drafts_create

What drafts_create does on Slack

AI agents use drafts_create to create or update resources in Slack, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Slack environment.

Why drafts_create is rated Medium

Creating drafts is a reversible write operation that modifies state (adds new draft objects) without deleting or overwriting existing data. While the description is empty, the tool name and server context make the intent clear. Severity is medium because drafts are typically not immediately visible to others and can be easily deleted, limiting blast radius compared to publishing actual messages.

From the tool's definition Tool name 'drafts_create' indicates creation of draft messages. Server description states it 'Provides LLMs full access to Slack: messages, channels, files, canvases, lists, search, reactions, and more via 220 tools.' The 'create' verb and context of…

The rule that runs drafts_create safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Slack, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For drafts_create, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "drafts_create": {
      "limits": [
        {
          "counter": "drafts_create_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about drafts_create