Mcp Slack — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Slack (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Secure read-only MCP server for Slack workspaces. Provides Claude Code (and other MCP clients) with access to your Slack channels, messages, users, and files without any write permissions.
xoxp- tokens for user-scoped access to your workspace.httpx directly for minimal, auditable HTTP calls.claude mcp add mcp-slack-crunchtools \
--env SLACK_USER_TOKEN=xoxp-your-token \
-- uvx mcp-slack-crunchtoolsclaude mcp add mcp-slack-crunchtools \
--env SLACK_USER_TOKEN=xoxp-your-token \
-- podman run -i --rm -e SLACK_USER_TOKEN quay.io/crunchtools/mcp-slackclaude mcp add mcp-slack-crunchtools \
--env SLACK_USER_TOKEN=xoxp-your-token \
-- uv run mcp-slack-crunchtoolsSee CLAUDE.md for detailed instructions on creating a Slack app and obtaining a User OAuth Token.
| Tool | Description |
|---|---|
slack_auth_test | Test connection and get token owner info |
slack_list_channels | List workspace channels |
slack_get_channel_info | Get channel details |
slack_get_channel_history | Read channel messages |
slack_get_thread_replies | Read thread replies |
slack_list_channel_members | List channel members |
slack_search_messages | Search messages |
slack_get_reactions | Get message reactions |
slack_list_reactions | List user's reactions |
slack_list_stars | List starred items |
slack_get_user_info | Get user details |
slack_list_users | List workspace members |
slack_get_user_profile | Get user profile |
slack_list_files | List files (metadata only) |
slack_get_file_info | Get file metadata |
See SECURITY.md for the full security design document.
AGPL-3.0-or-later
<!-- mcp-name: io.github.crunchtools/slack -->
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.