Slack MCP Server

Enables AI assistants to interact with Slack workspaces through secure OAuth 2.0 authentication. Supports posting messages, reading channel history, and listing channels across multiple workspaces with production-ready security features.

→ cnye36/slack-mcp-server · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 2 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 2 credentials: AFFINITYBOTS_MCP_API_KEY, SLACK_CLIENT_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretAFFINITYBOTS_MCP_API_KEY— Secret key to protect your MCP endpoint

configALLOWED_ORIGINS— Origin header: Must match if configured

configHOST— No 0.0.0.0 Server host

configLOG_LEVEL— No info Log level: trace, debug, info, warn, error, fatal

configPORT— No 8080 Server port

configPUBLIC_BASE_URL— No http://localhost:8080 Public URL for OAuth redirects

configSESSION_TTL_MS— No 900000 MCP session timeout (15 min)

configSLACK_CLIENT_ID— From your Slack app's OAuth settings

🔐 secretSLACK_CLIENT_SECRET— From your Slack app's OAuth settings

configSLACK_REDIRECT_URI— Your callback URL (e.g., https://yourdomain.com/slack/oauth/callback)

configSLACK_SCOPES— Comma-separated bot scopes (e.g., chat:write,channels:history,channels:read)

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/cnye36-slack-mcp-server-ziyzyi)](https://m8ven.ai/mcp/cnye36-slack-mcp-server-ziyzyi)

commit: b26f68f09c6831250f33d3d8a36ccee2e45068db

code hash: 2459a3a92c474ac8886f42dd98750a9e3268264b0cbc49eba6d9ea536e30acae

verified: 4/18/2026, 6:52:59 PM

view raw JSON →