files_upload_v2

What files_upload_v2 does on Slack

AI agents use files_upload_v2 to create or update resources in Slack, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Slack environment.

Why files_upload_v2 is rated Medium

The tool name 'files_upload_v2' clearly indicates it uploads files to Slack, which is a write operation that creates or modifies data. This is reversible (files can be deleted), so it does not qualify as Destructive. The severity is high because uploading files to Slack channels could distribute malicious content, overwrite important information, or compromise workspace integrity if an AI agent is compromised.

From the tool's definition Tool name 'files_upload_v2' indicates file upload functionality. The server description states it 'Provides LLMs full access to Slack: messages, channels, files, canvases, lists' and mentions 220 tools for comprehensive Slack access.

The rule that runs files_upload_v2 safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Slack, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For files_upload_v2, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "files_upload_v2": {
      "limits": [
        {
          "counter": "files_upload_v2_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about files_upload_v2