{
  "entry": {
    "kind": "mcp",
    "slug": "slack-mcp-server",
    "name": "Slack MCP Server",
    "vendor": "Slack",
    "description": "Slack's official remote MCP server gives agents access to messages, channels, users, and canvases — reading conversation history for context and posting on your behalf.\n\nCapabilities are outbound network access and credential access. Slack is simultaneously the richest informal knowledge base in most companies and the least curated one: an integration that can search history can surface things said in confidence years ago. It is also a first-class injection surface, since anyone in a shared channel can write text an agent will later read. Scope to specific channels, prefer read-only, and treat an agent that can post as an agent that can be socially engineered into posting.",
    "website": "https://api.slack.com/docs/mcp",
    "repository": null,
    "documentationUrl": "https://api.slack.com/docs/mcp",
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [
      "network:outbound",
      "credentials:access"
    ],
    "packaging": null,
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 20,
      "band": "low",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "1 high-risk capability: credentials:access",
          "contribution": 10
        }
      ],
      "dangerousCombos": []
    },
    "dangerousCombos": []
  }
}