01-authentication-setup.md•3.33 kB
### 1. Authentication Setup
Open up your Slack in your browser and login.
#### Lookup `SLACK_MCP_XOXC_TOKEN`
- Open your browser's Developer Console.
- In Firefox, under `Tools -> Browser Tools -> Web Developer tools` in the menu bar
- In Chrome, click the "three dots" button to the right of the URL Bar, then select
`More Tools -> Developer Tools`
- Switch to the console tab.
- Type "allow pasting" and press ENTER.
- Paste the following snippet and press ENTER to execute:
`JSON.parse(localStorage.localConfig_v2).teams[document.location.pathname.match(/^\/client\/([A-Z0-9]+)/)[1]].token`
Token value is printed right after the executed command (it starts with
`xoxc-`), save it somewhere for now.
#### Lookup `SLACK_MCP_XOXD_TOKEN`
- Switch to "Application" tab and select "Cookies" in the left navigation pane.
- Find the cookie with the name `d`. That's right, just the letter `d`.
- Double-click the Value of this cookie.
- Press Ctrl+C or Cmd+C to copy it's value to clipboard.
- Save it for later.
#### Alternative: Using `SLACK_MCP_XOXP_TOKEN` (User OAuth)
Instead of using browser-based tokens (`xoxc`/`xoxd`), you can use a User OAuth token:
1. Go to [api.slack.com/apps](https://api.slack.com/apps) and create a new app
2. Under "OAuth & Permissions", add the following scopes:
- `channels:history` - View messages in public channels
- `channels:read` - View basic information about public channels
- `groups:history` - View messages in private channels
- `groups:read` - View basic information about private channels
- `im:history` - View messages in direct messages.
- `im:read` - View basic information about direct messages
- `im:write` - Start direct messages with people on a user’s behalf (new since `v1.1.18`)
- `mpim:history` - View messages in group direct messages
- `mpim:read` - View basic information about group direct messages
- `mpim:write` - Start group direct messages with people on a user’s behalf (new since `v1.1.18`)
- `users:read` - View people in a workspace.
- `chat:write` - Send messages on a user’s behalf. (new since `v1.1.18`)
- `search:read` - Search a workspace’s content. (new since `v1.1.18`)
3. Install the app to your workspace
4. Copy the "User OAuth Token" (starts with `xoxp-`)
To create the app from a manifest with permissions preconfigured, use the following code snippet:
```json
{
"display_information": {
"name": "Slack MCP"
},
"oauth_config": {
"scopes": {
"user": [
"channels:history",
"channels:read",
"groups:history",
"groups:read",
"im:history",
"im:read",
"im:write",
"mpim:history",
"mpim:read",
"mpim:write",
"users:read",
"chat:write",
"search:read"
]
}
},
"settings": {
"org_deploy_enabled": false,
"socket_mode_enabled": false,
"token_rotation_enabled": false
}
}
```
> **Note**: You only need **either** XOXP token **or** both XOXC/XOXD tokens. XOXP user tokens are more secure and don't require browser session extraction.
See next: [Installation](02-installation.md)