imbi-slackbot

A Slack bot for the Imbi DevOps service management platform. It behaves like the Imbi assistant — giving Claude live access to Imbi data and actions through tools — but speaks Slack and acts as the Slack user who asked, so every answer and action respects that user's Imbi permissions.

How It Works

The bot connects to Slack over Socket Mode (an outbound websocket, so no public ingress is required). When a user mentions the bot or DMs it, the bot:

  1. Resolves the Slack user to an Imbi user. It looks up the Slack user's email (users.info), finds the matching active Imbi User in the graph, and mints a short-lived per-user JWT access token signed with the shared IMBI_AUTH_JWT_SECRET — exactly the token the Imbi API issues at login. The resolution is cached with a TTL. Users with no matching Imbi account get a friendly explanation instead.
  2. Reconstructs the thread context from Slack (conversations.replies) so follow-up questions in a thread keep their history. Nothing is persisted server-side; the Slack thread is the conversation.
  3. Runs Claude with the Imbi toolset. Tools are built at startup from the Imbi API's openapi.json via an in-process FastMCP server, using the shared imbi_common.mcp exclusion policy (auth/MFA/status/thumbnail and any x-imbi-ai-tool: false operations are filtered out). The user's minted token is forwarded on every tool call, so the API enforces their permissions.
  4. Replies in-thread with Claude's answer.

A tiny FastAPI app exposes /status (port 8004) for health checks; the Socket Mode connection runs as a background task alongside it.

Configuration

Environment variable Purpose
SLACK_BOT_TOKEN Slack bot token (xoxb-…)
SLACK_APP_TOKEN Slack app-level token for Socket Mode (xapp-…)
ANTHROPIC_API_KEY Anthropic API key (enables the bot when set)
IMBI_AUTH_JWT_SECRET Shared HS256 secret used to mint per-user tokens
IMBI_INTERNAL_API_URL In-cluster base URL of the Imbi API
IMBI_UI_URL Public base URL of the Imbi UI, used to build deep links
IMBI_INTERNAL_UI_URL In-cluster UI address for fetching llms.txt (e.g. the Caddy frontend); falls back to IMBI_UI_URL
POSTGRES_URL Imbi graph (Apache AGE) connection URL
IMBI_SLACKBOT_MODEL Claude model (default claude-sonnet-4-6)

See src/imbi_slackbot/settings.py for the full set.

Development

just setup    # install deps + pre-commit hooks
just test     # run the test suite with coverage
just lint     # ruff + mypy + basedpyright
just serve    # run the bot against .env

Releasing

[project].version in pyproject.toml is the single source of truth (the git tag does not set it). To cut a release:

  1. Bump the version and re-lock in one step: uv version <new-version> (updates pyproject.toml and uv.lock). If a shared-library pin changed (e.g. imbi-common==<version>), update it first so the re-lock picks it up.
  2. Commit, open a PR, and merge to main once CI is green.
  3. Create a GitHub release whose tag is v<version> matching the bumped version. Publishing the release runs .github/workflows/publish.yml, which verifies the tag matches the package version before building and uploading to PyPI — so an un-bumped release fails fast instead of trying to re-publish an existing filename (which PyPI rejects with a 400).

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (2.23.0)

Owner

PyPI data
Data sourced directly from PyPI's database.

Credits

Author: Gavin M. Roy

License expression

BSD-3-Clause
View SPDX License List

Requires

Python >=3.14

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

imbi_slackbot-2.15.0.tar.gz (151.0 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

imbi_slackbot-2.15.0-py3-none-any.whl (34.8 kB view details)

Uploaded Python 3

File details

Details for the file imbi_slackbot-2.15.0.tar.gz.

File metadata

  • Download URL: imbi_slackbot-2.15.0.tar.gz
  • Upload date:
  • Size: 151.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.14

File hashes

Hashes for imbi_slackbot-2.15.0.tar.gz
Algorithm Hash digest
SHA256 403cb13790b339d8dfbde04f99d375cea433824077a82fa1402eb444cf7b7aee
MD5 f348d3fa14d6b2963c2ed8d1f5de17e2
BLAKE2b-256 5ebd9add1d6be3f89b67b040da112b7721bc9f32e97f35b97f2f220703d0ddd9

See more details on using hashes here.

Provenance

The following attestation bundles were made for imbi_slackbot-2.15.0.tar.gz:

Publisher: publish.yml on AWeber-Imbi/imbi-slackbot

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file imbi_slackbot-2.15.0-py3-none-any.whl.

File metadata

  • Download URL: imbi_slackbot-2.15.0-py3-none-any.whl
  • Upload date:
  • Size: 34.8 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.14

File hashes

Hashes for imbi_slackbot-2.15.0-py3-none-any.whl
Algorithm Hash digest
SHA256 2350f324b8aed41da0b73eb9b88c256acc6dbe27d6a9eca1b07cc71bac717ddf
MD5 fc53130ef3d19cd9320aad266c4d9ed6
BLAKE2b-256 03a82bf1ea2e4c331df0438449a36ff1565464a6bdd9edcb4e918ecc07cfe7a3

See more details on using hashes here.

Provenance

The following attestation bundles were made for imbi_slackbot-2.15.0-py3-none-any.whl:

Publisher: publish.yml on AWeber-Imbi/imbi-slackbot

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page