MCP Slack MCP server
Secure read-only MCP server for Slack workspaces
2 stars106 downloads/wk
Reviews
Write oneNobody has reviewed MCP Slack yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
MCP Slack tools (15)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
slack_auth_testTest Slack authentication and get info about the token owner.
slack_get_channel_historyGet message history from a Slack channel.
slack_get_channel_infoGet detailed information about a Slack channel.
slack_get_file_infoGet metadata about a Slack file (no content download).
slack_get_reactionsGet reactions for a specific Slack message.
slack_get_thread_repliesGet replies in a Slack message thread.
slack_get_user_infoGet information about a Slack user.
slack_get_user_profileGet a Slack user's profile information.
slack_list_channel_membersList members of a Slack channel.
slack_list_channelsList channels in the Slack workspace.
slack_list_filesList files in the Slack workspace (metadata only, no content download).
slack_list_reactionsList reactions made by a user.
slack_list_starsList starred items for the authenticated user.
slack_list_usersList users in the Slack workspace.
slack_search_messagesSearch messages in the Slack workspace.
Public scan report
scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan16 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 1 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
How MCP Slack compares
Against every graded Productivity MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 91/100
- higher than 85% of 1,299 Productivity servers
- Tools
- 15
- the typical Productivity server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 2
- more than 60% of 854 Productivity servers
- Downloads a week
- 106
- more than 58% of 427 Productivity servers with a package
What its tools let an agent do: 15 read
Install MCP Slack in Claude Code, Cursor or VS Code
claude mcp add slack -- uvx mcp-slack-crunchtools
What the publisher says
From the MCP Slack repository's README, as published. We do not edit it. Read it on GitHub
mcp-slack-crunchtools
Secure read-only MCP server for Slack workspaces. Provides Claude Code (and other MCP clients) with access to your Slack channels, messages, users, and files without any write permissions.
Features
- Read-only: 15 tools, all read-only. Never posts, edits, or deletes anything.
- Secure: 6-layer security model (input validation, token handling, client hardening, output sanitization, runtime protection, supply chain security).
- User OAuth Token: Uses xoxp- tokens for user-scoped access to your workspace.
- No SDK dependency: Uses httpx directly for minimal, auditable HTTP calls.
Quick Start
Using uvx (Recommended)
claude mcp add mcp-slack-crunchtools \
--env SLACK_USER_TOKEN=xoxp-your-token \
-- uvx mcp-slack-crunchtoolsUsing Container
claude mcp add mcp-slack-crunchtools \
--env SLACK_USER_TOKEN=xoxp-your-token \
-- podman run -i --rm -e SLACK_USER_TOKEN quay.io/crunchtools/mcp-slackLocal Development
claude mcp add mcp-slack-crunchtools \
--env SLACK_USER_TOKEN=xoxp-your-token \
-- uv run mcp-slack-crunchtoolsSetup
See CLAUDE.md for detailed instructions on creating a Slack app and obtaining a User OAuth Token.
Configuration
Authentication uses one of two mutually exclusive modes. The server picks cookie mode when both cookie variables are set, and token mode otherwise.
Which auth mode to use
Cookie mode is the working path for this deployment. Token mode requires a Slack app to be created and approved in the workspace; where that approval is not available, cookie mode is the only way to authenticate at all.
Cookie mode borrows an existing browser session rather than holding a credential issued to an application. That has consequences worth stating plainly:
in Slack, with your full access. Treat them exactly as you would your password.
- Both values are live session credentials. Anything holding them can act as you
re-extraction. A sudden wave of auth failures usually means the session rotated, not that the server broke.
- They expire when the browser session does, so cookie mode needs periodic
time. Cookie mode is a workaround for the absence of an approved app, not a supported integration path.
- Slack does not issue these for programmatic use and can invalidate them at any
Prefer SLACKUSERTOKEN whenever a Slack app can actually be installed.
Tools
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
MCP Slack: common questions
- Is MCP Slack MCP server safe?
- Yes, by our scan: it is graded A (91/100). Read the MCP Slack safety report
- How do I install MCP Slack?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does MCP Slack need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is MCP Slack maintained?
- The last commit was 39 days ago (2026-09-26). The latest release is v0.1.2.
- What can I use instead of MCP Slack?
- Servers from other publishers that do the same job: Agent-Native Dispatch MCP server, Research Hub MCP server and Google Drive MCP server.
- How does MCP Slack compare with other Productivity MCP servers?
- safety score 91/100 (higher than 85% of 1,299 Productivity servers); tools 15 (the typical Productivity server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to MCP Slack
Same job from other publishers: the closest match first, then the best rated.
- Agent-Native DispatchCentral Slack/Telegram router with jobs, memory, approvals, and A2A delegationnot reviewedEstablishedA
- Research HubResearch workspace for Zotero + Obsidian + NotebookLM. Search, ingest, sync, verify briefs.not reviewedGrowingA
- Google Drive MCPSecure access to Google Drive, Docs, Sheets, Slides, and Calendar through MCP.not reviewedGrowingB