GeezerVison

diff --git a/src/api.mts b/src/api.mts
--- a/src/api.mts
+++ b/src/api.mts
@@ -23,6 +23,7 @@
 }
 
 export type PackageRequestOptions = {
+  orgSlug?: string | undefined
   signal?: AbortSignal | undefined
   timeout?: number | undefined
 }
@@ -236,17 +237,25 @@
   options?: PackageRequestOptions | undefined,
 ): AsyncGenerator {
   const sdk = createSocketSdk(apiKey, options)
+  const { orgSlug } = {
+    __proto__: null,
+    ...options,
+  } as PackageRequestOptions
   const batchSize = 1024
+  const query = { alerts: true, compact: false }
   for (let index = 0, { length } = purls; index < length; index += batchSize) {
     const components = purls
       .slice(index, index + batchSize)
       .map(purl => ({ __proto__: null, purl }))
-    const result = await sdk.batchPackageFetch(
-      { components },
-      { alerts: true, compact: false },
-    )
+    const result = orgSlug
+      ? await sdk.batchOrgPackageFetch(orgSlug, { components }, query)
+      : await sdk.batchPackageFetch({ components }, query)
     if (!result.success) {
-      throw createPackageRequestError(result)
+      throw createPackageRequestError({
+        error: '',
+        status: result.status,
+        success: false,
+      })
     }
     yield* result.data
   }

diff --git a/src/ui/purl-alerts-and-scores/manager.mts b/src/ui/purl-alerts-and-scores/manager.mts
--- a/src/ui/purl-alerts-and-scores/manager.mts
+++ b/src/ui/purl-alerts-and-scores/manager.mts
@@ -3,12 +3,15 @@
 import { logger } from '../../infra/log.mts'
 import path from 'node:path'
 import { mkdirSync, readFileSync, statSync, writeFileSync } from 'node:fs'
-import { getAPIKey } from '../../auth.mts'
+import { getAPIKey, getAuthenticatedContext } from '../../auth.mts'
 import {
   isPackageDisplayDataRenderable,
   streamPackageScores,
 } from '../../api.mts'
-import type { PackageScoreAndAlerts } from '../../api.mts'
+import type {
+  PackageRequestOptions,
+  PackageScoreAndAlerts,
+} from '../../api.mts'
 import { safeDeleteSync } from '@socketsecurity/lib/fs/safe'
 import { isObject } from '@socketsecurity/lib/objects/predicates'
 import { worstArtifactsByPurl } from './select-artifacts.mts'
@@ -168,6 +171,33 @@
   #generation = 0
   #contextReady = true
   private constructor() {}
+  async #resolvePackageFetchRequest(
+    signal: AbortSignal,
+    timeout: number,
+  ): Promise<{
+    apiKey: string | undefined
+    options: PackageRequestOptions
+  }> {
+    const transport = { signal, timeout }
+    const configuredSlug = vscode.workspace
+      .getConfiguration()
+      .get('socket-security.orgSlug')
+    if (typeof configuredSlug !== 'string' || configuredSlug.length === 0) {
+      return { apiKey: await getAPIKey(), options: transport }
+    }
+    const authenticated = await getAuthenticatedContext()
+    if (!authenticated) {
+      return { apiKey: await getAPIKey(), options: transport }
+    }
+    return {
+      apiKey: authenticated.accessToken,
+      options: {
+        orgSlug: authenticated.organization.slug,
+        signal,
+        timeout,
+      },
+    }
+  }
   clear(requeueActive = true) {
     this.#generation += 1
     if (!requeueActive) {
@@ -280,17 +310,21 @@
         )
       })
       try {
-        const apiKey = await getAPIKey()
+        const request = await this.#resolvePackageFetchRequest(
+          controller.signal,
+          this.timeout,
+        )
         if (controller.signal.aborted || generation !== this.#generation) {
           return
         }
         // logger.info(`Requesting Socket API for PURLs: ${[...thesePendingUpdates].join(', ')}`)
         // Bound the SDK request with the same ceiling the AbortController timer
         // uses so a hung connection can't leave entries pending forever.
-        const scores = streamPackageScores(apiKey, [...thesePendingUpdates], {
-          signal: controller.signal,
-          timeout: this.timeout,
-        })
+        const scores = streamPackageScores(
+          request.apiKey,
+          [...thesePendingUpdates],
+          request.options,
+        )
         // The /v0/purl endpoint can stream MULTIPLE artifacts for the same
         // input PURL (e.g. a PyPI sdist and wheel of one version) with
         // different scores and alerts. Buffer them all, then collapse to the

diff --git a/test/repo/unit/api.test.mts b/test/repo/unit/api.test.mts
--- a/test/repo/unit/api.test.mts
+++ b/test/repo/unit/api.test.mts
@@ -404,6 +404,22 @@
     expect(seen.map(s => s.score.overall)).toEqual([42, 99])
   })
 
+  test('requests the organization purl endpoint for a selected org', async () => {
+    const purl = 'pkg:npm/[email protected]' as SimPURL
+    const scope = nock(API_ORIGIN)
+      .post('/v0/orgs/example-org/purl', { components: [{ purl }] })
+      .query({ alerts: 'true', compact: 'false' })
+      .reply(200, `${artifactLine(purl, 0.5)}\n`)
+
+    const seen = await collectPackageScores(
+      streamPackageScores(TOKEN, [purl], { orgSlug: 'example-org' }),
+    )
+
+    expect(seen).toHaveLength(1)
+    expect(seen[0]?.score.overall).toBe(0.5)
+    expect(scope.isDone()).toBe(true)
+  })
+
   test('requests /v0/purl with the pending purls in the body', async () => {
     const purl = 'pkg:npm/[email protected]' as SimPURL
     let sentBody: unknown

diff --git a/test/repo/unit/ui/purl-alerts-and-scores/manager-cache-requests.test.mts b/test/repo/unit/ui/purl-alerts-and-scores/manager-cache-requests.test.mts
--- a/test/repo/unit/ui/purl-alerts-and-scores/manager-cache-requests.test.mts
+++ b/test/repo/unit/ui/purl-alerts-and-scores/manager-cache-requests.test.mts
@@ -4,11 +4,15 @@
 import type { logger as realLogger } from '../../../../../src/infra/log.mts'
 import type { SimPURL } from '../../../../../src/ui/externals/parse-externals.mts'
 import { PURLDataCache } from '../../../../../src/ui/purl-alerts-and-scores/manager.mts'
+import { setStubWorkspaceState } from '../../../../stubs/vscode.mts'
 
-const { getAPIKey, streamPackageScores } = vi.hoisted(() => ({
-  getAPIKey: vi.fn(),
-  streamPackageScores: vi.fn(),
-}))
+const { getAPIKey, getAuthenticatedContext, streamPackageScores } = vi.hoisted(
+  () => ({
+    getAPIKey: vi.fn(),
+    getAuthenticatedContext: vi.fn(),
+    streamPackageScores: vi.fn(),
+  }),
+)
 
 vi.mock(import('node:fs'), async importOriginal => ({
   ...(await importOriginal()),
@@ -20,7 +24,10 @@
   writeFileSync: vi.fn(),
 }))
 vi.mock(import('../../../../../src/api.mts'), () => ({ streamPackageScores }))
-vi.mock(import('../../../../../src/auth.mts'), () => ({ getAPIKey }))
+vi.mock(import('../../../../../src/auth.mts'), () => ({
+  getAPIKey,
+  getAuthenticatedContext,
+}))
 vi.mock(import('../../../../../src/infra/log.mts'), () => ({
   logger: {
     debug: vi.fn(),
@@ -60,6 +67,8 @@
     vi.useFakeTimers()
     vi.setSystemTime(new Date('2026-01-01T00:00:00Z'))
     getAPIKey.mockReset().mockResolvedValue('test-placeholder-token')
+    getAuthenticatedContext.mockReset().mockResolvedValue(undefined)
+    setStubWorkspaceState({})
     streamPackageScores.mockReset().mockImplementation(async function* (
       ...request: [string, SimPURL[]]
     ) {
@@ -141,6 +150,37 @@
     expect(entry.pkgData).toEqual(packageScore(purl))
   })
 
+  test('sends the selected organization slug with the package request', async () => {
+    setStubWorkspaceState({
+      configuration: { 'socket-security.orgSlug': 'example-org' },
+    })
+    getAuthenticatedContext.mockResolvedValue({
+      accessToken: 'test-placeholder-token',
+      organization: {
+        id: 'example-org',
+        image: undefined,
+        name: 'Example Organization',
+        plan: 'team',
+        slug: 'example-org',
+      },
+    })
+    const purl = 'pkg:npm/[email protected]'
+    const entry = cache.watch(purl)
+    await flushRequests()
+
+    expect(getAPIKey).not.toHaveBeenCalled()
+    expect(streamPackageScores).toHaveBeenCalledWith(
+      'test-placeholder-token',
+      [purl],
+      {
+        orgSlug: 'example-org',
+        signal: expect.any(AbortSignal),
+        timeout: cache.timeout,
+      },
+    )
+    expect(entry.pkgData).toEqual(packageScore(purl))
+  })
+
   test('uses anonymous lookup without a token and clears the timer', async () => {
     getAPIKey.mockResolvedValueOnce(undefined)
     const purl = 'pkg:npm/[email protected]'