threads_get_view

What threads_get_view does on Slack

AI agents call threads_get_view to retrieve information from Slack without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why threads_get_view is rated Low

This tool retrieves thread view data from Slack without modifying or deleting anything. It falls squarely into the Read category. Severity is medium rather than low because: (1) it accesses an undocumented endpoint, suggesting potential bypass of normal access controls or rate limits; (2) thread data may contain sensitive conversations; (3) bulk access to threads across a workspace could enable information gathering…

From the tool's definition Tool name 'threads_get_view' and description 'Get thread view data' indicate retrieval of Slack thread information. The phrase 'undocumented session endpoint' suggests access to internal/session-specific data rather than standard API endpoints.

The rule that runs threads_get_view safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Slack, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For threads_get_view, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "threads_get_view": {}
  }
}

Questions about threads_get_view