// SCAN REPORT

Slack MCP Server

20 tools. 12 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 4 Jul 2026

12 can modify or destroy data

8 read-only

20 tools total

Community server · catalogue entry verified 04/07/2026

How to control Slack MCP Server ↓

TOOL MAP

What Slack MCP Server exposes to your agents

Read (8) Write / Execute (11) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Slack MCP Server tools

Destructive · High archive_old_channels Archiving Slack channels is effectively irreversible in practice (requires manual unarchiving by an admin) and affects all members of those channels, removing their ability to post or interact. Write · Medium bulk_invite_users Bulk inviting users to channels creates or modifies access permissions and channel membership, which is a Write action. Write · Low add_slack_reaction This tool creates or modifies message state reversibly by adding an emoji reaction. Write · Medium create_slack_poll Creating a poll is a reversible Write action - it creates new content in the Slack workspace but does not execute arbitrary code, delete data, or move funds.

12 of Slack MCP Server's 20 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Slack MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Slack MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "archive_old_channels": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_slack_reaction": {
    "limits": [
      {
        "counter": "add_slack_reaction_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_channel_analytics": {
    "limits": [
      {
        "counter": "get_channel_analytics_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Slack MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SLACK →

Instant setup, no code required.

FULL CATALOGUE

All 20 Slack MCP Server tools

DESTRUCTIVE 1 tools

Destructive archive_old_channels Arquivar canais inativos automaticamente

WRITE 11 tools

Write add_slack_reaction Adicionar reação emoji a uma mensagem Write bulk_invite_users Convidar múltiplos usuários para canal Write create_slack_poll Criar enquete interativa no Slack Write create_slack_reminder Criar lembrete no Slack Write mention_users Enviar mensagem mencionando usuários específicos Write reply_in_thread Responder em thread específico Write schedule_slack_message Agendar mensagem para envio futuro Write send_slack_message Enviar uma mensagem para um canal do Slack Write send_webhook_message Enviar mensagem via webhook (para integrações) Write set_user_status Definir status do usuário (presença) Write upload_file_to_slack Fazer upload de arquivo para canal Slack

READ 8 tools

Read get_channel_analytics Obter analytics de um canal (atividade, engajamento) Read get_private_channels_with_user Listar grupos privados que o usuário participa Read get_slack_channel_history Obter histórico de mensagens de um canal Read get_workspace_info Obter informações do workspace Slack Read list_slack_channels Listar canais do Slack Read list_slack_users Listar usuários do workspace Slack Read search_in_private_groups Buscar mensagens especificamente em grupos privados Read search_slack_messages Buscar mensagens no workspace

FAQ

Questions about Slack MCP Server

Can an AI agent delete data through the Slack MCP Server MCP server? +

Yes. The Slack MCP Server server exposes 1 destructive tools including archive_old_channels. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Slack MCP Server? +

The Slack MCP Server server has 11 write tools including add_slack_reaction, bulk_invite_users, create_slack_poll. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Slack MCP Server.

How many tools does the Slack MCP Server MCP server expose? +

20 tools across 2 categories: Read, Write. 8 are read-only. 12 can modify, create, or delete data.

How do I enforce a policy on Slack MCP Server? +

Register the Slack MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Slack MCP Server tool call.

Deterministic rules across all 20 Slack MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SLACK →

Instant setup, no code required.

20 Slack MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.