Production-ready Slack MCP Server template for the Model Context Protocol (MCP). Build AI integrations with Slack using TypeScript, OAuth2, channels, messages, users, reactions, files, Claude Desktop, Cursor, Windsurf, and other MCP clients.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport streamable-http · http counts 7 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
slack_get_channel_history
-
slack_get_thread_replies
-
slack_get_user_info
-
slack_list_channels
-
slack_list_users
-
slack_search_messages
-
slack_send_message
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit ed01f93 · analyzer v33 · 2w ago
danger signals1
- committed secret Slack token kamolc4-slack-mcp-server-ed01f93/.env.example :25
xoxb-y…(19 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 14
secrets 2
- secrets (weak) kamolc4-slack-mcp-server-ed01f93/src/__tests__/jest.setup.ts :19
process.env['SLACK_CLIENT_SECRET'] = 'test-slack-client-secret'; - secrets (weak) kamolc4-slack-mcp-server-ed01f93/src/__tests__/server.test.ts :38
.set('Authorization', `Bearer ${process.env['MCP_API_KEY']}`)
tool registrations 7
- slack_list_channels kamolc4-slack-mcp-server-ed01f93/src/server.ts :78
- slack_get_channel_history kamolc4-slack-mcp-server-ed01f93/src/server.ts :100
- slack_send_message kamolc4-slack-mcp-server-ed01f93/src/server.ts :122
- slack_get_thread_replies kamolc4-slack-mcp-server-ed01f93/src/server.ts :144
- slack_get_user_info kamolc4-slack-mcp-server-ed01f93/src/server.ts :166
- slack_list_users kamolc4-slack-mcp-server-ed01f93/src/server.ts :188
- slack_search_messages kamolc4-slack-mcp-server-ed01f93/src/server.ts :210
declared dependencies 24
- @modelcontextprotocol/sdk@1.29.0
- @slack/web-api@7.3.4
- cookie-parser@1.4.7
- express@4.19.2
- express-rate-limit@7.4.1
- pino@9.4.0
- pino-http@10.3.0
- uuid@10.0.0
- zod@3.25.76
- @types/cookie-parser@1.4.8
- @types/express@4.17.21
- @types/jest@29.5.13
show 12 more
- @types/node@22.7.5
- @types/uuid@10.0.0
- @typescript-eslint/eslint-plugin@8.8.1
- @typescript-eslint/parser@8.8.1
- eslint@9.12.0
- jest@29.7.0
- pino-pretty@11.3.0
- supertest@7.0.0
- @types/supertest@6.0.2
- ts-jest@29.2.5
- ts-node-dev@2.0.0
- typescript@5.6.3