{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-11T21:27:53.457Z", "record_id": "VXI-EXT-TOOL-TRUST-SLACK-01-v1", "record_kind": "external_reference", "title": "Slack MCP: Search scope and posting authority", "system": "Slack MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "What should an agent check before searching private Slack content without posting messages?", "near_questions": [ "How can I search team chat without giving an agent permission to post?", "Which Slack MCP scopes allow private channel searches?", "Does Slack search access also permit sending messages?", "Can a Slack connector retrieve direct message history?", "Does an app IP allowlist apply to Slack MCP?", "Can an unlisted app use the official Slack MCP server?", "What must be checked before sharing a retrieved Slack message?", "Are Slackbot MCP connections the same as Slack MCP server access?", "Should instructions inside Slack messages control an agent?", "Which workspace identity will a Slack tool use?", "What does a saved Slack permission review preserve?", "Does this Slack profile establish client data retention?" ], "supported_claims": [ { "claim": "Slack documents separate user-token scopes for searches, conversation history and posting. Review the authorized workspace, requested content and client data handling before retrieval. A search permission does not authorize sending a message, and connecting Slack to another tool creates a separate disclosure decision. This record reviews the official server, not Slackbot's connections to third-party servers.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent tool execution or security testing", "Vendor certification, guaranteed safety or no-training assurance" ], "public_summary": "Slack documents separate user-token scopes for searches, conversation history and posting. Review the authorized workspace, requested content and client data handling before retrieval. A search permission does not authorize sending a message, and connecting Slack to another tool creates a separate disclosure decision. This record reviews the official server, not Slackbot's connections to third-party servers.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-ASANA-01-v1", "VXI-EXT-TOOL-TRUST-HUBSPOT-01-v1", "VXI-EXT-TOOL-TRUST-FIGMA-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Slack MCP tools, scopes and client access", "source_url": "https://docs.slack.dev/ai/slack-mcp-server/", "checked_on": "2026-10-11", "candidate_record_id": "VXI-EXT-TOOL-TRUST-SLACK-01-v1", "candidate_record_sha256": "167d749a41ab098ea05f099f04c876ead01b1446479b5da1dbebb66a0d1a007a", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "Slack documents separate user-token scopes for searches, conversation history and posting. Review the authorized workspace, requested content and client data handling before retrieval. A search permission does not authorize sending a message, and connecting Slack to another tool creates a separate disclosure decision. This record reviews the official server, not Slackbot's connections to third-party servers.", "required_buyer_context": "Slack's official hosted MCP server for external clients; not the Slackbot MCP client or a community Slack connector. Actual workspace grants, channel visibility, client recipients and retention.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Slack MCP", "variant": "Slack's official hosted MCP server for external clients; not the Slackbot MCP client or a community Slack connector." }, "review_status": "documentation_review_only", "checked_on": "2026-10-11", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, feature entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Slack operates the official hosted server.", "source_ids": [ "slack-main" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Retrieve workspace context and perform supported Slack actions.", "source_ids": [ "slack-overview" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Searches, files and conversation history require their respective user-token scopes.", "source_ids": [ "slack-main" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Posting, reactions, canvases and channel creation have separate write scopes.", "source_ids": [ "slack-main" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "Confidential OAuth is documented for Marketplace or internal apps; unlisted apps are excluded.", "source_ids": [ "slack-main" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "Scope grants and configured app IP allowlists apply to MCP requests.", "source_ids": [ "slack-main" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Slack content reaches the connected client; onward sharing depends on the client and other tools.", "source_ids": [ "slack-main" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Overbroad private-channel access, unintended posting, or following instructions inside retrieved messages.", "source_ids": [ "slack-main" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Actual workspace grants, channel visibility, client recipients and retention.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "For a search task, withhold posting and cross-tool sharing unless separately authorized.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "slack-main", "url": "https://docs.slack.dev/ai/slack-mcp-server/", "final_url": "https://docs.slack.dev/ai/slack-mcp-server/", "title": "Slack MCP tools, scopes and client access", "checked_on": "2026-10-11", "sha256": "2974027071b91d6963a15f8c9365fd732daa864b87762d10beee746622653141", "bytes": 60455 }, { "source_id": "slack-overview", "url": "https://docs.slack.dev/ai/mcp-overview/", "final_url": "https://docs.slack.dev/ai/mcp-overview/", "title": "Slack MCP server and client distinction", "checked_on": "2026-10-11", "sha256": "59b1df50cfb0680feb7961ac67be0b1d5d5c39f9de04de317ec537bfae3dc0e1", "bytes": 40353 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Preserve the scope and disclosure questions used when approving a chat-search connector.", "free": "Complete profile, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Recheck user-token scopes, app distribution status and IP allowlists when the connection changes." }, "change_history": [ { "version": 1, "date": "2026-10-11", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#slack-mcp-search-posting-trust", "machine_readable_record": "/varexis-index/records/slack-mcp-search-posting-trust.json" }