Slack Enterprise MCP Server
This server provides enterprise-grade Slack automation tools, enabling messaging, channel management, search, audit logging, and content summarization.
Send Messages (
send_message) — Send a message to a Slack channel or reply within a thread.Search Messages (
search_messages) — Search across the entire workspace using Slack modifiers (e.g.,in:#channel,from:@user,before:2024-01-01), with sorting by timestamp or relevance.List Channels (
list_channels) — Retrieve public, private, or all channels along with member counts and topics.Get Thread (
get_thread) — Fetch a full message thread including all replies, given a channel and parent message timestamp.Create Channel (
create_channel) — Create a new public or private Slack channel with an optional description.Set Channel Topic (
set_channel_topic) — Update the topic of an existing Slack channel.Get Audit Log (
get_audit_log) — Retrieve an audit trail of all MCP actions performed through the server, with optional filtering by action type — useful for compliance tracking.Summarize Channel (
summarize_channel) — Get a structured summary of the last N messages from a channel, including topic threads, active participants, and key highlights.
Provides enterprise-grade Slack integration with compliance audit trails, enabling AI agents to send messages, search across workspaces, manage channels, retrieve threads, and access detailed audit logs of all actions.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Slack Enterprise MCP Serversend a message to #engineering that the database migration is complete"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Slack Enterprise MCP
Slack Enterprise MCP — automation tooling for slack enterprise
Slack Enterprise MCP — automation tooling for slack enterprise. MIT.
🚀 Quick Start
# Install via pip
pip install slack_enterprise_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install slack-enterprise-mcp --client claudeRelated MCP server: Agent Policy Gateway MCP Server
✨ Features
MCP protocol compliant
Easy installation
Well-documented API
Production-ready
Active maintenance
📖 Documentation
🛡️ Compliance
This MCP server is built with EU AI Act compliance built-in:
✅ Article 9 — Risk Management System
✅ Article 13 — Transparency & Instructions for Use
✅ Article 15 — Bias Detection & Testing
✅ Article 26 — FRIA Support (where applicable)
✅ Article 50 — AI Content Watermarking (where applicable)
Need help getting compliant? Book a free 15-min diagnostic →
🏢 Enterprise
Need custom development, SLA guarantees, or white-label deployment?
Pro: $99/mo — Full MCP suite + EU AI Act tracking
Enterprise: $499/mo — Custom dev + SLA + Dedicated support
View Pricing → | Contact Sales →
🤝 Part of the MEOK Ecosystem
This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.
Domain | Purpose |
EU AI Act compliance marketplace | |
AI safety & monitoring | |
Sovereign AI platform | |
Legacy modernization |
📜 License
MIT © CSOAI-ORG
Pairs with MEOK Governance Suite
Build something that touches users? You need compliance. MEOK ships 38 governance MCPs that drop in alongside this tool — EU AI Act, DORA, NIS2, CRA, GDPR, ISO 42001, FDA SaMD, MDR, Basel, MiFID II, MiCA, COPPA, and more.
# One-shot install of the governance pack
npx meok-setup --pack governanceFree tier: 10 calls/day per MCP. Pro tier (£79/mo): unlimited + cryptographically signed compliance attestations your auditor verifies independently.
→ Full catalogue: councilof.ai/catalogue → MEOK AI Labs: meok.ai
💸 Try MEOK in 30 seconds — instant buy ladder
Tier | Price | What you get | Stripe |
Smoke test | £1 | Signed sample MCP-Hardening report + Article 50 PDF | |
Quick Kit | £9 | EU AI Act Article 50 implementation guide (C2PA + EU-Icon) | |
Founder Call | £29 | 30-min 1-on-1 with the founder |
Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.
Configuration
Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:
{
"mcpServers": {
"slack-enterprise-mcp": {
"command": "uvx",
"args": ["slack-enterprise-mcp"]
}
}
}Or: pip install slack-enterprise-mcp then run the slack-enterprise-mcp command (stdio transport).
Examples
Once configured, ask your assistant, for example:
"Use
send_messageto …""Use
search_messagesto …""Use
list_channelsto …"
Available Tools
8 toolscreate_channelD
Create a new Slack channel. Name must be lowercase, no spaces (use hyphens). Optionally set a description/purpose and make it private.
Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: name (str): The name to analyze or process. description (str): The description to analyze or process. is_private (bool): The is private to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | ||
| description | No | ||
| is_private | No | ||
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description claims the tool is read-only, has no side effects, and is idempotent, which directly contradicts the tool's purpose of creating a channel. This is misleading and harmful.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is excessively long with repeated sections (e.g., 'Behavioral Transparency' appears twice) and includes irrelevant boilerplate, making it verbose and poorly structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a create operation with no output schema, the description fails to explain the actual behavior, side effects, return values, or authentication requirements for creating a Slack channel, leaving critical gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The parameter descriptions in 'Args' are generic placeholders ('The name to analyze or process') that add no domain-specific meaning for channel creation, failing to compensate for the lack of schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts with 'Create a new Slack channel' but immediately contradicts this by stating the tool 'generates structured output without modifying external systems' and is 'read-only', severely muddling the purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'When to use' and 'When NOT to use' sections discuss 'structured analysis or classification', which is irrelevant to channel creation, providing no useful guidance for this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_audit_logA
Return the audit trail of all MCP actions performed through this server. Enterprise compliance feature -- shows who did what and when. Optionally filter by action name (e.g. 'send_message', 'create_channel').
Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: limit (int): The limit to analyze or process. action_filter (str): The action filter to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| action_filter | No | ||
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden and excels: it explicitly states read-only nature, no side effects, rate limits (10/day free, unlimited pro), authentication details, error handling, and idempotency. This is comprehensive and exceeds requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is lengthy with redundancy between 'Behavior' and 'Behavioral Transparency' sections. The 'Args' section is unnecessary given schema. It is structured with headings, but could be more concise without losing key information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers many aspects (purpose, behavior, rate limits, error handling, privacy) but lacks details on parameters and output structure. No output schema exists, and the description does not describe what fields are returned. Parameter descriptions are insufficient. Overall, adequate but with gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, but the 'Args' section only repeats parameter names with generic phrases like 'The limit to analyze or process,' adding no meaningful semantics. The description does not explain what 'limit' means in context (e.g., number of records), nor what valid action_filter values are. Minimal value added over schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Return the audit trail of all MCP actions performed through this server,' which is a specific verb+resource. It distinguishes from sibling tools like send_message or list_channels by focusing on compliance auditing. However, the 'When to use' section is generic and misaligned, slightly reducing clarity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Includes explicit 'When to use' and 'When NOT to use' sections, but the 'When to use' is vague and not specific to audit logs, saying 'structured analysis or classification of inputs'—which doesn't match the tool's purpose. No comparison with sibling tools is provided, limiting differentiation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_threadC
Get a full thread with all replies. Provide the channel ID and the thread's parent message timestamp (thread_ts).
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: channel (str): The channel to analyze or process. thread_ts (str): The thread ts to analyze or process. limit (int): The limit to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| channel | Yes | ||
| thread_ts | Yes | ||
| limit | No | ||
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must cover behavioral traits. It includes a detailed section claiming no side effects, no authentication for basic usage, and local processing, but these contradict the presence of an 'api_key' parameter and the likely external API call. The description is internally inconsistent, reducing trustworthiness.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is overly long with repetitive and irrelevant sections (e.g., generic transparency details not specific to get_thread). The first sentence is concise, but subsequent content is verbose and dilutes clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has 4 parameters, no output schema, and no enums, yet the description omits return value structure, pagination info, or error cases specific to thread fetching. The generic error handling and behavior sections do not compensate for missing specifics.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must add meaning. The 'Args' section merely restates parameter names with generic phrases like 'The channel to analyze or process', adding no new information. It fails to explain format (e.g., thread_ts timestamp syntax) or the role of api_key.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The first line clearly states the tool retrieves a full thread with replies, but the subsequent text describes it as providing structured analysis or classification, which is incongruent and confuses the purpose. The tool is partly distinguishable from siblings (get_thread vs. send_message), but the conflicting descriptions undermine clarity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'When to use' and 'When NOT to use' sections are generic, referencing 'structured analysis' and 'real-time production decision-making', which do not align with the thread retrieval purpose. No guidance is given on when to prefer this tool over siblings like search_messages or list_channels.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_channelsC
List Slack channels with member counts and topics. Types can be 'public_channel', 'private_channel', or 'public_channel,private_channel'.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: limit (int): The limit to analyze or process. types (str): The types to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| types | No | public_channel | |
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The 'Behavioral Transparency' section includes details on side effects, authentication, rate limits, error handling, and idempotency, which is informative. However, the content is largely generic (e.g., mentions 'MEOK API key') and may not accurately reflect Slack channel behavior, reducing relevance.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is lengthy, redundant (e.g., 'Behavior' and 'Behavioral Transparency' overlap), and includes irrelevant generic boilerplate. It is not concise and lacks clear structure focused on the tool's specific purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description omits essential details like what the tool returns (e.g., member counts, topics) and how to use it in Slack context. Despite good annotations coverage, the generic text fails to provide a complete and accurate picture for this specific tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The 'Args' section provides generic descriptions ('The limit to analyze or process') that add no meaningful context beyond the schema. Schema coverage is 0%, so the description fails to clarify what the parameters (limit, types, api_key) actually represent for listing channels.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The first sentence clearly states the tool lists Slack channels with member counts and topics, providing a specific verb and resource. However, subsequent generic text (about 'analysis output', 'classification') dilutes clarity and does not differentiate from siblings like create_channel or get_audit_log.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'When to use' and 'When NOT to use' sections are generic and irrelevant to listing Slack channels. They do not guide the agent on when to choose this tool over siblings (e.g., search_messages, get_thread) or provide context-specific usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_messagesC
Search messages across the entire Slack workspace. Supports Slack search modifiers like 'in:#channel', 'from:@user', 'before:2024-01-01'. Sort by 'timestamp' (newest first) or 'score' (most relevant).
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: query (str): The query to analyze or process. count (int): The count to analyze or process. sort (str): The sort to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | ||
| count | No | ||
| sort | No | timestamp | |
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It includes a detailed 'Behavioral Transparency' section claiming read-only, stateless, and idempotent behavior, but this appears copy-pasted from a generic analysis tool and contradicts the Slack search context (e.g., 'No authentication required' is likely false for Slack). The inconsistency reduces trust.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is excessively long and repetitive, with a main description, a 'When to use' section, an 'Args' list, and a redundant 'Behavioral Transparency' block. The structure is disjointed, and the inclusion of unrelated generic content wastes tokens.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description lacks an explanation of return values or output format, and the generic analysis content dilutes the Slack messaging context. It does not clarify when to use this tool over siblings like get_thread or list_channels, leaving the agent without sufficient context to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description's 'Args' section merely repeats parameter names with generic phrases like 'The query to analyze or process.' It fails to explain how to use Slack-specific modifiers or what valid values are for 'sort' and 'count', leaving agents without meaningful guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a clear purpose: 'Search messages across the entire Slack workspace.' However, later sections (e.g., 'When to use') describe a generic analysis or classification tool, creating confusion and undermining the initial clarity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'When to use' and 'When NOT to use' sections are overly generic and do not help differentiate from sibling tools like list_channels or get_thread. They reference 'structured analysis' rather than message searching, providing poor guidance for tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_messageD
Send a message to a Slack channel or thread. Every message is audit-logged for enterprise compliance. Provide channel name (e.g. #general) or channel ID. Optionally provide thread_ts to reply in a thread.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: channel (str): The channel to analyze or process. text (str): The text to analyze or process. thread_ts (str): The thread ts to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| channel | Yes | ||
| text | Yes | ||
| thread_ts | No | ||
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Declares itself read-only and stateless, which directly contradicts the tool's name and introductory purpose of sending messages. Misleading and unreliable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Excessively long with redundant sections (Behavior and Behavioral Transparency overlap). Despite length, it fails to be clear or concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite extensive text, the description omits fundamental details such as whether the tool actually sends messages or performs analysis. Lacks coherence with siblings.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so description must compensate. However, parameter descriptions are generic and repetitive ('the channel to analyze or process'), adding little meaning beyond parameter names.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description first states it sends a message, then contradicts by claiming read-only analysis. This inconsistency severely undermines purpose clarity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides conflicting guidance: one section says use for sending messages, another says for structured analysis. No clear instructions on when to use vs siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
set_channel_topicD
Update the topic of a Slack channel. Provide channel ID or name.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: channel (str): The channel to analyze or process. topic (str): The topic to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| channel | Yes | ||
| topic | Yes | ||
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The behavioral transparency section provides extensive details about read-only, idempotent, and stateless behavior, but these directly contradict the tool's implied mutation purpose (updating a channel topic). Since no annotations are provided, the description is the sole source of behavioral info, and it is incorrect and misleading.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is excessively long and contains much irrelevant information (analysis, classification, rate limits for pro tier) that does not pertain to updating a channel topic. Important details are buried, and the structure is not front-loaded with the core purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's 3 parameters (2 required) and no output schema, the description fails to explain what the tool returns, error handling specifics, or how to correctly use the parameters. It is completely inadequate for an agent to correctly invoke this tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0% description coverage and the description's 'Args' section merely repeats parameter names (channel, topic, api_key) without adding any semantic meaning. For a tool that updates a Slack channel topic, there is no explanation of what values are valid for channel (ID vs name) or how topic should be formatted.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts by stating 'Update the topic of a Slack channel', which matches the tool name, but then immediately contradicts this by describing the tool as 'read-only and stateless' and focused on 'analysis or classification'. This is misleading and fails to clearly state the tool's actual purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance is provided for when to use this tool for updating a channel topic. The description discusses general analysis use cases, which are irrelevant to the tool's core function, and does not distinguish it from sibling tools like create_channel or send_message.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
summarize_channelA
Get the last N messages from a channel and provide a structured summary. Returns messages grouped by topic threads, active participants, and key highlights.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: channel (str): The channel to analyze or process. message_count (int): The message count to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| channel | Yes | ||
| message_count | No | ||
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so the description carries full burden. It thoroughly covers side effects (read-only, stateless, idempotent), authentication (none for basic, API key for pro), rate limits (10/day free, unlimited pro), error handling (structured errors), and data privacy (no storage or logging).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is verbose and contains repetition (e.g., behavior details appear twice). While well-structured with sections, it could be more concise. Every sentence adds some value, but there is room for trimming.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (3 parameters, no output schema), the description covers all necessary aspects: purpose, parameter semantics, behavioral traits (side effects, auth, rate limits, error handling, idempotency, privacy). It mentions return format ('messages grouped by topic threads, active participants, and key highlights') adequately.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so description must compensate. The 'Args' section lists all three parameters but offers generic, tautological explanations ('The channel to analyze or process'). It does not explain defaults, constraints, or format beyond the schema. Minimal added value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool retrieves the last N messages from a channel and produces a structured summary. It distinguishes itself from sibling tools like get_thread, search_messages, and list_channels by focusing on summarization.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit sections for 'When to use' and 'When NOT to use' provide clear guidance: use for structured analysis, avoid for real-time production decisions without human review. This effectively differentiates usage scenarios.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
8 tool updates
v1.0.0- First observed
create_channel - First observed
get_audit_log - First observed
get_thread - First observed
list_channels - First observed
search_messages - First observed
send_message - First observed
set_channel_topic - First observed
summarize_channel
TDQS
Each tool targets a distinct Slack operation (channel creation, audit log, threads, channels listing, search, messaging, topic setting, summarization). However, the generic boilerplate descriptions about 'analysis and classification' are confusing and could mislead an agent about the actual purpose.
All tool names follow a clear verb_noun pattern in snake_case (e.g., create_channel, get_audit_log, search_messages). No mixing of camelCase or other conventions.
8 tools is a reasonable number for a Slack server. It covers essential operations without being too few or too many, though the domain could support a few more.
The toolset covers basic channel and messaging operations but lacks channel deletion, archiving, user management, and message editing/deletion. The audit log is a plus for enterprise, but notable gaps exist.
Maintenance
Related MCP Connectors
Register every AI agent, log every action, prove it. EU AI Act compliance built in.
Human-in-the-loop review and approval for AI agents. Audit trail, approval policies, native MCP.
Enterprise AI Control Plane: governance, guardrails, spend tracking, compliance & smart routing.
Compliance frameworks (SOC 2, ISO 27001, CMMC, NIST, more) delivered to AI agents as MCP tools.
1
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceTamper-evident cryptographic audit trail for LLM outputs. Compliance logging for AI agent decisions.-
- AlicenseAqualityDmaintenanceCompliance and guardrails infrastructure for AI agents, enabling safe operations within regulatory boundaries like GDPR and EU AI Act.6MIT
- FlicenseNot gradedqualityDmaintenanceEnterprise-grade security for Claude Desktop agents: blocks dangerous actions, requires human approval via Slack, and provides compliance-ready audit logs.4-
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to log, evaluate, and ground consequential decisions against an organization's authority graph, creating a traceable audit trail for governance.MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/CSOAI-ORG/slack-enterprise-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server