usergroups_disable

What usergroups_disable does on Slack

AI agents use usergroups_disable to create or update resources in Slack, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Slack environment.

Why usergroups_disable is rated Medium

Disabling a usergroup is a Write operation because it modifies organizational data (usergroup status) reversibly—the group can be re-enabled. It is not Destructive because the underlying data structure persists. Severity is high because disabling a usergroup can disrupt team communication and workflow by removing access permissions and notification routing for potentially many users, though the impact is recoverable.

From the tool's definition Tool name 'usergroups_disable' indicates modification of usergroup state. The Slack API family 'usergroups' manages user groups (collections of users); 'disable' is a state-change operation that deactivates a usergroup but does not permanently delete it,…

The rule that runs usergroups_disable safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Slack, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For usergroups_disable, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "usergroups_disable": {
      "limits": [
        {
          "counter": "usergroups_disable_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about usergroups_disable