Slack

Overview

OAuth installs must identify the intended Slack workspace. Messages require approved channel IDs and explicit approval. No arbitrary channel access or automatic sends.

Setup & requirements

Identity preflight passed for the supplied credentials; production installation, channel approval and a real approved message remain unverified. Callback: https://app.mailraft.com/api/integrations/slack/callback.

Usage & verification

Provide the approved workspace ID and channel IDs before installation. OAuth requests chat:write only. Identity checks compare auth.test against the configured workspace. The optional channels.read MailRaft action checks one configured channel, bot membership and archive status; it needs an existing channels:read permission for a public channel or groups:read for a private one, not message-history access.

MailRaft never enumerates arbitrary channels. A missing provider read scope is a denied connection check, not permission to widen scopes silently. messages.send requires both an allowed channel and server-held approval for the exact content. OAuth install and channel acceptance remain pending owner approval.

Example

{"action":"channels.read","params":{"channel":"<approved-channel-id>"}}