views_push

What views_push does on Slack

AI agents use views_push to create or update resources in Slack, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Slack environment.

Why views_push is rated Medium

This tool creates or modifies UI state in Slack by pushing a view onto a stack. While reversible (views can be popped or dismissed), it modifies application state and could be misused to create misleading UI, inject content, or disrupt user experience. It does not delete data (Destructive), execute arbitrary code (Execute), or move money (Financial), making Write the appropriate category.

From the tool's definition Tool name 'views_push' and description 'Push a view onto the stack of a root view' indicates modification of UI state by adding/stacking a view, which is a reversible write operation affecting Slack's interface layer.

Risk signalsAdmin/system-level operation

The rule that runs views_push safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Slack, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For views_push, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "views_push": {
      "limits": [
        {
          "counter": "views_push_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about views_push