Triage after a scan
Sarah Chen, security lead at BigCo, asked what the latest scan of the customer portal had found. Memtro listed the new findings by severity with CWE, URL and parameter, and gave the fix for the most severe.
Which of our web apps have open high-severity findings?
Probely, now Snyk API & Web, shows you the web apps and APIs you scan, with their risk and open findings by severity. It reads findings by target, severity, state or change date, with CWE, CVSS, URL, parameter and how to fix. It also reads scans with their status and counts, and scan profiles. When asked and granted, it can start, cancel, pause or resume a scan. It can also change a finding's state, severity or assignee, retest a finding, and delete a target. A scan sends attack traffic to the live site and may use a scan credit.
Ask in plain English from chat, your editor, a scheduled job or your own agent. The model picks the right Probely (Snyk API & Web) tool, reads what it needs, and answers with the source cited.
These tools change something in Probely (Snyk API & Web). The model is told to use them only when you ask for exactly that, and an administrator grants each one by name to the teams that may use it; a personal connection acts only after its owner allows it.
Once Probely (Snyk API & Web) is connected, these are the kinds of things people ask. Plain questions, no syntax. If the answer lives partly in another system you have connected, Memtro looks there too.
Which targets have open high-severity findings?
What was found on the checkout app this week?
How do we fix the SQL injection finding on the API target?
Which scans are running now?
What scan profiles do we have?
Sarah Chen, security lead at BigCo, asked what the latest scan of the customer portal had found. Memtro listed the new findings by severity with CWE, URL and parameter, and gave the fix for the most severe.
Tom Reilly, a developer at Acme Ltd, said he had fixed a cross-site scripting finding and asked Memtro to check. With the action granted, Memtro asked Probely to retest it, which ran a short scan against the live site.
The teams that lean on Probely (Snyk API & Web) most, a question each of them asks, and what they connect beside it.
A record in Probely (Snyk API & Web) is rarely the whole story. Connect the systems that hold the rest and Memtro checks them together, then remembers what it learned so the next question starts further along.
Using something else for the same job, or both? Each connector has its own tools; connect as many as you like.
Sign in to the Snyk API & Web (Probely) app, generate an API key and choose its role. The key acts with that role's permissions.
In Memtro open Connections → Probely (Snyk API & Web) and paste the API key alone. Memtro adds the JWT prefix itself.
An administrator grants the scan, finding and delete actions by name to the teams that may use them.
Ask: which targets have open high-severity findings?
Chat in the dashboard, the OpenAI-compatible API, scheduled jobs, and any MCP client: Claude Code, OpenCode, Cursor, Claude Desktop. The Probely (Snyk API & Web) tools are the same everywhere.
Only when you ask, and only what it has been granted: start a scan of a target; cancel a scan; pause or resume a scan; change a finding's state, severity, assignee or comment; retest a finding; delete a target with its scans and findings. Every other tool reads, searches or lists. The Connections page labels the tools that act, an administrator grants each one by name to the teams that may use it, and a personal connection acts only after its owner allows it.
A personal connection serves only your own requests. A shared connection serves the organisation: everyone, or only the teams an admin chooses. Admins can always add shared connections; other members need the permission.
Credentials are encrypted at rest. Tool results are cached briefly so agent loops do not repeat identical calls, and the facts the model extracts are saved to your organisation's memory with provenance (system, record and link) so they can be checked and superseded.
API key. Sign in to the Snyk API & Web (Probely) app, generate an API key and choose its role. The key acts with that role's permissions.
Seven-day free trial, then one monthly price per organisation. Connectors, jobs and memory are never metered.
Sign in, add a provider key, create an API key and point your tools at Memtro. It takes about five minutes.
7-day free trial · card on file, nothing charged until it ends · cancel any time