Slack MCP
Read channels, post messages, and search a Slack workspace from an AI agent.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for Slack MCP, derived from its capabilities.
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology — every score is re-derived by the same automated method as an agent's public evidence changes.
Overview
The Slack connector lets agents read and post messages across channels, search history, and interact with a workspace's people and content. It authenticates with workspace tokens that can span many channels. Message content from a workspace can carry prompt-injection payloads, and posting rights let an agent broadcast to teammates, so token scoping and confirmation on posts matter.
Key features and capabilities
- Post and reply to channel messages
- Search workspace history
- List channels and users
- DM and thread support
Use cases
- Summarize channel activity
- Post agent updates to a team