Socket.dev

Supply chain security API detecting malware, typosquats, and vulnerabilities in open-source dependencies. Best for automated security scanning of package manifests, monitoring dependency alerts, and tracking threat intelligence across npm, PyPI, and other ecosystems. Requires a user-provided API key (BYOK). 16 endpoints available through Lava’s AI Gateway. See the Socket.dev API docs for full documentation.

This provider requires your own credentials — connect your API key or OAuth account before use.

Endpoints

List organizations

GET https://api.socket.dev/v0/organizations — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/organizations', { method: 'GET' });

curl "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forganizations" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY"

Look up package info

POST https://api.socket.dev/v0/packages — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/packages', { body: {"purl":"pkg:npm/express@4.18.2"} });

curl -X POST "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Fpackages" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY" \
  -H "Content-Type: application/json" \
  -d '{"purl":"pkg:npm/express@4.18.2"}'

Get supported file types for scanning

GET https://api.socket.dev/v0/scans/supported-files — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/scans/supported-files', { method: 'GET' });

curl "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Fscans%2Fsupported-files" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY"

Create a full scan for an organization

POST https://api.socket.dev/v0/orgs/my-org/scans — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/orgs/my-org/scans', { method: 'POST' });

curl -X POST "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forgs%2Fmy-org%2Fscans" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY" \
  -H "Content-Type: application/json"

List scans for an organization

GET https://api.socket.dev/v0/orgs/my-org/scans — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/orgs/my-org/scans', { method: 'GET' });

curl "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forgs%2Fmy-org%2Fscans" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY"

Get scan details

GET https://api.socket.dev/v0/orgs/my-org/scans/scan-123 — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/orgs/my-org/scans/scan-123', { method: 'GET' });

curl "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forgs%2Fmy-org%2Fscans%2Fscan-123" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY"

Get scan metadata

GET https://api.socket.dev/v0/orgs/my-org/scans/scan-123/metadata — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/orgs/my-org/scans/scan-123/metadata', { method: 'GET' });

curl "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forgs%2Fmy-org%2Fscans%2Fscan-123%2Fmetadata" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY"

List diff scans for an organization

GET https://api.socket.dev/v0/orgs/my-org/diffs — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/orgs/my-org/diffs', { method: 'GET' });

curl "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forgs%2Fmy-org%2Fdiffs" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY"

Create a diff scan

POST https://api.socket.dev/v0/orgs/my-org/diffs — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/orgs/my-org/diffs', { method: 'POST' });

curl -X POST "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forgs%2Fmy-org%2Fdiffs" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY" \
  -H "Content-Type: application/json"

Look up org-scoped packages

POST https://api.socket.dev/v0/orgs/my-org/packages — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/orgs/my-org/packages', { method: 'POST' });

curl -X POST "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forgs%2Fmy-org%2Fpackages" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY" \
  -H "Content-Type: application/json"

Search dependencies within an organization

POST https://api.socket.dev/v0/orgs/my-org/dependencies/search — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/orgs/my-org/dependencies/search', { body: {"query":"lodash"} });

curl -X POST "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forgs%2Fmy-org%2Fdependencies%2Fsearch" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"lodash"}'

Get dependency trends

GET https://api.socket.dev/v0/orgs/my-org/dependencies/trend — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/orgs/my-org/dependencies/trend', { method: 'GET' });

curl "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forgs%2Fmy-org%2Fdependencies%2Ftrend" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY"

List repositories in an organization

GET https://api.socket.dev/v0/orgs/my-org/repos — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/orgs/my-org/repos', { method: 'GET' });

curl "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forgs%2Fmy-org%2Frepos" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY"

List alerts for an organization

GET https://api.socket.dev/v0/orgs/my-org/alerts — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/orgs/my-org/alerts', { method: 'GET' });

curl "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forgs%2Fmy-org%2Falerts" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY"

List historical alerts

GET https://api.socket.dev/v0/orgs/my-org/alerts/historical — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/orgs/my-org/alerts/historical', { method: 'GET' });

curl "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forgs%2Fmy-org%2Falerts%2Fhistorical" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY"

Get threat intelligence feed

GET https://api.socket.dev/v0/orgs/my-org/threat-feed — $0.005 / request

SDK
cURL

const data = await lava.gateway('https://api.socket.dev/v0/orgs/my-org/threat-feed', { method: 'GET' });

curl "https://api.lava.so/v1/forward?u=https%3A%2F%2Fapi.socket.dev%2Fv0%2Forgs%2Fmy-org%2Fthreat-feed" \
  -H "Authorization: Bearer $LAVA_SECRET_KEY"

Get Started

AI Gateway

AI Spend

Monetize

Integration

SDK

Cookbook

Comparisons

Endpoints

List organizations

Look up package info

Get supported file types for scanning

Create a full scan for an organization

List scans for an organization

Get scan details

Get scan metadata

List diff scans for an organization

Create a diff scan

Look up org-scoped packages

Search dependencies within an organization

Get dependency trends

List repositories in an organization

List alerts for an organization

List historical alerts

Get threat intelligence feed

Next Steps

All Providers

Forward Proxy

​Endpoints

​List organizations

​Look up package info

​Get supported file types for scanning

​Create a full scan for an organization

​List scans for an organization

​Get scan details

​Get scan metadata

​List diff scans for an organization

​Create a diff scan

​Look up org-scoped packages

​Search dependencies within an organization

​Get dependency trends

​List repositories in an organization

​List alerts for an organization

​List historical alerts

​Get threat intelligence feed

​Next Steps

All Providers

Forward Proxy

Endpoints

List organizations

Look up package info

Get supported file types for scanning

Create a full scan for an organization

List scans for an organization

Get scan details

Get scan metadata

List diff scans for an organization

Create a diff scan

Look up org-scoped packages

Search dependencies within an organization

Get dependency trends

List repositories in an organization

List alerts for an organization

List historical alerts

Get threat intelligence feed

Next Steps