imbi-slackbot 2.11.4

Imbi Slack bot

imbi-slackbot

A Slack bot for the Imbi DevOps service management platform. It behaves like the Imbi assistant — giving Claude live access to Imbi data and actions through tools — but speaks Slack and acts as the Slack user who asked, so every answer and action respects that user's Imbi permissions.

How It Works

The bot connects to Slack over Socket Mode (an outbound websocket, so no public ingress is required). When a user mentions the bot or DMs it, the bot:

1. Resolves the Slack user to an Imbi user. It looks up the Slack user's email (users.info), finds the matching active Imbi User in the graph, and mints a short-lived per-user JWT access token signed with the shared IMBI_AUTH_JWT_SECRET — exactly the token the Imbi API issues at login. The resolution is cached with a TTL. Users with no matching Imbi account get a friendly explanation instead.
2. Reconstructs the thread context from Slack (conversations.replies) so follow-up questions in a thread keep their history. Nothing is persisted server-side; the Slack thread is the conversation.
3. Runs Claude with the Imbi toolset. Tools are built at startup from the Imbi API's openapi.json via an in-process FastMCP server, using the shared imbi_common.mcp exclusion policy (auth/MFA/status/thumbnail and any x-imbi-ai-tool: false operations are filtered out). The user's minted token is forwarded on every tool call, so the API enforces their permissions.
4. Replies in-thread with Claude's answer.

A tiny FastAPI app exposes /status (port 8004) for health checks; the Socket Mode connection runs as a background task alongside it.

Configuration

Environment variable	Purpose
SLACK_BOT_TOKEN	Slack bot token (xoxb-…)
SLACK_APP_TOKEN	Slack app-level token for Socket Mode (xapp-…)
ANTHROPIC_API_KEY	Anthropic API key (enables the bot when set)
IMBI_AUTH_JWT_SECRET	Shared HS256 secret used to mint per-user tokens
IMBI_INTERNAL_API_URL	In-cluster base URL of the Imbi API
IMBI_UI_URL	Public base URL of the Imbi UI, used to build deep links
IMBI_INTERNAL_UI_URL	In-cluster UI address for fetching llms.txt (e.g. the Caddy frontend); falls back to IMBI_UI_URL
POSTGRES_URL	Imbi graph (Apache AGE) connection URL
IMBI_SLACKBOT_MODEL	Claude model (default claude-sonnet-4-6)

See src/imbi_slackbot/settings.py for the full set.

Development

just setup    # install deps + pre-commit hooks
just test     # run the test suite with coverage
just lint     # ruff + mypy + basedpyright
just serve    # run the bot against .env