agent-slack

LLM-shaped output — NDJSON lists, JSON single resources, empty fields pruned aggressively, bodies truncatable with --max-body-chars

Live delivery without polling — message await blocks until the next reply or reaction, message stream emits NDJSON events, both over the WebSocket the Slack client itself uses, so neither spends rate-limit budget

Fourteen command domains — message, channel, user, usergroup, emoji, search, workflow, canvas, unreads, later, file, cache, config and a raw api escape hatch

Workflow support — discover bookmarked workflows, preview triggers, inspect form fields and steps, and run them with --field form submission

Keychain-first credentials — browser (xoxc/xoxd) and bot (xoxb/xoxp) tokens live in the OS keychain and are never printed back

Mutation safety — edit, delete, cancel, channel new/invite and emoji add/remove require --yes, and describe what they would do without it

MCP server with named principals — pair add --bind workspace=<alias> gives each person their own fail-closed workspace binding

Browser self-enrollment — a principal minted without --bind pastes their own Slack token during OAuth approval; it is verified via auth.test and bound automatically

Filesystem-free clients supported — a read-only fs MCP tool reads back downloaded attachments, images returned as image blocks

Six credential import paths — Slack Desktop, or chrome, brave, firefox, zen, opera and safari

Multi-workspace — disambiguate with --workspace by URL or substring, or let a permalink carry the workspace

Tested against a fixture Slack server — mockslack serves a fake event socket too, so await and stream are exercised without a real workspace