# Slack MCP Server (npm · @jtalk22/slack-mcp)

Slack MCP without OAuth — 21 tools, session-based, local-first. Free OSS + hosted tier from $19/mo.

- Trust score: 67/100 (medium)
- Change this week: +30
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

> **Malware flagged**: A supply-chain scanner flagged a high-severity malware risk in this package. Treat it as unsafe to install until the finding is cleared.

## Components

- remote · `mcp.revasserlabs.com`: 31/100, [markdown](https://verifymcp.io/servers/jtalk22-slack-mcp-server/oauth-mcp.md), [page](https://verifymcp.io/servers/jtalk22-slack-mcp-server/oauth-mcp)
- npm · `@jtalk22/slack-mcp`: 67/100 (this document), [markdown](https://verifymcp.io/servers/jtalk22-slack-mcp-server/jtalk22-slack-mcp.md), [page](https://verifymcp.io/servers/jtalk22-slack-mcp-server/jtalk22-slack-mcp)

## Channel facts

- Registry: `npm`
- Package: `@jtalk22/slack-mcp`
- Version: `4.6.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 42/100
  - Malware check failed: a supply-chain vendor flagged a high-severity malware risk.
  - Only part of the dependency tree could be resolved (94 of 95), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (94 of 95), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 97/100
  - Source repository is publicly reachable at the declared URL.
  - Cryptographically verified build provenance (signed, bound to jtalk22/slack-mcp-server).
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 12 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 82/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 2012 tokens (~87/item across 23 items; 21 tools + 2 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add jtalk22-slack-mcp-server -- npx -y @jtalk22/slack-mcp
```

### Codex

```bash
codex mcp add jtalk22-slack-mcp-server -- npx -y @jtalk22/slack-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "jtalk22-slack-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@jtalk22/slack-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add jtalk22-slack-mcp-server --command npx --arg -y --arg @jtalk22/slack-mcp
```

### Hermes

```yaml
mcp_servers:
  jtalk22-slack-mcp-server:
    command: "npx"
    args: ["-y", "@jtalk22/slack-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "jtalk22-slack-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@jtalk22/slack-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 67, +4)

- [functional improvement] Stability: unverified → 0.23

### 2026-08-02 (score 63, +37)

- [security regression] Malware scan: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Provenance: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [security] The attested source repository moved: jtalk22/slack-mcp-server
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Schema quality: 100 → unverified
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Schema quality: unverified → good
- [functional] Licence: MIT

### 2026-07-31 (score 26, −9)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 35, −2)

- [security regression] Malware scan: fail → unverified
- [security improvement] Malware indicator gptMalware:QqpH31m1s4XYAFWTjKaXFY8YPOJTM3j3rU_WYrogdNsk cleared
- [security improvement] Malware indicator gptMalware:Qo7mLo8cu-mQ6FWqJSnjhu7d4TB5w1trzcLjltriOH_4 cleared

### 2026-07-27 (score 37)

First indexed and scored.

## MCP tools (21)

### `slack_token_status` (~23 tokens)

Check token health, age, auto-refresh status, and cache stats

### `slack_health_check` (~20 tokens)

Check if Slack tokens are valid and show authentication status

### `slack_refresh_tokens` (~24 tokens)

Force refresh tokens by extracting from Chrome (requires Slack tab open in Chrome)

### `slack_list_conversations` (~101 tokens)

List all DMs and channels with user names resolved. Uses cached DMs by default for speed.

Input parameters:

- `discover_dms` (boolean): If true, actively discover all DMs (slower, may hit rate limits on large workspaces). Default false uses cached DMs.
- `limit` (number): Maximum results (default 100)
- `types` (string): Comma-separated types: im, mpim, public_channel, private_channel

### `slack_conversations_history` (~161 tokens)

Get messages from a channel or DM with user names resolved

Input parameters:

- `channel_id` (string, required): Channel or DM ID (e.g., D063M4403MW)
- `include_all_metadata` (boolean): Pass Slack's include_all_metadata option to conversations.history
- `include_rich_message_fields` (boolean): Include Slack message attachments, blocks, metadata, files, and reactions when present
- `latest` (string): Unix timestamp - get messages before this time (boundary timestamp included)
- `limit` (number): Messages to fetch (max 100, default 50)
- `oldest` (string): Unix timestamp - get messages after this time (boundary timestamp included)
- `resolve_users` (boolean): Convert user IDs to names (default true)

### `slack_get_full_conversation` (~194 tokens)

Export FULL conversation history with all messages, threads, and user names. Can save to file.

Input parameters:

- `channel_id` (string, required): Channel or DM ID
- `include_all_metadata` (boolean): Pass Slack's include_all_metadata option to conversations.history and conversations.replies
- `include_rich_message_fields` (boolean): Include Slack message attachments, blocks, metadata, files, and reactions when present
- `include_threads` (boolean): Fetch thread replies (default true)
- `latest` (string): Unix timestamp end (boundary timestamp included)
- `max_messages` (number): Maximum messages to retrieve (default 2000, max 10000)
- `oldest` (string): Unix timestamp start (e.g., 1733011200 = Dec 1, 2025; boundary timestamp included)
- `output_file` (string): Filename to save export (saved to ~/.slack-mcp-exports/)

### `slack_search_messages` (~81 tokens)

Search messages across the Slack workspace

Input parameters:

- `count` (number): Number of results (max 100, default 20)
- `include_rich_message_fields` (boolean): Include Slack message attachments, blocks, metadata, files, and reactions when present
- `query` (string, required): Search query (supports Slack syntax like from:@user, in:#channel)

### `slack_users_info` (~28 tokens)

Get detailed information about a Slack user

Input parameters:

- `user_id` (string, required): Slack user ID

### `slack_send_message` (~61 tokens)

Send a message to a channel or DM

Input parameters:

- `channel_id` (string, required): Channel or DM ID to send to
- `text` (string, required): Message text (supports Slack markdown)
- `thread_ts` (string): Thread timestamp to reply to (optional)

### `slack_get_thread` (~87 tokens)

Get all replies in a message thread

Input parameters:

- `channel_id` (string, required): Channel or DM ID
- `include_all_metadata` (boolean): Pass Slack's include_all_metadata option to conversations.replies
- `include_rich_message_fields` (boolean): Include Slack message attachments, blocks, metadata, files, and reactions when present
- `thread_ts` (string, required): Thread parent message timestamp

### `slack_list_users` (~34 tokens)

List all users in the workspace

Input parameters:

- `limit` (number): Maximum users to return (default 500, supports pagination)

### `slack_add_reaction` (~72 tokens)

Add an emoji reaction to a message

Input parameters:

- `channel_id` (string, required): Channel or DM ID containing the message
- `reaction` (string, required): Emoji name without colons (e.g., 'thumbsup', 'eyes', 'white_check_mark')
- `timestamp` (string, required): Message timestamp to react to

### `slack_remove_reaction` (~68 tokens)

Remove an emoji reaction from a message

Input parameters:

- `channel_id` (string, required): Channel or DM ID containing the message
- `reaction` (string, required): Emoji name without colons (e.g., 'thumbsup', 'eyes')
- `timestamp` (string, required): Message timestamp to remove reaction from

### `slack_conversations_mark` (~63 tokens)

Mark a conversation as read up to a specific message timestamp

Input parameters:

- `channel_id` (string, required): Channel or DM ID to mark as read
- `timestamp` (string, required): Message timestamp to mark as read up to (all messages at or before this are marked read)

### `slack_conversations_unreads` (~68 tokens)

Get channels and DMs with unread messages, sorted by unread count (highest first)

Input parameters:

- `limit` (number): Maximum conversations to return (default 50)
- `types` (string): Comma-separated types: im, mpim, public_channel, private_channel (default all)

### `slack_users_search` (~64 tokens)

Search workspace users by name, display name, or email. Case-insensitive partial match.

Input parameters:

- `limit` (number): Maximum results to return (default 20)
- `query` (string, required): Search term to match against name, display name, real name, or email

### `slack_workflow_save` (~235 tokens)

Save or update a workflow profile that binds a workflow_kind (support_inbox | incident_room | exec_brief | product_launch_watch | custom) to channels, priority people, retention mode, and summary cadence. Stored locally at ~/.slack-mcp-workflows.json. Hosted brain reads these to return structured JSON per the workflow_kind.

Input parameters:

- `channels` (array): Slack channel IDs to read (e.g. ['C012345', 'C067890'])
- `priority_people` (array): Slack user IDs whose messages get extra weight in summaries
- `profile_name` (string, required): Unique name for this workflow profile (e.g. 'morning-exec-brief', 'on-call-rotation')
- `retention_mode` (string): Token retention mode for hosted execution. Default ephemeral.
- `summary_cadence` (string): When the hosted brain auto-runs slack_catch_me_up against this profile. on_demand only on hosted free; daily_8am and weekly_monday require Pro or Team.
- `workflow_kind` (string, required): Workflow kind. Determines structured JSON output shape from the hosted AI brain.

### `slack_workflows` (~75 tokens)

List all saved workflow profiles from ~/.slack-mcp-workflows.json. Optionally filter by workflow_kind. Returns profile_name, channels, priority_people, retention_mode, summary_cadence, structured_keys, created_at, updated_at.

Input parameters:

- `workflow_kind` (string): Optional filter — return only profiles of this workflow_kind

### `slack_smart_search` (~163 tokens)

Semantic + lexical hybrid search across your indexed Slack history. Returns ranked results with relevance scores, channel context, thread context, and matched terms. Hosted-only (requires Vectorize + Workers AI). Free tier ships 25 AI tool calls/month (shared across the hosted AI tools); upgrade to Pro $19/mo for unlimited at mcp.revasserlabs.com/pricing.

Input parameters:

- `channel_ids` (array): Optional — restrict search to these channel IDs
- `days_back` (number): Optional — restrict search to the last N days (max 90 on Pro+, 7 on Free)
- `limit` (number): Maximum results to return (default 10, max 50)
- `query` (string, required): Natural language or keyword query (semantic + lexical hybrid)

### `slack_catch_me_up` (~222 tokens)

Run a structured catch-up against a saved workflow profile. Returns structured JSON per the profile's workflow_kind: support_inbox returns {open_threads, ack_lag, owner_gaps, escalations, next_actions}; incident_room returns {incident_summary, timeline, open_risks, owner_gaps, next_actions}; exec_brief returns {summary, decisions, risks, asks, action_items}; product_launch_watch returns {launch_signals, feedback_themes, blockers, metrics, next_actions}; custom returns {summary, highlights, open_questions, next_actions}. Hosted-only. Free tier ships 25 AI tool calls/month (shared across the hosted AI tools); Pro $19/mo unlocks unlimited.

Input parameters:

- `profile_name` (string, required): Name of a workflow profile saved via slack_workflow_save (or use --apply-template at install time to seed one)
- `since` (string): Optional ISO8601 timestamp — only consider Slack messages newer than this. Default: 24 hours ago for daily-cadence profiles, 7 days for weekly.

### `slack_triage` (~141 tokens)

Classify and route Slack threads against a workflow profile. Returns triage decisions per thread: priority (low|medium|high|urgent), suggested owner, escalation flag, time-sensitivity, and a routing recommendation. Hosted-only. Free tier ships 25 AI tool calls/month (shared across the hosted AI tools); Pro $19/mo unlocks unlimited.

Input parameters:

- `channel_ids` (array): Optional — restrict triage to these channels (defaults to profile's channels)
- `profile_name` (string, required): Name of a workflow profile saved via slack_workflow_save
- `thread_ts` (string): Optional — triage a specific thread instead of the full inbox

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/jtalk22-slack-mcp-server/jtalk22-slack-mcp#diagnostics

## Score history

- 2026-08-03: 67
- 2026-08-02: 63
- 2026-08-01: 26
- 2026-07-31: 26
- 2026-07-30: 35
- 2026-07-28: 37
- 2026-07-27: 37

## Links

- npm package: https://www.npmjs.com/package/@jtalk22/slack-mcp
- Socket report: https://socket.dev/npm/package/@jtalk22/slack-mcp
- Repository: https://github.com/jtalk22/slack-mcp-server
- Website: https://mcp.revasserlabs.com/
- Changelog RSS feed: https://verifymcp.io/servers/jtalk22-slack-mcp-server/jtalk22-slack-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/jtalk22-slack-mcp-server/jtalk22-slack-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/jtalk22-slack-mcp-server/jtalk22-slack-mcp