// SCAN REPORT

Slack

204 tools. 139 can modify or destroy data without limits.

29 destructive tools with no built-in limits. Policy required.

Last updated:

139 can modify or destroy data
65 read-only
204 tools total

Community server · catalogue entry verified 29/06/2026

How to control Slack ↓

TOOL MAP

What Slack exposes to your agents

Read (65) Write / Execute (109) Destructive / Financial (29)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Slack tools

Destructive · Critical apps_manifest_delete This tool irreversibly removes an entire app, which cannot be undone. Destructive · High apps_uninstall Uninstalling an app from a workspace removes all its permissions, bot tokens, and integrations. Destructive · High auth_revoke Token revocation cannot be undone; the revoked token becomes permanently invalid. Destructive · High bookmarks_remove Removing a bookmark deletes metadata irreversibly.

139 of Slack's 204 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Slack

PolicyLayer is an MCP gateway — it sits between your AI agents and Slack, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "apps_manifest_delete": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "apps_manifest_create": {
    "limits": [
      {
        "counter": "apps_manifest_create_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "ai_apps_list": {
    "limits": [
      {
        "counter": "ai_apps_list_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Slack — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON SLACK →

Instant setup, no code required.

FULL CATALOGUE

All 204 Slack tools

DESTRUCTIVE 29 tools
Destructive apps_manifest_delete Permanently deletes an app created through app manifests. Destructive apps_uninstall Uninstall your app from a workspace. Destructive auth_revoke Revoke a token. Destructive bookmarks_remove Remove a bookmark from a channel. Destructive cache_clear Clear the Slack MCP cache so subsequent calls fetch fresh data from the API. Destructive calls_participants_remove Register participants removed from a call. Destructive canvases_access_delete canvases_access_delete Destructive canvases_delete Delete a canvas. Destructive channels_delete Delete a channel (legacy undocumented). Destructive chat_delete chat_delete Destructive chat_delete_scheduled_message chat_delete_scheduled_message Destructive conversations_kick Remove a user from a conversation. Destructive drafts_delete drafts_delete Destructive emoji_remove Remove a custom emoji (undocumented session endpoint). Destructive files_comments_delete Delete an existing comment on a file. Destructive files_delete Delete a file. Destructive files_remote_remove Remove a remote file. Destructive files_revoke_public_url Revoke public/external sharing access for a file. Destructive pins_remove Unpin an item from a channel. Destructive reactions_remove reactions_remove Destructive reminders_delete Delete a reminder. Destructive saved_delete saved_delete Destructive slack_lists_access_delete Remove access to a list for specified entities. Destructive slack_lists_items_delete Delete a list item. Destructive slack_lists_items_delete_multiple Delete multiple list items. Destructive stars_remove stars_remove Destructive team_external_teams_disconnect Disconnect an external organization. Destructive users_admin_set_inactive Deactivate a user (legacy undocumented). Destructive users_delete_photo Delete the user profile photo.
EXECUTE 16 tools
Execute apps_connections_open Generate a temporary Socket Mode WebSocket URL. Execute calls_end End a call. Execute chat_command Execute a slash command (legacy undocumented). Execute chat_start_stream chat_start_stream Execute chat_stop_stream Stop an AI assistant streaming message. Execute client_boot Boot the Slack client (undocumented session endpoint). Execute client_user_boot Boot the Slack client for a specific user (undocumented session endpoint). Execute dialog_open Open a dialog with a user. Execute functions_complete_success Signal the successful completion of a function. Execute oauth_v2_access oauth_v2_access Execute rtm_connect Start a Real Time Messaging session. Execute rtm_start rtm_start Execute slack_lists_download_start Start a list download. Execute views_open Open a view for a user. Execute workflows_step_completed Indicate a workflow step has been completed successfully. Execute workflows_step_failed Indicate a workflow step has failed.
WRITE 93 tools
Write apps_manifest_create Create an app from an app manifest. Write apps_manifest_update Update an app from an app manifest. Write assistant_threads_set_status assistant_threads_set_status Write assistant_threads_set_suggested_prompts assistant_threads_set_suggested_prompts Write assistant_threads_set_title Set the title for an AI assistant thread. Write bookmarks_add bookmarks_add Write bookmarks_edit bookmarks_edit Write calls_add calls_add Write calls_participants_add Register new participants added to a call. Write calls_update calls_update Write canvases_access_set canvases_access_set Write canvases_create Create a canvas. Write canvases_edit Edit a canvas. Write chat_append_stream chat_append_stream Write chat_me_message Send a /me message to a channel. Write chat_post_ephemeral chat_post_ephemeral Write chat_post_message chat_post_message Write chat_schedule_message chat_schedule_message Write chat_unfurl chat_unfurl Write chat_update chat_update Write conversations_accept_shared_invite conversations_accept_shared_invite Write conversations_approve_shared_invite Approve an invitation to a Slack Connect channel. Write conversations_archive Archive a conversation. Write conversations_canvases_create Create a canvas in a channel. Write conversations_close Close a direct message or multi-party direct message. Write conversations_create Create a new channel. Write conversations_decline_shared_invite Decline an invitation to a Slack Connect channel. Write conversations_external_invite_permissions_set conversations_external_invite_permissions_set Write conversations_invite conversations_invite Write conversations_invite_shared conversations_invite_shared Write conversations_join Join an existing conversation. Write conversations_leave Leave a conversation. Write conversations_mark Set the read cursor in a channel. Write conversations_open conversations_open Write conversations_rename Rename a conversation. Write conversations_request_shared_invite_approve conversations_request_shared_invite_approve Write conversations_request_shared_invite_deny Deny a shared channel invite request. Write conversations_set_purpose Set the purpose for a conversation. Write conversations_set_topic Set the topic for a conversation. Write conversations_unarchive Reverse a conversation archive. Write dnd_end_dnd End the current user's Do Not Disturb session. Write dnd_end_snooze End the current user's snooze mode. Write dnd_set_snooze Turn on Do Not Disturb mode for the current user. Write drafts_create drafts_create Write drafts_update drafts_update Write emoji_add Add a custom emoji from a URL (undocumented session endpoint). Write entity_present_details entity_present_details Write files_complete_upload_external files_complete_upload_external Write files_edit Edit a file (legacy undocumented). Write files_get_upload_url_external files_get_upload_url_external Write files_remote_add files_remote_add Write files_remote_share files_remote_share Write files_remote_update files_remote_update Write files_share_legacy Share a file to a channel (legacy undocumented). Write files_shared_public_url Enable a file for public/external sharing. Write files_upload files_upload Write files_upload_v2 files_upload_v2 Write functions_complete_error Signal that a function failed to complete. Write oauth_access oauth_access Write oauth_v2_exchange Exchange a legacy access token for a new expiring access token. Write oauth_v2_user_access oauth_v2_user_access Write openid_connect_token openid_connect_token Write pins_add Pin an item to a channel. Write reactions_add Add a reaction to an item. Write reminders_add reminders_add Write reminders_complete Mark a reminder as complete. Write resolve_names resolve_names Write saved_add saved_add Write slack_lists_access_set slack_lists_access_set Write slack_lists_create Create a new list. Write slack_lists_items_create Create a new list item. Write slack_lists_items_update Update cells in a list item. Write slack_lists_update Update a list. Write stars_add stars_add Write subscriptions_thread_mark subscriptions_thread_mark Write tooling_tokens_rotate Rotate app configuration tokens. Write usergroups_create usergroups_create Write usergroups_disable usergroups_disable Write usergroups_enable usergroups_enable Write usergroups_update usergroups_update Write usergroups_users_update usergroups_users_update Write users_admin_invite Invite a user to the workspace as admin (legacy undocumented). Write users_prefs_set Set a user preference (legacy undocumented). Write users_profile_set users_profile_set Write users_set_photo users_set_photo Write users_set_presence Manually set user presence. Write views_publish views_publish Write views_push Push a view onto the stack of a root view. Write views_update views_update Write workflows_featured_add Add featured workflows to a channel. Write workflows_featured_remove Remove featured workflows from a channel. Write workflows_featured_set workflows_featured_set Write workflows_update_step workflows_update_step
READ 65 tools
Read ai_apps_list List AI apps in the workspace (undocumented session endpoint). Read api_features Get workspace feature flags (undocumented session endpoint). Read api_test Check API calling code. Helps test your calling code. Read apps_activities_list apps_activities_list Read apps_event_authorizations_list apps_event_authorizations_list Read apps_manifest_export Export an app manifest from an existing app. Read apps_manifest_validate Validate an app manifest. Read assistant_search_context assistant_search_context Read assistant_search_info Get search capabilities for the team. Read auth_teams_list auth_teams_list Read auth_test Check authentication and get identity. Read blocks_validate Validate an array of Block Kit blocks. Read bookmarks_list List bookmarks for a channel. Read bots_info Get info for a bot user. Read bots_list List all bots in a workspace (legacy undocumented). Read calls_info Get information about a call. Read canvases_sections_lookup Find sections matching criteria in a canvas. Read chat_get_permalink Retrieve a permalink URL for a specific message. Read chat_scheduled_messages_list chat_scheduled_messages_list Read client_counts Get unread counts and thread info (undocumented session endpoint). Read commands_list List available slash commands (legacy undocumented). Read conversations_info Retrieve information about a conversation. Read conversations_list_connect_invites List shared channel invites. Read conversations_list_prefs Get per-channel notification and mute prefs (undocumented). Read conversations_members Retrieve members of a conversation. Read conversations_request_shared_invite_list conversations_request_shared_invite_list Read dnd_info Retrieve a user's current Do Not Disturb status. Read dnd_team_info Retrieve the Do Not Disturb status for users on a team. Read drafts_list List all unsent message drafts (undocumented session endpoint). Read emoji_admin_list List custom emoji with metadata (undocumented session endpoint). Read emoji_list List custom emoji for a team. Read experiments_get_by_user Get A/B experiment assignments for current user (undocumented). Read files_remote_info Get information about a remote file. Read files_remote_list files_remote_list Read openid_connect_user_info Get the identity of a user who authorized Sign in with Slack. Read reminders_info Get info for a reminder. Read reminders_list List all reminders created by or for a given user. Read search_modules_channels Search channels by name or topic (undocumented session endpoint). Read search_modules_dms search_modules_dms Read search_modules_files Search files (undocumented session endpoint). Read search_modules_people search_modules_people Read session_test Check if session tokens (xoxc/xoxd) are valid. Read slack_lists_download_get Get a list download. Read slack_lists_items_info Get info about a list item. Read slack_lists_items_list slack_lists_items_list Read team_access_logs team_access_logs Read team_billable_info team_billable_info Read team_billing_info Read a workspace's billing plan information. Read team_external_teams_list team_external_teams_list Read team_info Get information about the current team. Read team_integration_logs team_integration_logs Read team_preferences_list Retrieve a list of a workspace's team preferences. Read team_prefs_get Get team preferences (legacy undocumented). Read team_profile_get Retrieve a team's profile. Read threads_get_view Get thread view data (undocumented session endpoint). Read usergroups_list usergroups_list Read usergroups_users_list usergroups_users_list Read users_channel_sections_list Get sidebar sections and favorites (undocumented session endpoint). Read users_conversations users_conversations Read users_discoverable_contacts_lookup Look up a user by their email address for Slack Connect discovery. Read users_get_presence Get user presence information. Read users_identity Get a user's identity. Read users_prefs_get Get user preferences (legacy undocumented). Read users_priority_list Get contacts ranked by interaction frequency (undocumented session endpoint). Read workflows_featured_list List featured workflows.
OTHER 1 tools
Other migration_exchange migration_exchange
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
adminautomation
Nodebench 824 tools
adminautomation
UnClick 813 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Fortimanager 584 tools
adminautomation
Crow 573 tools
adminautomation
Mcp 571 tools
adminautomation
GoHighLevel MCP Server 566 tools
adminautomation
FAQ

Questions about Slack

Can an AI agent delete data through the Slack MCP server? +

Yes. The Slack server exposes 29 destructive tools including apps_manifest_delete, apps_uninstall, auth_revoke. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Slack? +

The Slack server has 93 write tools including apps_manifest_create, apps_manifest_update, assistant_threads_set_status. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Slack.

How many tools does the Slack MCP server expose? +

204 tools across 4 categories: Destructive, Execute, Read, Write. 65 are read-only. 139 can modify, create, or delete data.

How do I enforce a policy on Slack? +

Register the Slack MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Slack tool call.

Deterministic rules across all 204 Slack tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SLACK →

Instant setup, no code required.

204 Slack tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.