Secure read-only MCP server for Slack workspaces
Project description
mcp-slack-crunchtools
Secure read-only MCP server for Slack workspaces. Provides Claude Code (and other MCP clients) with access to your Slack channels, messages, users, and files without any write permissions.
Features
- Read-only: 15 tools, all read-only. Never posts, edits, or deletes anything.
- Secure: 6-layer security model (input validation, token handling, client hardening, output sanitization, runtime protection, supply chain security).
- User OAuth Token: Uses
xoxp-tokens for user-scoped access to your workspace. - No SDK dependency: Uses
httpxdirectly for minimal, auditable HTTP calls.
Quick Start
Using uvx (Recommended)
claude mcp add mcp-slack-crunchtools \
--env SLACK_USER_TOKEN=xoxp-your-token \
-- uvx mcp-slack-crunchtools
Using Container
claude mcp add mcp-slack-crunchtools \
--env SLACK_USER_TOKEN=xoxp-your-token \
-- podman run -i --rm -e SLACK_USER_TOKEN quay.io/crunchtools/mcp-slack
Local Development
claude mcp add mcp-slack-crunchtools \
--env SLACK_USER_TOKEN=xoxp-your-token \
-- uv run mcp-slack-crunchtools
Setup
See CLAUDE.md for detailed instructions on creating a Slack app and obtaining a User OAuth Token.
Tools
| Tool | Description |
|---|---|
slack_auth_test |
Test connection and get token owner info |
slack_list_channels |
List workspace channels |
slack_get_channel_info |
Get channel details |
slack_get_channel_history |
Read channel messages |
slack_get_thread_replies |
Read thread replies |
slack_list_channel_members |
List channel members |
slack_search_messages |
Search messages |
slack_get_reactions |
Get message reactions |
slack_list_reactions |
List user's reactions |
slack_list_stars |
List starred items |
slack_get_user_info |
Get user details |
slack_list_users |
List workspace members |
slack_get_user_profile |
Get user profile |
slack_list_files |
List files (metadata only) |
slack_get_file_info |
Get file metadata |
Security
See SECURITY.md for the full security design document.
License
AGPL-3.0-or-later
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file mcp_slack_crunchtools-0.1.2.tar.gz.
File metadata
- Download URL: mcp_slack_crunchtools-0.1.2.tar.gz
- Upload date:
- Size: 39.7 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
f964666f43faf3eec108ae50527664a93401ab2c664128676837f499e3830cf2
|
|
| MD5 |
c20f347d4fbccc273cb52fdfce6ed832
|
|
| BLAKE2b-256 |
a33debd08c5f1ba88869865cafc51368d4ffa5cf51425283f7ef9a5afea07866
|
Provenance
The following attestation bundles were made for mcp_slack_crunchtools-0.1.2.tar.gz:
Publisher:
publish.yml on crunchtools/mcp-slack
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
mcp_slack_crunchtools-0.1.2.tar.gz -
Subject digest:
f964666f43faf3eec108ae50527664a93401ab2c664128676837f499e3830cf2 - Sigstore transparency entry: 1181819015
- Sigstore integration time:
-
Permalink:
crunchtools/mcp-slack@0a812ddd7549c81972e96d44b5e0f341f1be23bf -
Branch / Tag:
refs/tags/v0.1.2 - Owner: https://github.com/crunchtools
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@0a812ddd7549c81972e96d44b5e0f341f1be23bf -
Trigger Event:
release
-
Statement type:
File details
Details for the file mcp_slack_crunchtools-0.1.2-py3-none-any.whl.
File metadata
- Download URL: mcp_slack_crunchtools-0.1.2-py3-none-any.whl
- Upload date:
- Size: 28.3 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
ee6763f2ed559fd18954d5de9684eb14c4b5e4492e3f9b5f5d9a12179bec61b2
|
|
| MD5 |
b9f14ba1964ef5e5f4bb843296b3f0c5
|
|
| BLAKE2b-256 |
44be8de07a2b8fad0d25b1a5e2302a28bbf5b3a1e62990a83304ff6ee8a252ea
|
Provenance
The following attestation bundles were made for mcp_slack_crunchtools-0.1.2-py3-none-any.whl:
Publisher:
publish.yml on crunchtools/mcp-slack
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
mcp_slack_crunchtools-0.1.2-py3-none-any.whl -
Subject digest:
ee6763f2ed559fd18954d5de9684eb14c4b5e4492e3f9b5f5d9a12179bec61b2 - Sigstore transparency entry: 1181819028
- Sigstore integration time:
-
Permalink:
crunchtools/mcp-slack@0a812ddd7549c81972e96d44b5e0f341f1be23bf -
Branch / Tag:
refs/tags/v0.1.2 - Owner: https://github.com/crunchtools
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@0a812ddd7549c81972e96d44b5e0f341f1be23bf -
Trigger Event:
release
-
Statement type: