Slack logo

Slack MCP

Live

OAUTH 2.1

MESSAGING

Productivity

Every channel message, DM, thread, and canvas your team works in lives in Slack. Slack MCP gives your agent per-user OAuth access to send, read, search, and schedule messages scoped to the authorizing workspace member.

  • Acts as the user: Messages, reactions, and canvas edits stay attributed to the Slack user who authorized the agent.
  • Credentials stay vaulted: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: User permissions enforced. 90-day audit trail.
Slack logo
Slack MCP
agent · Acme Q3
Run
Post the launch update to #product-launches and schedule a reminder for Monday 9am.
S
slackmcp_send_message
94ms
Slack agent
Posted launch update to #product-launches (ts 1733012845.892). Reminder scheduled for Mon Dec 11, 09:00 PT in the same channel.
Sources: #product-launches
slackmcp
2
18:29
Message Claude...

Tools your agent reaches for on Slack MCP, scoped per user.

CALL ANY TOOL
Send and read messages, manage canvases, react, schedule, and search across channels and DMs. Same toolkit, every framework, no auth plumbing.
slackmcp_slack_add_reaction
Slack add reaction
Add an emoji reaction to a Slack message. Requires the channel ID, message timestamp, and emoji name.
Parameters
Name
Type
Required
Description
channel_id
string
Required
ID of the Slack channel. Get it from slack_search_channels.
emoji
string
Required
Reaction (emoji) name without colons
message_ts
string
Required
Timestamp of the message. Get it from slack_read_channel or slack_read_thread.
slackmcp_slack_create_canvas
Slack create canvas
slackmcp_slack_create_conversation
Slack create conversation
slackmcp_slack_get_reactions
Slack get reactions
slackmcp_slack_list_channel_members
Slack list channel members
slackmcp_slack_read_canvas
Slack read canvas
slackmcp_slack_read_channel
Slack read channel
slackmcp_slack_read_file
Slack read file
slackmcp_slack_read_thread
Slack read thread
slackmcp_slack_read_user_profile
Slack read user profile
slackmcp_slack_schedule_message
Slack schedule message
slackmcp_slack_search_channels
Slack search channels
slackmcp_slack_search_emojis
Slack search emojis
slackmcp_slack_search_public
Slack search public
slackmcp_slack_search_public_and_private
Slack search public and private
slackmcp_slack_search_users
Slack search users
slackmcp_slack_send_message
Slack send message
slackmcp_slack_send_message_draft
Slack send message draft
slackmcp_slack_update_canvas
Slack update canvas
Build your Agent
Drop the toolkit in, point it at the user, and your agent can send Slack messages, read threads, and manage canvases from the first run.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { DynamicStructuredTool } from "@langchain/core/tools";
import { createReactAgent } from "@langchain/langgraph/prebuilt";
import { z } from "zod";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["slackmcp"], toolNames: ["slackmcp_send_message", "slackmcp_read_channel", "slackmcp_read_thread"] },
pageSize: 100,
});

const lcTools = tools.map((t) => new DynamicStructuredTool({
name: t.tool.definition.name,
description: t.tool.definition.description,
schema: z.object({}).passthrough(),
func: async (args) => {
const { data } = await sk.tools.executeTool({
toolName: t.tool.definition.name,
identifier: "user_123",
params: args,
});
return JSON.stringify(data);
},
}));

const agent = createReactAgent({ llm, tools: lcTools });
import { ScalekitClient } from "@scalekit-sdk/node";
import OpenAI from "openai";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["slackmcp"], toolNames: ["slackmcp_send_message", "slackmcp_read_channel", "slackmcp_read_thread"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
type: "function",
function: {
name: t.tool.definition.name,
description: t.tool.definition.description,
parameters: t.tool.definition.input_schema,
},
}));

const resp = await openai.responses.create({
model: "gpt-4o", input: prompt, tools: llmTools,
});
import { ScalekitClient } from "@scalekit-sdk/node";
import Anthropic from "@anthropic-ai/sdk";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["slackmcp"], toolNames: ["slackmcp_send_message", "slackmcp_read_channel", "slackmcp_read_thread"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
name: t.tool.definition.name,
description: t.tool.definition.description,
input_schema: t.tool.definition.input_schema,
}));

const msg = await anthropic.messages.create({
model: "claude-sonnet-4-6", max_tokens: 1024,
tools: llmTools,
messages: [{ role: "user", content: prompt }],
});
import { Agent } from "@google/adk/agents";
import {
MCPToolset, StreamableHTTPConnectionParams,
} from "@google/adk/tools/mcp";

const toolset = new MCPToolset({
connectionParams: new StreamableHTTPConnectionParams({
url: "https://mcp.scalekit.com/slackmcp",
headers: { Authorization: `Bearer ${userScopedToken}` },
}),
});

const agent = new Agent({
name: "agent", model: "gemini-2.0-flash",
tools: await toolset.getTools(),
});
Try these prompts
Paste any prompt into your agent to start working with Slack from your workflows.
Send & schedule
Copy the prompt
Copied
Post a status update to #[channel] summarizing today's progress.
Copy the prompt
Copied
Schedule a reminder for [channel] tomorrow at 9am.
Copy the prompt
Copied
Send a DM to [user] with the latest dashboard link.
Read & search
Copy the prompt
Copied
Summarize today's discussion in #[channel].
Copy the prompt
Copied
Find every mention of [keyword] across the workspace.
Copy the prompt
Copied
Pull all replies from the thread on [permalink].
SEE HOW AUTH WORKS
Users authorize Slack once. Their credentials stay vaulted, every call is checked, and every action is logged.
1
Authorize
Your user connects
Slack MCP
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
Slack MCP
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
Slack MCP
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
Slack MCP
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
Same per-user auth pattern across other messaging and collaboration connectors.
GTM and RevOps Teams
Competitive intelligence briefing agent
Scans Gong calls for competitor mentions, matches each one to its Notion battlecard, and DMs every affected rep a single Slack digest per cycle. Every call runs as the PMM who owns the briefing, never a shared bot.
GTM and RevOps Teams
Revenue forecast commentary
Pulls open pipeline from Salesforce and HubSpot, calculates coverage against quota, flags at-risk stages, posts commentary to Slack, and logs every snapshot to Google Sheets.
GTM and RevOps Teams
Deal room sync
Pulls opportunity context from Salesforce, captures key decisions from Slack, and syncs a running summary to the deal room doc in Google Drive, but only when the deal actually changed.
People Ops and HR teams
Performance review collector
Collects review feedback from Airtable and Google Forms scoped to each manager's direct reports, writes per-employee summaries to Notion, and DMs the manager a Slack digest.
Test other agents
Same per-user auth pattern across other messaging and collaboration connectors.
GTM
Deal room sync agent
Pull opportunity context from Salesforce, capture decisions from Slack, and keep the Google Drive deal room doc current.
GTM
Revenue forecast agent
Score pipeline coverage against quota across Salesforce and HubSpot, post forecast commentary to Slack, log snapshots to Sheets.
PEOPLE OPS
Performance review collector agent
Collect review feedback from Airtable and Google Forms per manager, summarise each report in Notion, and DM the digest in Slack.
GTM
Competitive intelligence briefing agent
Scan Gong calls for competitor mentions, match each one to its Notion battlecard, and DM every affected rep a single Slack digest.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
01.
Shared tokens break per-user analytics
A shared token looks fine in a demo. In production every call looks like a service account. Scalekit resolves the real user credential so attribution, audit, and scope stay accurate.
// shared token
 audit → bot_service_account
 user_filter → broken

 // scalekit
 audit → user_abc
 scope → enforced ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
Slack MCP today. Others tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
How does this differ from the existing Slack connector?
Slack MCP exposes the same Slack tools over the Model Context Protocol endpoint at mcp.scalekit.com/slackmcp. Use it when you want a single MCP URL across your agent stack instead of native SDK calls.
Does the agent post as the user or a bot?
As the user. Messages are attributed to the Slack member who authorized the agent. No shared bot identity.
Where is the Slack OAuth token stored?
In Scalekit's AES-256 vault, namespaced per tenant. Refresh is automatic. Tokens never appear in prompts or LLM context.
Can I prevent the agent from posting messages?
Yes. Use listScopedTools to allow read-only tools (read_channel, read_thread, search_public) without granting send_message or schedule_message.
What happens when a user revokes Slack access?
The connection is invalidated on the next tool call. Subsequent requests fail closed. Other workspace members remain unaffected.
What other MCP connectors does Scalekit support?
Scalekit runs the Gmail MCP server, Outlook MCP server, and Microsoft Teams MCP server on the same per-user auth, token vault, and audit trail. Browse 500+ connectors in the MCP connector directory.
How do I build a Slack agent?
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""slackmcp"": {
""url"": ""https://mcp.scalekit.com/slackmcp"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.slackmcp]
url = ""https://mcp.scalekit.com/slackmcp""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""slackmcp"": {
""url"": ""https://mcp.scalekit.com/slackmcp"",
""type"": ""http""
}
}
}