High-risk tools in Slack

High severity Slack MCP Server 16 of 204 tools

16 of the 204 tools in Slack are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

apps_connections_open Execute

Generate a temporary Socket Mode WebSocket URL.
calls_end Execute

End a call.
chat_command Execute

Execute a slash command (legacy undocumented).
chat_start_stream Execute

chat_start_stream
chat_stop_stream Execute

Stop an AI assistant streaming message.
client_boot Execute

Boot the Slack client (undocumented session endpoint).
client_user_boot Execute

Boot the Slack client for a specific user (undocumented session endpoint).
dialog_open Execute

Open a dialog with a user.
functions_complete_success Execute

Signal the successful completion of a function.
oauth_v2_access Execute

oauth_v2_access
rtm_connect Execute

Start a Real Time Messaging session.
rtm_start Execute

rtm_start
slack_lists_download_start Execute

Start a list download.
views_open Execute

Open a view for a user.
workflows_step_completed Execute

Indicate a workflow step has been completed successfully.
workflows_step_failed Execute

Indicate a workflow step has failed.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Slack

Tools at high risk

Attacks that target this class

More on Slack

Enforce policy on every Slack tool call.