Back to Gap Map Product / UX / Agent tools & connectors

Slack MCP Server

Dmitry Korotovsky
open source / Overall score: 3.0

Actively maintained community Slack MCP server (Go) connecting AI agents to Slack workspaces over stdio/SSE/HTTP, with a 'stealth mode' needing no bot install or workspace permissions plus an OAuth mode. Exposes 18 tools (history, search, posting, reactions, channel/user management).

There is no first-party Slack MCP server; the original reference server was archived, and this is the maintained community one. The PyPI package of the same name is an unedited template and is not this product, so adoption reads the npm package.

Openness

5 high confidence
5.0
license
MIT(OSI)
source
public
core features withheld
no

Fully MIT, no feature-gated core. The LICENSE is the plain MIT License, the whole Go server ships in the tree and installs from npm or Docker with no key, and the maintainer sells nothing beside it - no hosted tier, enterprise directory or second license.

Adoption

3 medium confidence
3.0

Adoption is measured by npm downloads of slack-mcp-server, whose registry metadata points at korotovsky/slack-mcp-server. A same-named PyPI package is an unedited template and a different thing entirely, so only the npm figure is counted here.

Capability

3 medium confidence
3.0

Slack MCP offers a curated tool surface over one workspace, but the caller supplies the credential directly: every documented path ends with a token to find and paste, whether an OAuth token from a Slack app the caller creates or a session token extracted from the browser's own storage. The server performs no OAuth flow of its own, leaving it level with Playwright MCP.

  • https://raw.githubusercontent.com/korotovsky/slack-mcp-server/master/docs/01-authentication-setup.md recorded 2026-09-17

    The authentication setup guide: "You only need one of the following: an xoxp-* User OAuth token, an xoxb-* Bot token, or both xoxc-* and xoxd-* session tokens", with the xoxc path instructing the reader to open the browser console, type "allow pasting" and run a snippet against `localStorage.localConfig_v2` to print the token. Every path ends with the caller holding a secret to configure.

Verified 2026-09-17, except some scores, still awaiting re-confirmation