id: slack name: Slack version: 1.0.0 description: "Slack (Web API) — SOC notification and ChatOps: post messages (text or Block Kit), list/create channels, invite users, set channel topics, look up users, and add reactions. Bot-token authentication; stdlib-only, no extra Python dependencies." changelog: "1.0.0 — Initial release: send message, list/create channel, invite to channel, set topic, get user, add reaction." category: notification # Per-instance configuration. The bot token (xoxb-...) is sent as # 'Authorization: Bearer '. Needs scopes such as chat:write, # channels:read, channels:manage, users:read, users:read.email, reactions:write. config_schema: properties: bot_token: type: string description: "Slack bot token (xoxb-...)" x-soar-sensitive: true required: - bot_token commands: - id: send_message name: slack-send-message description: "Post a message to a channel or user (text and/or Block Kit blocks)." inputs_schema: properties: channel: { type: string, description: "Channel ID, channel name (#alerts), or user ID for a DM" } text: { type: string, description: "Message text (fallback text when blocks are used)" } blocks: { type: string, description: "Optional Block Kit blocks as a JSON array string" } thread_ts: { type: string, description: "Optional parent message ts to reply in a thread" } required: [channel] outputs_schema: { properties: {} } - id: list_channels name: slack-list-channels description: "List channels (public and private the bot can see)." risk: read inputs_schema: properties: types: { type: string, description: "Comma-separated channel types (default 'public_channel,private_channel')" } limit: { type: number, description: "Max channels (default 200)" } required: [] outputs_schema: { properties: {} } - id: create_channel name: slack-create-channel description: "Create a new channel." inputs_schema: properties: name: { type: string, description: "Channel name (lowercase, no spaces)" } is_private: { type: boolean, description: "Create a private channel (default false)" } required: [name] outputs_schema: { properties: {} } - id: invite_to_channel name: slack-invite-to-channel description: "Invite one or more users to a channel." inputs_schema: properties: channel: { type: string, description: "Channel ID" } users: { type: string, description: "Comma-separated user IDs to invite" } required: [channel, users] outputs_schema: { properties: {} } - id: set_channel_topic name: slack-set-channel-topic description: "Set a channel's topic." inputs_schema: properties: channel: { type: string, description: "Channel ID" } topic: { type: string, description: "New topic text" } required: [channel, topic] outputs_schema: { properties: {} } - id: get_user name: slack-get-user description: "Look up a user by ID or email address." risk: read inputs_schema: properties: user_id: { type: string, description: "User ID (provide this or email)" } email: { type: string, description: "Email address (provide this or user_id)" } required: [] outputs_schema: { properties: {} } - id: add_reaction name: slack-add-reaction description: "Add an emoji reaction to a message." inputs_schema: properties: channel: { type: string, description: "Channel ID of the message" } timestamp: { type: string, description: "Message ts" } emoji: { type: string, description: "Emoji name without colons (e.g. eyes)" } required: [channel, timestamp, emoji] outputs_schema: { properties: {} } - id: test_connection name: slack-test-connection description: "Verify connectivity and the bot token (used by the Test button)." risk: read inputs_schema: properties: {} required: [] outputs_schema: { properties: {} }