imbi-slackbot

A Slack bot for the Imbi DevOps service management platform. It behaves like the Imbi assistant — giving Claude live access to Imbi data and actions through tools — but speaks Slack and acts as the Slack user who asked, so every answer and action respects that user's Imbi permissions.

How It Works

The bot connects to Slack over Socket Mode (an outbound websocket, so no public ingress is required). When a user mentions the bot or DMs it, the bot:

  1. Resolves the Slack user to an Imbi user. It looks up the Slack user's email (users.info), finds the matching active Imbi User in the graph, and mints a short-lived per-user JWT access token signed with the shared IMBI_AUTH_JWT_SECRET — exactly the token the Imbi API issues at login. The resolution is cached with a TTL. Users with no matching Imbi account get a friendly explanation instead.
  2. Reconstructs the thread context from Slack (conversations.replies) so follow-up questions in a thread keep their history. Nothing is persisted server-side; the Slack thread is the conversation.
  3. Runs Claude with the Imbi toolset. Tools are built at startup from the Imbi API's openapi.json via an in-process FastMCP server, using the shared imbi_common.mcp exclusion policy (auth/MFA/status/thumbnail and any x-imbi-ai-tool: false operations are filtered out). The user's minted token is forwarded on every tool call, so the API enforces their permissions.
  4. Replies in-thread with Claude's answer.

A tiny FastAPI app exposes /status (port 8004) for health checks; the Socket Mode connection runs as a background task alongside it.

Configuration

Environment variable Purpose
SLACK_BOT_TOKEN Slack bot token (xoxb-…)
SLACK_APP_TOKEN Slack app-level token for Socket Mode (xapp-…)
ANTHROPIC_API_KEY Anthropic API key (enables the bot when set)
IMBI_AUTH_JWT_SECRET Shared HS256 secret used to mint per-user tokens
IMBI_INTERNAL_API_URL In-cluster base URL of the Imbi API
IMBI_UI_URL Public base URL of the Imbi UI, used to build deep links
IMBI_INTERNAL_UI_URL In-cluster UI address for fetching llms.txt (e.g. the Caddy frontend); falls back to IMBI_UI_URL
POSTGRES_URL Imbi graph (Apache AGE) connection URL
IMBI_SLACKBOT_MODEL Claude model (default claude-sonnet-4-6)

See src/imbi_slackbot/settings.py for the full set.

Development

just setup    # install deps + pre-commit hooks
just test     # run the test suite with coverage
just lint     # ruff + mypy + basedpyright
just serve    # run the bot against .env

Releasing

[project].version in pyproject.toml is the single source of truth (the git tag does not set it). To cut a release:

  1. Bump the version and re-lock in one step: uv version <new-version> (updates pyproject.toml and uv.lock). If a shared-library pin changed (e.g. imbi-common==<version>), update it first so the re-lock picks it up.
  2. Commit, open a PR, and merge to main once CI is green.
  3. Create a GitHub release whose tag is v<version> matching the bumped version. Publishing the release runs .github/workflows/publish.yml, which verifies the tag matches the package version before building and uploading to PyPI — so an un-bumped release fails fast instead of trying to re-publish an existing filename (which PyPI rejects with a 400).

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (2.23.0)

Owner

PyPI data
Data sourced directly from PyPI's database.

Credits

Author: Gavin M. Roy

License expression

BSD-3-Clause
View SPDX License List

Requires

Python >=3.14

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

imbi_slackbot-2.13.2.tar.gz (151.0 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

imbi_slackbot-2.13.2-py3-none-any.whl (34.9 kB view details)

Uploaded Python 3

File details

Details for the file imbi_slackbot-2.13.2.tar.gz.

File metadata

  • Download URL: imbi_slackbot-2.13.2.tar.gz
  • Upload date:
  • Size: 151.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for imbi_slackbot-2.13.2.tar.gz
Algorithm Hash digest
SHA256 d6281bded914b9097439a170ebdc2246f9c39f2b45ad59907f48f8a69f0ce61b
MD5 32b80839463edaa0a8c58b12c0085e2b
BLAKE2b-256 3ec0162073b85de92600f6b47af4f3041cbc9d1de06dc8087ac82ed8b3f6b73f

See more details on using hashes here.

Provenance

The following attestation bundles were made for imbi_slackbot-2.13.2.tar.gz:

Publisher: publish.yml on AWeber-Imbi/imbi-slackbot

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file imbi_slackbot-2.13.2-py3-none-any.whl.

File metadata

  • Download URL: imbi_slackbot-2.13.2-py3-none-any.whl
  • Upload date:
  • Size: 34.9 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for imbi_slackbot-2.13.2-py3-none-any.whl
Algorithm Hash digest
SHA256 990f9087487dabd3df43797555c25ed315a2451ab4e775719ea0b014fb2a56bc
MD5 536fc759a198eb7d1abfc041e2220a4d
BLAKE2b-256 01bf444bf5c5c4cdf60f2ac0012373e34173380c4f6a9fd05b0e6fa38a1d14c0

See more details on using hashes here.

Provenance

The following attestation bundles were made for imbi_slackbot-2.13.2-py3-none-any.whl:

Publisher: publish.yml on AWeber-Imbi/imbi-slackbot

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page