56
grade D
10 days ago
glama
Slack Max API MCP
An MCP server that provides comprehensive access to the Slack Web API, enabling AI agents to search messages, manage channels, and create canvases. It features 13 core tools and over 300 dynamic methods for complete automation of Slack workspace operations.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 9 credentials: SLACK_BOT_TOKEN, SLACK_CLIENT_SECRET, SLACK_GATEWAY_API_KEY, SLACK_GATEWAY_CLIENT_API_KEY, SLACK_GATEWAY_PUBLIC_ONBOARD_API_KEY, SLACK_GATEWAY_PUBLIC_ONBOARD_EXPOSE_API_KEY, SLACK_GATEWAY_SHARED_SECRET, SLACK_TOKEN, SLACK_USER_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
SLACK_ALLOW_ENV_EXAMPLE_FALLBACK— 4. .env.example fallback if =trueconfig
SLACK_API_BASE_URLconfig
SLACK_AUDIT_LOG_PATH— path> (default: ~/.slack-max-api-mcp/audit.log)🔐 secret
SLACK_BOT_TOKEN— setx "xoxb-..."config
SLACK_CATALOG_CONCURRENCYconfig
SLACK_CATALOG_PATHconfig
SLACK_CLIENT_CONFIG_PATHconfig
SLACK_CLIENT_ID— setx "YOUR_CLIENT_ID"🔐 secret
SLACK_CLIENT_SECRET— setx "YOUR_CLIENT_SECRET"config
SLACK_DEFAULT_TOKEN_TYPEconfig
SLACK_ENABLE_AUDIT_LOG— truefalse (default: true)config
SLACK_ENABLE_METHOD_TOOLSconfig
SLACK_GATEWAY_ALLOW_PUBLIC🔐 secret
SLACK_GATEWAY_API_KEY🔐 secret
SLACK_GATEWAY_CLIENT_API_KEYconfig
SLACK_GATEWAY_PROFILEconfig
SLACK_GATEWAY_PUBLIC_BASE_URLconfig
SLACK_GATEWAY_PUBLIC_ONBOARD🔐 secret
SLACK_GATEWAY_PUBLIC_ONBOARD_API_KEY🔐 secret
SLACK_GATEWAY_PUBLIC_ONBOARD_EXPOSE_API_KEYconfig
SLACK_GATEWAY_PUBLIC_ONBOARD_PROFILE_PREFIX🔐 secret
SLACK_GATEWAY_SHARED_SECRETconfig
SLACK_GATEWAY_SKIP_TLS_VERIFYconfig
SLACK_GATEWAY_STATE_TTL_MSconfig
SLACK_GATEWAY_URLconfig
SLACK_INSECURE_TLSconfig
SLACK_MAX_METHOD_TOOLSconfig
SLACK_METHOD_ALLOWLIST— chat.postMessage,conversations.historyconfig
SLACK_METHOD_ALLOW_PREFIXES— chat.,conversations.config
SLACK_METHOD_DENYLIST— users.deletePhotoconfig
SLACK_METHOD_DENY_PREFIXESconfig
SLACK_METHOD_TOOL_PREFIXconfig
SLACK_OAUTH_BOT_SCOPESconfig
SLACK_OAUTH_CALLBACK_HOSTconfig
SLACK_OAUTH_CALLBACK_PATHconfig
SLACK_OAUTH_CALLBACK_PORTconfig
SLACK_OAUTH_TEAM_IDconfig
SLACK_OAUTH_TIMEOUT_MSconfig
SLACK_OAUTH_USER_SCOPESconfig
SLACK_ONBOARD_CLAIM_TTL_MSconfig
SLACK_ONBOARD_POLL_INTERVAL_MSconfig
SLACK_ONBOARD_PUBLIC_BASE_URL— setx "https://onboard.example.com"config
SLACK_ONBOARD_SERVER_CALLBACK_PATHconfig
SLACK_ONBOARD_SERVER_HOST— setx "0.0.0.0"config
SLACK_ONBOARD_SERVER_PORT— setx "8790"config
SLACK_ONBOARD_SERVER_URL— Use --server (or ) only when overriding it.config
SLACK_ONBOARD_SKIP_TLS_VERIFYconfig
SLACK_ONBOARD_TIMEOUT_MSconfig
SLACK_OPERATIONS_CONFIG_PATH— Override path: =<path>config
SLACK_OPERATIONS_STATE_PATH— Override path: =<path>config
SLACK_PROFILE— 3. active OAuth profile from token store ( or default profile)config
SLACK_SMART_COMPAT_CORE_TOOLS🔐 secret
SLACK_TOKEN— 2. env tokens: SLACK_BOT_TOKEN / SLACK_USER_TOKEN /config
SLACK_TOKEN_STORE_PATHconfig
SLACK_TOOL_EXPOSURE_MODE— operationsdeveloperlegacy🔐 secret
SLACK_USER_TOKEN— setx "xoxp-..."// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/jeongwoobin335-slack-mcp-mty8u5)commit: a49046a5b9280b4a9f5fdfd6c896804180894346
code hash: 7624499ffa02579011be354adcce7c22528610dc6644657acd59471d9be523bb
verified: 4/11/2026, 2:56:54 PM