Slack MCP integration for AI agents.
Let AI agents search authorized Slack conversations, read channels and threads, and post messages through explicit workspace actions.
- ACTION CONTRACTS
- 23
- AUTHENTICATION
- OAuth 2.0
- SOURCE STATUS
- Provider-backed
CATALOG SOURCE REVIEWED AUGUST 23, 2026 / ACTION NAMES AND SCHEMAS DERIVED FROM WORKING MACHINES PROVIDER SOURCE
CAPABILITY PROFILE
What the Slack integration exposes
The Slack Agent App separates conversation discovery from message publication. An agent can search or read authorized workspace content, summarize only what the task requires, and then propose a message before posting it to a named channel or thread.
Slack results can contain personal, customer, or confidential information. Connection scopes and channel access still apply, and returned messages can enter the calling model context. For that reason, broad searches should be avoided when a channel, date range, sender, or thread can narrow the request.
VERIFIED ACTION SAMPLE
Real Slack capabilities.
Showing 12 of 23 actions. Risk labels are conservative signals based on operation names, not substitutes for provider documentation or runtime policy.
get_channel_messagesREADGet recent messages from a Slack conversation.
INPUTS: channelId / limit
add_reactionWRITEAdd an emoji reaction to a Slack message.
INPUTS: channelId / messageTs / name
delete_fileHIGH IMPACTDelete a Slack file.
INPUTS: fileId
open_conversationREVIEWOpen or resume a direct message with one Slack user.
INPUTS: userIds / preventCreation
delete_messageHIGH IMPACTDelete a Slack message posted by the bot.
INPUTS: channelId / messageTs
get_conversationREADGet metadata for a Slack conversation.
INPUTS: channelId / includeLocale / includeNumMembers
get_fileREADGet metadata for a Slack file.
INPUTS: fileId
get_message_permalinkREADGet a permalink for a Slack message.
INPUTS: channelId / messageTs
get_reactionsREADGet reactions for a Slack message.
INPUTS: channelId / messageTs / full
get_threadREADGet messages in a Slack thread.
INPUTS: channelId / threadTs
get_userREADGet metadata for a Slack user.
INPUTS: userId / includeLocale
list_channelsREADList Slack public channels visible to the bot.
INPUTS: limit
INPUT CONTRACTS
Know what the action needs before it runs.
get_channel_messages
channelIdREQUIRED- The Slack conversation or channel ID.
limitOPTIONAL- The maximum number of messages to return.
add_reaction
channelIdREQUIRED- The Slack conversation or channel ID.
messageTsREQUIRED- The Slack message timestamp, for example '1711.0001'.
nameREQUIRED- The emoji reaction name without surrounding colons.
delete_file
fileIdREQUIRED- The Slack file ID.
open_conversation
userIdsREQUIRED- The single Slack user to include in the DM.
preventCreationOPTIONAL- Whether Slack should avoid creating a new conversation.
PROVIDER-SPECIFIC WORKFLOWS
Jobs this Agent App can support
Incident communication
Read the engineering incident thread, combine it with verified technical status, and draft a concise update for approval.
Decision extraction
Retrieve a bounded project thread and turn confirmed decisions into tasks in Linear or another project system.
Team digest
Search a defined channel and time range, then prepare a summary without exposing unrelated conversations.
SAFETY BOUNDARY
Operate Slack with explicit limits
- Restrict the Slack app to the smallest required scopes and channels.
- Do not treat a search result as permission to disclose it elsewhere.
- Preview externally visible messages before posting.
- Return a permalink so the user can verify the published message.
CONNECTION MODEL
OAuth 2.0
Slack uses OAuth 2.0. Connection requirements and availability are determined by the provider and the Working Machines deployment.
Working Machines stores provider credentials behind the execution boundary. An agent can use an authorized connection identity, but catalog discovery alone does not reveal OAuth tokens, API keys, or provider secrets.
- READ SIGNALS
- 12
- WRITE SIGNALS
- 7
- HIGH IMPACT
- 3
- REVIEW SIGNALS
- 1
EVIDENCE AND AVAILABILITY
Provider reference
Action names, input fields, authentication types, and counts on this page are generated from the Working Machines provider catalog. Provider behavior, quotas, object semantics, account eligibility, and regional availability remain governed by Slack.