[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_138":139},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_57":49,"_58":59,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":49,"_84":-5,"_85":86,"_87":88,"_89":90,"_91":92,"_93":94,"_95":96,"_97":98},"apiUrl","https://odel.app/api","creator","jtalk22","moduleId","slack-mcp-server","@jtalk22/slack-mcp-server","displayName","Slack MCP Server","tagline","Catch up on Slack without reading it. Unreads, threads, search. Browser-session or hosted OAuth.","iconKey","https://raw.githubusercontent.com/jtalk22/slack-mcp-server/main/docs/assets/icon-512.png","category","remote","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://mcp.revasserlabs.com/oauth/mcp\",\"transport\":\"streamable-http\",\"authType\":\"none\"}","pricingModel","free","creatorUserId","system:external-import","createdAt",1781363450000,"updatedAt",1788330079000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=io.github.jtalk22%2Fslack-mcp-server","sourceVerified",true,"sourceMissingSince","importedAt","upstreamStars",29,"upstreamUpdatedAt",1787914088000,"detectedTransport","streamable-http","detectedAuthType","oauth","probeStatus","ok","lastProbedAt",1787288240000,"githubRepoUrl","https://github.com/jtalk22/slack-mcp-server","githubRepoFullName","jtalk22/slack-mcp-server","releaseId","ext-jtalk22-slack-mcp-server","version","5.0.0","descriptionMarkdown","

\n\n[![npm version](https://img.shields.io/npm/v/@jtalk22/slack-mcp?style=flat-square&logo=npm&logoColor=white&label=npm&labelColor=0b0b0c&color=e5482f)](https://www.npmjs.com/package/@jtalk22/slack-mcp) [![npm weekly downloads](https://img.shields.io/npm/dw/%40jtalk22%2Fslack-mcp?style=flat-square&label=weekly%20downloads&labelColor=0b0b0c&color=ffb224)](https://www.npmjs.com/package/@jtalk22/slack-mcp) [![CI](https://img.shields.io/github/actions/workflow/status/jtalk22/slack-mcp-server/ci.yml?style=flat-square&logo=githubactions&logoColor=white&label=CI&labelColor=0b0b0c&color=28c840)](https://github.com/jtalk22/slack-mcp-server/actions/workflows/ci.yml) [![npm provenance signed](https://img.shields.io/badge/provenance-signed-e5482f?style=flat-square&labelColor=0b0b0c)](#provenance-dont-take-my-word-for-it) [![MCP Registry](https://img.shields.io/badge/MCP_Registry-listed-ffb224?style=flat-square&labelColor=0b0b0c)](https://registry.modelcontextprotocol.io/v0/servers/io.github.jtalk22%2Fslack-mcp-server/versions/latest)\n\n $\"Slack$ \n\n

Slack MCP Server

\n\n

Catch up on Slack without reading it.

\n\n

Unreads, threads, and search — in your agent’s context, from the session you already have.

\n\n```bash\nnpx -y @jtalk22/slack-mcp --setup\n```\n\n

\n\n

Claude Code Claude Desktop Cursor Copilot Windsurf Gemini CLI Codex CLI any stdio MCP client

\n\n\n $\"47$ \n\n\n

▶ It’s Monday, 9:07—watch what blew up overnight · interactive walkthrough · setup guide

\n\n

\n How it works ·\n Why session auth ·\n Grid & credentials ·\n Install ·\n 19 tools ·\n Workflows ·\n Local vs hosted\n

\n\n---\n\n## It’s Monday, 9:07. Slack has already formed opinions.\n\nYou ask “what blew up overnight?” and the agent reads the workspace instead of you. It reconstructs the 2 AM P1 from `#incidents`—owner, resolution, and the runbook step that is still wrong. It finds the printer PIN that has been waiting in `#facilities` for five months. Then it closes the handled loops—replies, reactions, read-state changes—only where you approve.\n\nThis is not screenshot automation. The agent calls Slack through a real MCP tool surface and receives typed results it can search, summarize, export, or act on.\n\n---\n\n## Built past the demo\n\nThe difficult part is not another chat tool. It is the operating layer underneath: browser-session extraction that names its failure stages, a credential lifecycle built for rotation, full-fidelity reads, guarded writes, and typed workflow output. The code is plain JavaScript in this repository—audit it before trusting it with a session.\n\n

The engineering underneath — extraction, credential lifecycle, reads, guarded writes, typed output

\n
\n\n### 1. The browser-session engine\n\n`--setup` turns the Slack identity Chrome already holds into a local MCP server:\n\n- finds the newest `xoxc-` token in Chrome's on-disk LevelDB;\n- snapshots the cookie SQLite database with its WAL sidecars;\n- retrieves Chrome Safe Storage from the macOS Keychain;\n- runs Chrome-compatible PBKDF2 + AES-128-CBC decryption locally;\n- requires no DevTools, clipboard step, browser flag, or live Slack tab;\n- names the failed extraction stage—`keychain_timeout`, `no_slack_cookie_row`, `cookie_decrypt_failed`, and more—instead of returning one opaque error.\n\n### 2. Credential lifecycle, not credential paste\n\nSession credentials rotate. The server is built around that reality:\n\n- `auto`, `keychain-only`, and `file` storage backends;\n- owner-only token files and a Keychain-only path with no plaintext credentials on disk;\n- atomic file writes, verified Keychain migration, cross-process locks, and refresh mutexes;\n- proactive health checks and automatic macOS refresh;\n- last-known-good in-memory credentials when persistence is temporarily unavailable;\n- isolated profiles for work and personal Slack;\n- fail-closed handling for invalid storage or profile configuration.\n\n### 3. Full-fidelity Slack reads\n\nRead DMs and channels, search the workspace, export complete histories with threads, inspect unread state, and resolve users. Opt into blocks, attachments, files, reactions, metadata, and bot/app markers when text alone is not the real message.\n\n### 4. The agent can finish the job\n\nSend a reply, add or remove a reaction, and mark a conversation read. Every workspace write path carries an MCP destructive annotation so compatible clients can put approval where it belongs.\n\n### 5. Slack in, typed JSON out\n\nSave workflow profiles for incident rooms, executive briefs, support inboxes, launch watches, and custom operations. The OSS primitives are local JSON; the optional hosted brain renders them into contract-shaped briefs.\n\n

\n\n---\n\n## Two ways into Slack\n\nSlack already knows who you are. The official path is a Slack-managed remote integration governed by workspace policy—a strong fit for organization-sanctioned deployments, documented by [Slack](https://docs.slack.dev/ai/slack-mcp-server/) with integration settings under [admin control](https://docs.slack.dev/ai/slackbot-mcp-client/admin-approval/). This project is the direct local path: session-based auth from the browser session already in Chrome, local stdio, any stdio MCP client, and no Slack app or admin request. Same Slack identity. Same underlying permissions. A radically shorter path from your workspace to your agent.\n\n

Side by side: the managed integration path vs. the local session path

\n
\n\n| | Slack official MCP | **Slack MCP Server — local** |\n|---|---|---|\n| Starting point | A Slack-managed remote integration | The Slack session already in Chrome |\n| Workspace control | Governed by workspace integration settings | **No Slack app or admin request for the local path** |\n| Transport | Streamable HTTP | **Local stdio** |\n| Client surface | Slack's supported partner integrations | **Any stdio MCP client** |\n| Authentication | OAuth | **Existing browser session** |\n| Credential lifetime | Managed OAuth | Rotating session with health checks and refresh |\n| Product surface | Broad Slack-native capabilities | **19 focused tools across read, act, and automate** |\n| Protocol | Slack-managed | **MCP 2026-07-28 and every 2025 revision, from the same binary** |\n| Runtime | Slack-managed | **MIT code on your machine** |\n\n

\n\n

Is the local path against Slack's terms?

\n
\n\nTreat browser-session automation as an acceptable-use decision for you and your workspace. The server acts as your signed-in Slack identity and cannot read a channel you cannot read or act as another user. It does not evade server-side retention, DLP, compliance exports, or audit controls.\n\n\"No admin request\" means there is no Slack app installation to approve. It does not mean workspace activity disappears from Slack's systems. If your policy requires a sanctioned OAuth integration, use the official MCP or the optional [hosted OAuth path](https://mcp.revasserlabs.com).\n

\n\n---\n\n## Grid, credentials, and caching\n\n**Enterprise Grid.** Grid runs aggressive session-anomaly detection. Browser-session automation can trip it, which flags the session and kills it, regardless of which tool drives the traffic. Outbound calls are paced by default to stay under burst thresholds (`SLACK_MCP_MIN_REQUEST_INTERVAL_MS`, default 350; `SLACK_MCP_MAX_CONCURRENCY`, default 3). Pacing lowers that risk; it does not remove it. On Grid, use the [hosted OAuth tier](https://mcp.revasserlabs.com) or Slack's official MCP instead.\n\n**Credential extraction.** `--setup` reads the newest `xoxc-` token from Chrome's on-disk LevelDB, snapshots the cookie SQLite database, retrieves Chrome Safe Storage from the macOS Keychain, and runs PBKDF2 + AES-128-CBC decryption locally. It writes the token file, Keychain entries, and non-secret metadata. It transmits nothing — the server talks to Slack and nowhere else.\n\n**This is the same access pattern credential stealers use.** Chrome App-Bound Encryption exists to make this class of read harder, and infostealer families (Lumma, Vidar, Meduza) bypass it to lift live sessions. The mechanism here is comparable. What differs is that you run it, on your own machine, against your own session, and nothing leaves the host. The source is plain JavaScript in this repository; audit it before handing it a live session.\n\n**User cache.** One cache exists: user-name lookups, populated on demand, 500 entries maximum, one-hour TTL. No message content, no channel history, and no persistent copy of the workspace is stored.\n\n---\n\n## Install\n\n**Node 22 or 24 recommended. Node 20 remains supported for the v4 line.**\n\n```bash\nnpx -y @jtalk22/slack-mcp --setup\n```\n\nPrefer a persistent CLI: `npm install -g @jtalk22/slack-mcp` then `slack-mcp --setup`.\n\nThen:\n\n1. Pick your client in the [setup guide](https://github.com/jtalk22/slack-mcp-server/blob/main/docs/SETUP.md).\n2. Register the generated stdio command.\n3. Fully restart the client.\n4. Ask the agent to run `slack_health_check`.\n5. A workspace name in the response means the connection is live.\n\nUse the same server command everywhere:\n\n```json\n{\n \"command\": \"npx\",\n \"args\": [\"-y\", \"@jtalk22/slack-mcp\"]\n}\n```\n\nOn macOS, setup can extract from Chrome and persist the selected storage backend. On other platforms, provide `SLACK_TOKEN` and `SLACK_COOKIE` through the client's environment configuration. Docker, HTTP, and detailed client examples live in [docs/SETUP.md](https://github.com/jtalk22/slack-mcp-server/blob/main/docs/SETUP.md) and [docs/DEPLOYMENT-MODES.md](https://github.com/jtalk22/slack-mcp-server/blob/main/docs/DEPLOYMENT-MODES.md).\n\n

Client configuration matrix

\n
\n\n| Client | Configuration surface | Status |\n|---|---|---|\n| Claude Code | `claude mcp add` or `~/.claude.json` | Documented |\n| Claude Desktop | Desktop MCP configuration | Verified |\n| Cursor | `.cursor/mcp.json` | Documented |\n| GitHub Copilot | `.vscode/mcp.json` | Documented |\n| Windsurf | `~/.codeium/windsurf/mcp_config.json` | Documented |\n| Gemini CLI | `~/.gemini/settings.json` | Documented |\n| Codex CLI | `codex mcp add` or `~/.codex/config.toml` | Documented |\n| Other clients | Any stdio MCP configuration | Protocol-compatible |\n\n

\n\n---\n\n## 19 tools: read, act, automate\n\nThe local surface ships **19 tools** today: **12 read-only** Slack operations, **4 write-path** tools that each carry an MCP destructive annotation so clients can gate workspace writes, and 3 local workflow tools including the catch-up itself. Every tool does its work here — reads Slack or local state — and none is a placeholder for something you would have to pay for. Four read tools accept `include_rich_message_fields: true` to surface attachments, blocks, files, reactions, and metadata—complete inputs and response contracts live in [docs/API.md](https://github.com/jtalk22/slack-mcp-server/blob/main/docs/API.md).\n\nSpeaks MCP **2026-07-28** and every 2025 revision from the same binary — era-negotiated over stdio, stateless per request over HTTP (no `Mcp-Session-Id`; `GET`/`DELETE` answer 405). The claim is a test, not a sentence: [`test/mcp-era.test.js`](https://github.com/jtalk22/slack-mcp-server/blob/main/test/mcp-era.test.js) drives the real SDK client at both eras against the real entry points.\n\n**Advertising fewer tools.** A client pays for the tool schema on every turn that carries it. `SLACK_MCP_TOOLS=essentials` advertises six tools — unread, history, search, thread, user lookup, send — costing roughly **985 estimated tokens** of schema per turn against about **3,134** for all 19. `SLACK_MCP_TOOLS=read` advertises the 12 read-only Slack operations listed below, near 1,690. `--tools=slack_x,slack_y` takes an explicit set. The default stays all 19. Filtering changes what is advertised, not what is callable. Reproduce the numbers with `node scripts/measure-tool-schema.js` (a ~4-chars-per-token estimate).\n\n

The full tool inventory

\n
\n\n### 12 read-only Slack operations\n\n| Tool | Purpose |\n|---|---|\n| `slack_health_check` | Verify credentials and workspace identity |\n| `slack_token_status` | Inspect credential age, health, cache, profile, and storage state |\n| `slack_refresh_tokens` | Refresh local credentials from the browser session on macOS—reads Slack, writes only local state |\n| `slack_list_conversations` | List channels and DMs |\n| `slack_conversations_history` | Read channel or DM history with optional rich fields |\n| `slack_get_full_conversation` | Export complete history and threads |\n| `slack_search_messages` | Search across the workspace |\n| `slack_get_thread` | Read all replies in a thread |\n| `slack_users_info` | Resolve a user |\n| `slack_list_users` | Page through large workspace directories |\n| `slack_users_search` | Search users by name, display name, or email |\n| `slack_conversations_unreads` | Prioritize conversations with unread messages |\n\n### Act in the workspace — 4 write-path tools\n\n| Tool | Purpose | MCP safety |\n|---|---|---|\n| `slack_send_message` | Send to a channel or DM | destructive |\n| `slack_add_reaction` | Add an emoji reaction | destructive |\n| `slack_remove_reaction` | Remove an emoji reaction | destructive |\n| `slack_conversations_mark` | Mark a conversation read | destructive |\n\n### Automate locally — 3 workflow tools\n\n| Tool | Purpose |\n|---|---|\n| `slack_workflow_save` | Save a typed workflow profile to `~/.slack-mcp-workflows.json` |\n| `slack_workflows` | List saved workflow profiles |\n| `slack_catch_me_up` | Read a profile's channels since its cadence window and return structured catch-up evidence |\n\n`slack_refresh_tokens` reads Slack and writes only local credential state.\n\n

\n\n---\n\n## Typed workflows: Slack in, JSON out\n\nBind a workflow kind to channels, priority people, retention, and cadence. `slack_catch_me_up` then reads that scope locally and hands your agent the evidence: which threads went unanswered and for how long, what your priority people said or were pinned on, which conversations actually moved. It does the gathering; your agent writes the summary against the contract below.\n\nThere is no server-side model in that path, because there does not need to be one — the client calling this server is already a language model. Hosted adds what genuinely needs infrastructure: running the same catch-up on a schedule while your laptop is shut, on an OAuth token that does not rotate.\n\n```bash\nnpx -y @jtalk22/slack-mcp --apply-template oncall-handoff --channels C012345,C067890\n```\n\n

Workflow contracts and shipped templates

\n
\n\n| Workflow kind | Contract |\n|---|---|\n| `incident_room` | `{incident_summary, timeline, open_risks, owner_gaps, next_actions}` |\n| `exec_brief` | `{summary, decisions, risks, asks, action_items}` |\n| `support_inbox` | `{open_threads, ack_lag, owner_gaps, escalations, next_actions}` |\n| `product_launch_watch` | `{launch_signals, feedback_themes, blockers, metrics, next_actions}` |\n| `custom` | `{summary, highlights, open_questions, next_actions}` |\n\nSix editable templates ship in the package: `oncall-handoff`, `support-triage`, `exec-monday`, `sprint-tracker`, `customer-feedback`, and `incident-room`.\n\n

\n\n---\n\n## Where credentials live\n\nResolution is deterministic; first hit wins:\n\n1. `SLACK_TOKEN` + `SLACK_COOKIE`\n2. token file (`chmod 600`)\n3. macOS Keychain\n4. Chrome extraction on macOS\n\nSession credentials commonly rotate after one or two weeks. When Slack returns `invalid_auth`, `not_authed`, `token_expired`, `token_revoked`, `account_inactive`, or HTTP 401, run `npx -y @jtalk22/slack-mcp --setup` to recover locally. On macOS, `slack_refresh_tokens` or `--refresh-tokens` refreshes without leaving the client; the optional LaunchAgent in [docs/SETUP.md](https://github.com/jtalk22/slack-mcp-server/blob/main/docs/SETUP.md) keeps long-idle installations healthy.\n\n

Storage modes and multi-workspace profiles

\n
\n\n| Mode | Behavior |\n|---|---|\n| `auto` | Token file plus Keychain backup |\n| `keychain-only` | Keychain only; verified writes and no plaintext credential file |\n| `file` | Owner-only token file; Keychain is never touched |\n\nThe selected backend is remembered in non-secret metadata and used by the server, CLI, and optional refresh job. An unrecognized mode fails at startup instead of silently downgrading storage.\n\n```json\n{\n \"mcpServers\": {\n \"slack-work\": {\n \"command\": \"npx\",\n \"args\": [\"-y\", \"@jtalk22/slack-mcp\"],\n \"env\": { \"SLACK_MCP_PROFILE\": \"work\" }\n },\n \"slack-personal\": {\n \"command\": \"npx\",\n \"args\": [\"-y\", \"@jtalk22/slack-mcp\"],\n \"env\": { \"SLACK_MCP_PROFILE\": \"personal\" }\n }\n }\n}\n```\n\nEach profile gets its own token file, Keychain entries, metadata, and lock. Add `SLACK_MCP_CHROME_PROFILE` when the workspaces live in different Chrome profiles.\n\n

\n\n---\n\n## Free local when you’re driving. Hosted when it must drive itself.\n\nWhen local control is enough, stop here—everything above is MIT-licensed and runs on your machine. The local product is complete, not a crippled trial: hosted earns the upgrade through continuity, intelligence, and collaboration, not by holding ordinary Slack access hostage. Hosted exists for work that must survive a rotating browser session:\n\n- permanent OAuth;\n- scheduled catch-up;\n- contract-validated workflow briefs;\n- shared profiles and managed workspace continuity.\n\nLocal mode never contacts us; it runs on your machine and talks only to Slack. Hosted never receives a browser cookie; it runs on permanent OAuth, for work that has to survive a rotating session — unattended schedules, Enterprise Grid. Everything above is MIT-licensed and complete on its own.\n\n[See live hosted pricing →](https://mcp.revasserlabs.com/pricing)\n\n---\n\n## Security and provenance\n\n- Credential files are owner-only; Keychain-only mode keeps plaintext credentials off disk.\n- Configuration fails closed for unknown storage modes and invalid profiles.\n- Writes are atomic and shared credential state is process-locked.\n- The local web server binds to localhost; workspace write tools carry destructive annotations.\n- Every release publishes from CI with npm provenance.\n\n### Provenance: don't take my word for it\n\n```bash\nnpm audit signatures\n```\n\nA clean result verifies that the package signatures and attestations trace back through the published release chain. Inspect the package before handing it a live Slack session. Full policy: [SECURITY.md](https://github.com/jtalk22/slack-mcp-server/blob/main/SECURITY.md).\n\n $\"Slack$ \n\n---\n\n## Documentation\n\n[Setup](https://github.com/jtalk22/slack-mcp-server/blob/main/docs/SETUP.md) · [API](https://github.com/jtalk22/slack-mcp-server/blob/main/docs/API.md) · [Architecture](https://github.com/jtalk22/slack-mcp-server/blob/main/docs/ARCHITECTURE.md) · [Compatibility](https://github.com/jtalk22/slack-mcp-server/blob/main/docs/COMPATIBILITY.md) · [Deployment modes](https://github.com/jtalk22/slack-mcp-server/blob/main/docs/DEPLOYMENT-MODES.md) · [Recipes](https://github.com/jtalk22/slack-mcp-server/blob/main/docs/USE_CASE_RECIPES.md) · [Troubleshooting](https://github.com/jtalk22/slack-mcp-server/blob/main/docs/TROUBLESHOOTING.md) · [Roadmap](https://github.com/jtalk22/slack-mcp-server/blob/main/docs/ROADMAP.md)\n\n## Contributing\n\nPRs are welcome. Read [CONTRIBUTING.md](https://github.com/jtalk22/slack-mcp-server/blob/main/CONTRIBUTING.md) and run `node --check` on touched JavaScript before submitting.\n\n## License\n\nMIT — see [LICENSE](https://github.com/jtalk22/slack-mcp-server/blob/main/LICENSE).\n\n## Disclaimer\n\nNot affiliated with Slack Technologies, Inc. This server uses browser-session credentials. Review your workspace's acceptable-use policy before running it.\n\n---\n\n

\n\n### Your Slack. Your agent. One command.\n\n```bash\nnpx -y @jtalk22/slack-mcp --setup\n```\n\nIf this removes a Slack tab from your day, [star the repository](https://github.com/jtalk22/slack-mcp-server). Stars are how the next admin-blocked developer finds the local path.\n\n

\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays",0,"iconType","image","upstream",{"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127},"requiredSecrets",[],"tags",[101,102,103,104,105,106,107,108,109,110,111,112,113,114,115],"assets",[],"stats",{"_99":86,"_100":86},"ratingAvg","reviewCount","agentic-ai","ai-agents","anthropic","claude","claude-code","claude-desktop","codex","copilot","cursor","developer-tools","gemini-cli","llm","local-first","productivity","slack","topics",[101,102,103,104,105,106,107,108,109,110,111,112,113,133,134,135,114,115,136,137],"license","MIT","language","JavaScript","registryName","io.github.jtalk22/slack-mcp-server","homepage","https://mcp.revasserlabs.com","packages",[128],{"_129":130,"_131":132,"_76":77},"registryType","npm","identifier","@jtalk22/slack-mcp","mcp","mcp-server","model-context-protocol","slack-api","slack-mcp","ENV",{"_140":141,"_142":143,"_144":145},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]