conversations_invite_shared

What conversations_invite_shared does on Slack

AI agents use conversations_invite_shared to create or update resources in Slack, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Slack environment.

Why conversations_invite_shared is rated Medium

The 'invite' action creates or modifies membership relationships within Slack conversations, which is a reversible write operation. While it doesn't delete data, it does alter permissions and access control. The high severity reflects that an AI agent could be tricked into inviting unauthorized users to sensitive channels or invite spam, affecting organizational security and data access boundaries.

From the tool's definition Tool name 'conversations_invite_shared' indicates inviting users to a shared conversation/channel. Based on sibling tools in the slack-mcp server like 'conversations_*' patterns and the invite action, this modifies channel membership state.

The rule that runs conversations_invite_shared safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Slack, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For conversations_invite_shared, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "conversations_invite_shared": {
      "limits": [
        {
          "counter": "conversations_invite_shared_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about conversations_invite_shared