slack-mcp-server

Security Findings (152)

• HighExcessive Permission Surface ×42

  • SLACK_ADD_A_CUSTOM_EMOJI_TO_A_SLACK_TEAM:tool declares network permission
  • SLACK_ADD_A_REMOTE_FILE_FROM_A_SERVICE:tool declares network permission
  • SLACK_ADD_EMOJI:tool declares network permission
  • SLACK_CHAT_POST_MESSAGE:tool declares network permission
  • SLACK_CREATE_A_SLACK_USER_GROUP:tool declares exec permission
  • SLACK_CREATE_CHANNEL_BASED_CONVERSATION:tool declares exec permission
  • SLACK_CUSTOMIZE_URL_UNFURL:tool declares network permission
  • SLACK_CUSTOMIZE_URL_UNFURLING_IN_MESSAGES:tool declares network permission
  • SLACK_ENABLE_PUBLIC_SHARING_OF_A_FILE:tool declares network permission
  • SLACK_FETCH_BOT_USER_INFORMATION:tool declares network permission
  • SLACK_FETCH_CONVERSATION_HISTORY:tool declares network permission
  • SLACK_FETCH_CURRENT_TEAM_INFO_WITH_OPTIONAL_TEAM_SCOPE:tool declares network permission
  • SLACK_FETCH_DND_STATUS_FOR_MULTIPLE_TEAM_MEMBERS:tool declares network permission
  • SLACK_FETCH_ITEM_REACTIONS:tool declares network permission
  • SLACK_FETCH_MESSAGE_THREAD_FROM_A_CONVERSATION:tool declares network permission
  • SLACK_FETCH_TEAM_INFO:tool declares network permission
  • SLACK_FETCH_WORKSPACE_SETTINGS_INFORMATION:tool declares network permission
  • SLACK_GET_REMOTE_FILE:tool declares network permission
  • SLACK_LIST_REMOTE_FILES:tool declares network permission
  • SLACK_LIST_SLACK_S_REMOTE_FILES_WITH_FILTERS:tool declares network permission
  • SLACK_LIST_TEAM_CUSTOM_EMOJIS:tool declares network permission
  • SLACK_REGISTERS_A_NEW_CALL_WITH_PARTICIPANTS:tool declares network permission
  • SLACK_REMOVE_A_REMOTE_FILE:tool declares network permission
  • SLACK_RETRIEVE_DETAILED_INFORMATION_ABOUT_A_FILE:tool declares network permission
  • SLACK_RETRIEVE_MESSAGE_PERMALINK_URL:tool declares network permission
  • SLACK_RETRIEVE_REMOTE_FILE_INFO_IN_SLACK:tool declares network permission
  • SLACK_REVOKE_PUBLIC_SHARING_ACCESS_FOR_A_FILE:tool declares network permission
  • SLACK_SCHEDULE_MESSAGE:tool declares network permission
  • SLACK_SCHEDULES_A_MESSAGE_TO_A_CHANNEL_AT_A_SPECIFIED_TIME:tool declares network permission
  • SLACK_SEARCH_ALL:tool declares network permission
  • SLACK_SEARCH_FOR_MESSAGES_WITH_QUERY:tool declares network permission
  • SLACK_SEARCH_MESSAGES:tool declares network permission
  • SLACK_SEND_EPHEMERAL_MESSAGE:tool declares network permission
  • SLACK_SEND_MESSAGE:tool declares network permission
  • SLACK_SENDS_A_MESSAGE_TO_A_SLACK_CHANNEL:tool declares network permission
  • SLACK_SENDS_EPHEMERAL_MESSAGES_TO_CHANNEL_USERS:tool declares network permission
  • SLACK_SHARE_REMOTE_FILE_IN_CHANNELS:tool declares network permission
  • SLACK_START_CALL:tool declares network permission
  • SLACK_START_REAL_TIME_MESSAGING_SESSION:tool declares network permission
  • SLACK_UPDATE_AN_EXISTING_SLACK_USER_GROUP:tool declares exec permission
  • SLACK_UPDATES_AN_EXISTING_REMOTE_FILE:tool declares network permission
  • SLACK_UPDATE_SLACK_CALL_INFORMATION:tool declares network permission

  Rule: AS-002Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.
• HighInsecure Secret Handling ×9

  • SLACK_ADD_A_CUSTOM_EMOJI_TO_A_SLACK_TEAM:input parameter "token" appears to accept a secret or credential
  • SLACK_ADD_AN_EMOJI_ALIAS_IN_SLACK:input parameter "token" appears to accept a secret or credential
  • SLACK_ADD_A_REMOTE_FILE_FROM_A_SERVICE:input parameter "token" appears to accept a secret or credential
  • SLACK_ADD_EMOJI:input parameter "token" appears to accept a secret or credential
  • SLACK_DELETE_USER_PROFILE_PHOTO:input parameter "token" appears to accept a secret or credential
  • SLACK_REMOVE_A_REMOTE_FILE:input parameter "token" appears to accept a secret or credential
  • SLACK_RENAME_AN_EMOJI:input parameter "token" appears to accept a secret or credential
  • SLACK_UPDATES_AN_EXISTING_REMOTE_FILE:input parameter "token" appears to accept a secret or credential
  • SLACK_UPLOAD_OR_CREATE_A_FILE_IN_SLACK:input parameter "token" appears to accept a secret or credential

  Rule: AS-010Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.
• MediumExcessive Permission Surface ×50

  • SLACK_ADD_A_REMOTE_FILE_FROM_A_SERVICE:tool declares fs permission
  • SLACK_ADD_A_STAR_TO_AN_ITEM:tool declares fs permission
  • SLACK_CREATE_A_REMINDER:tool declares fs permission
  • SLACK_CREATE_A_SLACK_USER_GROUP:tool declares fs permission
  • SLACK_CREATE_CANVAS:tool declares fs permission
  • SLACK_CREATE_CHANNEL:tool declares fs permission
  • SLACK_CREATE_CHANNEL_BASED_CONVERSATION:tool declares fs permission
  • SLACK_DELETE_A_COMMENT_ON_A_FILE:tool declares fs permission
  • SLACK_DELETE_A_FILE_BY_ID:tool declares fs permission
  • SLACK_DELETE_A_PUBLIC_OR_PRIVATE_CHANNEL:tool declares fs permission
  • SLACK_DELETE_A_SCHEDULED_MESSAGE_IN_A_CHAT:tool declares fs permission
  • SLACK_DELETE_A_SLACK_REMINDER:tool declares fs permission
  • SLACK_DELETE_CANVAS:tool declares fs permission
  • SLACK_DELETES_A_MESSAGE_FROM_A_CHAT:tool declares fs permission
  • SLACK_DELETE_USER_PROFILE_PHOTO:tool declares fs permission
  • SLACK_ENABLE_PUBLIC_SHARING_OF_A_FILE:tool declares fs permission
  • SLACK_FETCH_ITEM_REACTIONS:tool declares fs permission
  • SLACK_GET_REMOTE_FILE:tool declares fs permission
  • SLACK_LIST_ALL_USERS:tool declares fs permission
  • SLACK_LIST_CANVASES:tool declares fs permission
  • SLACK_LIST_FILES_WITH_FILTERS_IN_SLACK:tool declares fs permission
  • SLACK_LIST_REMOTE_FILES:tool declares fs permission
  • SLACK_LIST_SLACK_S_REMOTE_FILES_WITH_FILTERS:tool declares fs permission
  • SLACK_LISTS_PINNED_ITEMS_IN_A_CHANNEL:tool declares fs permission
  • SLACK_LIST_USER_REACTIONS:tool declares fs permission
  • SLACK_REMOVE_A_REMOTE_FILE:tool declares fs permission
  • SLACK_REMOVE_A_STAR_FROM_AN_ITEM:tool declares fs permission
  • SLACK_REMOVE_A_USER_FROM_A_CONVERSATION:tool declares fs permission
  • SLACK_REMOVE_CALL_PARTICIPANTS:tool declares fs permission
  • SLACK_REMOVE_REACTION_FROM_ITEM:tool declares fs permission
  • SLACK_RETRIEVE_DETAILED_INFORMATION_ABOUT_A_FILE:tool declares fs permission
  • SLACK_RETRIEVE_REMOTE_FILE_INFO_IN_SLACK:tool declares fs permission
  • SLACK_RETRIEVE_TEAM_PROFILE_DETAILS:tool declares fs permission
  • SLACK_RETRIEVE_USER_PROFILE_INFORMATION:tool declares fs permission
  • SLACK_REVOKE_PUBLIC_SHARING_ACCESS_FOR_A_FILE:tool declares fs permission
  • SLACK_SEARCH_ALL:tool declares fs permission
  • SLACK_SEARCH_FOR_MESSAGES_WITH_QUERY:tool declares fs permission
  • SLACK_SEARCH_FOR_MESSAGES_WITH_QUERY:tool declares db permission
  • SLACK_SEARCH_MESSAGES:tool declares fs permission
  • SLACK_SEARCH_MESSAGES:tool declares db permission
  • SLACK_SET_PROFILE_PHOTO:tool declares fs permission
  • SLACK_SET_SLACK_USER_PROFILE_INFORMATION:tool declares fs permission
  • SLACK_SET_USER_PROFILE_PHOTO_WITH_CROPPING_OPTIONS:tool declares fs permission
  • SLACK_SHARE_REMOTE_FILE_IN_CHANNELS:tool declares fs permission
  • SLACK_UPDATE_AN_EXISTING_SLACK_USER_GROUP:tool declares fs permission
  • SLACK_UPDATES_AN_EXISTING_REMOTE_FILE:tool declares fs permission
  • SLACK_UPDATES_A_SLACK_MESSAGE:tool declares fs permission
  • SLACK_UPDATE_SLACK_CALL_INFORMATION:tool declares fs permission
  • SLACK_UPDATE_USER_GROUP_MEMBERS:tool declares fs permission
  • SLACK_UPLOAD_OR_CREATE_A_FILE_IN_SLACK:tool declares fs permission

  Rule: AS-002Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.
• LowDoS Resilience — Missing Rate Limit / Timeout ×43

  • SLACK_ADD_A_CUSTOM_EMOJI_TO_A_SLACK_TEAM:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_ADD_A_REMOTE_FILE_FROM_A_SERVICE:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_ADD_EMOJI:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_CHAT_POST_MESSAGE:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_CREATE_A_SLACK_USER_GROUP:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_CREATE_CHANNEL_BASED_CONVERSATION:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_CUSTOMIZE_URL_UNFURL:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_CUSTOMIZE_URL_UNFURLING_IN_MESSAGES:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_ENABLE_PUBLIC_SHARING_OF_A_FILE:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_FETCH_BOT_USER_INFORMATION:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_FETCH_CONVERSATION_HISTORY:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_FETCH_CURRENT_TEAM_INFO_WITH_OPTIONAL_TEAM_SCOPE:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_FETCH_DND_STATUS_FOR_MULTIPLE_TEAM_MEMBERS:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_FETCH_ITEM_REACTIONS:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_FETCH_MESSAGE_THREAD_FROM_A_CONVERSATION:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_FETCH_TEAM_INFO:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_FETCH_WORKSPACE_SETTINGS_INFORMATION:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_GET_REMOTE_FILE:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_INVITE_USER_TO_CHANNEL:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_LIST_REMOTE_FILES:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_LIST_SLACK_S_REMOTE_FILES_WITH_FILTERS:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_LIST_TEAM_CUSTOM_EMOJIS:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_REGISTERS_A_NEW_CALL_WITH_PARTICIPANTS:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_REMOVE_A_REMOTE_FILE:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_RETRIEVE_DETAILED_INFORMATION_ABOUT_A_FILE:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_RETRIEVE_MESSAGE_PERMALINK_URL:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_RETRIEVE_REMOTE_FILE_INFO_IN_SLACK:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_REVOKE_PUBLIC_SHARING_ACCESS_FOR_A_FILE:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_SCHEDULE_MESSAGE:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_SCHEDULES_A_MESSAGE_TO_A_CHANNEL_AT_A_SPECIFIED_TIME:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_SEARCH_ALL:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_SEARCH_FOR_MESSAGES_WITH_QUERY:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_SEARCH_MESSAGES:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_SEND_EPHEMERAL_MESSAGE:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_SEND_MESSAGE:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_SENDS_A_MESSAGE_TO_A_SLACK_CHANNEL:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_SENDS_EPHEMERAL_MESSAGES_TO_CHANNEL_USERS:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_SHARE_REMOTE_FILE_IN_CHANNELS:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_START_CALL:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_START_REAL_TIME_MESSAGING_SESSION:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_UPDATE_AN_EXISTING_SLACK_USER_GROUP:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_UPDATES_AN_EXISTING_REMOTE_FILE:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • SLACK_UPDATE_SLACK_CALL_INFORMATION:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  Rule: AS-011Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.
• LowExcessive Permission Surface ×8

  • SLACK_CHAT_POST_MESSAGE:input schema exposes 16 properties (threshold: 10)
  • SLACK_INVITE_USER_TO_CHANNEL:tool declares http permission
  • SLACK_SCHEDULE_MESSAGE:input schema exposes 13 properties (threshold: 10)
  • SLACK_SCHEDULES_A_MESSAGE_TO_A_CHANNEL_AT_A_SPECIFIED_TIME:input schema exposes 13 properties (threshold: 10)
  • SLACK_SEND_EPHEMERAL_MESSAGE:input schema exposes 12 properties (threshold: 10)
  • SLACK_SEND_MESSAGE:input schema exposes 16 properties (threshold: 10)
  • SLACK_SENDS_A_MESSAGE_TO_A_SLACK_CHANNEL:input schema exposes 16 properties (threshold: 10)
  • SLACK_SENDS_EPHEMERAL_MESSAGES_TO_CHANNEL_USERS:input schema exposes 12 properties (threshold: 10)

  Rule: AS-002Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.