  "code": "validation_failed",
  "message": "Failed to validate the request",
  "detail": [
    {
      "loc": ["body"],
      "msg": "Value error, Invalid credentials: base_url: base_url must be one of {'https://app.snyk.io', 'https://app.eu.snyk.io', 'https://app.us.snyk.io'}"
    }
  ]
}

​

Onboarding

1

Create Snyk Connection using OAuth flow

With your Leen API Key and your Customer’s Org ID, make an API request to create a new Snyk Connection. More information can be found on the API Reference page.

Example POST body and response

    {
      "vendor": "SNYK",
      "credentials": {
          "base_url": "https://app.us.snyk.io", // OPTIONAL: omit for Snyk US. See "Base URL" above for the accepted values.
      }
    }

The response will look like this:

{
  "id": "e73fd0f2-9c4a-4911-923a-c07a3a3fa414",
  "vendor": "SNYK",
  "refresh_interval_secs": 14400,
  "timeout_secs": 1800,
  "organization_id": "5718a24d-f9c8-4276-af80-088ac433e28f",
  "oauth2_authorize_url": "https://app.snyk.io/oauth2/authorize?....."
  }

2

Redirect User to Snyk

Redirect the user to the oauth2_authorize_url from the previous step in a new tab. This will prompt the user to authorize Leen’s Snyk app to access their Snyk resources.Once the user has authorized the app, they will be redirected to Leen on a successful authorization.

3

Pull Data

Now that the user has authorized the app, you can pull data from Snyk using the connection_id from the first step. More information can be found on the API Reference page.

​

User Creation

​

API Key Authentication

1

Navigate to Organization Settings in Snyk

In the Snyk organization you want to connect, go to Settings and click “Manage Service Accounts”.

2

Create an API Key for the Snyk Organization

Under Service Accounts, enter a name, select Org Admin as the role, and choose API Key (no expiry). Click “Create service account”.

Repeat for each Snyk organization you want to include, or use a group-level service account if applicable.

3

Create Snyk Connection using API Key

With your Leen API Key and your Customer’s Org ID, make an API request to create a new Snyk Connection with the API token created in the previous step. More information can be found on the API Reference page.

Example POST body and response

{
    "vendor": "SNYK",
    "credentials": {
        "base_url": "https://app.us.snyk.io", // OPTIONAL: omit for Snyk US. See "Base URL" above for the accepted values.
        "api_token": "..."
    }
}

The response will look like this:

{
    "id": "e73fd0f2-9c4a-4911-923a-c07a3a3fa414",
    "vendor": "SNYK",
    "refresh_interval_secs": 14400,
    "timeout_secs": 1800,
    "organization_id": "5718a24d-f9c8-4276-af80-088ac433e28f",
}

4

Pull Data

Now that the connection has been created, you can pull data from Snyk using the connection_id from the previous step. More information can be found on the API Reference page.