Slack Agentic Access
Slack exposes 252 API operations that an AI agent could call, of which 145 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 107 read, 138 write, 2 physical, and 5 safety-critical.
5 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /admin.users.session.reset | safety-critical | required |
| POST | /auth.revoke | safety-critical | required |
| POST | /files.revokePublicURL | safety-critical | required |
| POST | /openid.connect.token | safety-critical | required |
| POST | /usergroups.disable | safety-critical | required |
| POST | /chat.postEphemeral | physical | conditional |
| POST | /chat.postMessage | physical | conditional |
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/slack-admin-openapi.yml, openapi/slack-apps-openapi.yml, openapi/slack-assistant-openapi.yml,
openapi/slack-auth-openapi.yml, openapi/slack-bookmarks-openapi.yml, openapi/slack-bots-openapi.yml,
openapi/slack-calls-openapi.yml, openapi/slack-canvases-openapi.yml, openapi/slack-chat-openapi.yml,
openapi/slack-conversations-openapi.yml, openapi/slack-dialog-openapi.yml, openapi/slack-dnd-openapi.yml,
openapi/slack-emoji-openapi.yml, openapi/slack-files-openapi.yml, openapi/slack-functions-openapi.yml,
openapi/slack-lists-openapi.yml, openapi/slack-migration-openapi.yml, openapi/slack-oauth-openapi.yml,
openapi/slack-openid-connect-openapi.yml, openapi/slack-pins-openapi.yml, openapi/slack-reactions-openapi.yml,
openapi/slack-reminders-openapi.yml, openapi/slack-rtm-openapi.yml, openapi/slack-search-openapi.yml,
openapi/slack-stars-openapi.yml, openapi/slack-team-openapi.yml, openapi/slack-test-api-openapi.yml,
openapi/slack-usergroups-openapi.yml, openapi/slack-users-openapi.yml, openapi/slack-views-openapi.yml,
openapi/slack-web-api-openapi.yml, openapi/slack-workflows-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 252
by_action_class:
acting: 145
connected: 107
by_consequence:
write: 138
read: 107
safety-critical: 5
physical: 2
human_in_the_loop_required: 5
operations:
- path: /admin.apps.approve
method: post
operationId: postAdminAppsApprove
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.apps:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.apps.approved.list
method: get
operationId: getAdminAppsApprovedList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.apps:read
token:
max-ttl: 3600
audit: none
- path: /admin.apps.requests.list
method: get
operationId: getAdminAppsRequestsList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.apps:read
token:
max-ttl: 3600
audit: none
- path: /admin.apps.restrict
method: post
operationId: postAdminAppsRestrict
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.apps:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.apps.restricted.list
method: get
operationId: getAdminAppsRestrictedList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.apps:read
token:
max-ttl: 3600
audit: none
- path: /admin.conversations.archive
method: post
operationId: postAdminConversationsArchive
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.conversations:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.conversations.convertToPrivate
method: post
operationId: postAdminConversationsConverttoprivate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.conversations:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.conversations.create
method: post
operationId: postAdminConversationsCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.conversations:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.conversations.delete
method: post
operationId: postAdminConversationsDelete
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.conversations:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.conversations.disconnectShared
method: post
operationId: postAdminConversationsDisconnectshared
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.conversations:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.conversations.ekm.listOriginalConnectedChannelInfo
method: get
operationId: getAdminConversationsEkmListoriginalconnectedchannelinfo
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.conversations:read
token:
max-ttl: 3600
audit: none
- path: /admin.conversations.getConversationPrefs
method: get
operationId: getAdminConversationsGetconversationprefs
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.conversations:read
token:
max-ttl: 3600
audit: none
- path: /admin.conversations.getTeams
method: get
operationId: getAdminConversationsGetteams
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.conversations:read
token:
max-ttl: 3600
audit: none
- path: /admin.conversations.invite
method: post
operationId: postAdminConversationsInvite
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.conversations:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.conversations.rename
method: post
operationId: postAdminConversationsRename
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.conversations:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.conversations.restrictAccess.addGroup
method: post
operationId: postAdminConversationsRestrictaccessAddgroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.conversations:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.conversations.restrictAccess.listGroups
method: get
operationId: getAdminConversationsRestrictaccessListgroups
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.conversations:read
token:
max-ttl: 3600
audit: none
- path: /admin.conversations.restrictAccess.removeGroup
method: post
operationId: postAdminConversationsRestrictaccessRemovegroup
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.conversations:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.conversations.search
method: get
operationId: getAdminConversationsSearch
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.conversations:read
token:
max-ttl: 3600
audit: none
- path: /admin.conversations.setConversationPrefs
method: post
operationId: postAdminConversationsSetconversationprefs
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.conversations:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.conversations.setTeams
method: post
operationId: postAdminConversationsSetteams
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.conversations:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.conversations.unarchive
method: post
operationId: postAdminConversationsUnarchive
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.conversations:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.emoji.add
method: post
operationId: postAdminEmojiAdd
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.teams:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.emoji.addAlias
method: post
operationId: postAdminEmojiAddalias
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.teams:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.emoji.list
method: get
operationId: getAdminEmojiList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.teams:read
token:
max-ttl: 3600
audit: none
- path: /admin.emoji.remove
method: post
operationId: postAdminEmojiRemove
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.teams:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.emoji.rename
method: post
operationId: postAdminEmojiRename
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.teams:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.inviteRequests.approve
method: post
operationId: postAdminInviterequestsApprove
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.invites:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.inviteRequests.approved.list
method: get
operationId: getAdminInviterequestsApprovedList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.invites:read
token:
max-ttl: 3600
audit: none
- path: /admin.inviteRequests.denied.list
method: get
operationId: getAdminInviterequestsDeniedList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.invites:read
token:
max-ttl: 3600
audit: none
- path: /admin.inviteRequests.deny
method: post
operationId: postAdminInviterequestsDeny
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.invites:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.inviteRequests.list
method: get
operationId: getAdminInviterequestsList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.invites:read
token:
max-ttl: 3600
audit: none
- path: /admin.teams.admins.list
method: get
operationId: getAdminTeamsAdminsList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.teams:read
token:
max-ttl: 3600
audit: none
- path: /admin.teams.create
method: post
operationId: postAdminTeamsCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.teams:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.teams.list
method: get
operationId: getAdminTeamsList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.teams:read
token:
max-ttl: 3600
audit: none
- path: /admin.teams.owners.list
method: get
operationId: getAdminTeamsOwnersList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.teams:read
token:
max-ttl: 3600
audit: none
- path: /admin.teams.settings.info
method: get
operationId: getAdminTeamsSettingsInfo
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.teams:read
token:
max-ttl: 3600
audit: none
- path: /admin.teams.settings.setDefaultChannels
method: post
operationId: postAdminTeamsSettingsSetdefaultchannels
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.teams:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.teams.settings.setDescription
method: post
operationId: postAdminTeamsSettingsSetdescription
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.teams:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.teams.settings.setDiscoverability
method: post
operationId: postAdminTeamsSettingsSetdiscoverability
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.teams:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.teams.settings.setIcon
method: post
operationId: postAdminTeamsSettingsSeticon
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.teams:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.teams.settings.setName
method: post
operationId: postAdminTeamsSettingsSetname
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.teams:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.usergroups.addChannels
method: post
operationId: postAdminUsergroupsAddchannels
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.usergroups:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.usergroups.addTeams
method: post
operationId: postAdminUsergroupsAddteams
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.teams:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.usergroups.listChannels
method: get
operationId: getAdminUsergroupsListchannels
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.usergroups:read
token:
max-ttl: 3600
audit: none
- path: /admin.usergroups.removeChannels
method: post
operationId: postAdminUsergroupsRemovechannels
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.usergroups:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.users.assign
method: post
operationId: postAdminUsersAssign
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.users:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.users.invite
method: post
operationId: postAdminUsersInvite
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.users:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.users.list
method: get
operationId: getAdminUsersList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- admin.users:read
token:
max-ttl: 3600
audit: none
- path: /admin.users.remove
method: post
operationId: postAdminUsersRemove
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.users:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.users.session.invalidate
method: post
operationId: postAdminUsersSessionInvalidate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.users:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.users.session.reset
method: post
operationId: postAdminUsersSessionReset
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
scope:
- admin.users:write
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /admin.users.setAdmin
method: post
operationId: postAdminUsersSetadmin
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.users:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.users.setExpiration
method: post
operationId: postAdminUsersSetexpiration
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.users:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.users.setOwner
method: post
operationId: postAdminUsersSetowner
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.users:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /admin.users.setRegular
method: post
operationId: postAdminUsersSetregular
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- admin.users:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /apps.event.authorizations.list
method: get
operationId: getAppsEventAuthorizationsList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- authorizations:read
token:
max-ttl: 3600
audit: none
- path: /apps.permissions.info
method: get
operationId: getAppsPermissionsInfo
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- none
token:
max-ttl: 3600
audit: none
- path: /apps.permissions.request
method: get
operationId: getAppsPermissionsRequest
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- none
token:
max-ttl: 3600
audit: none
- path: /apps.permissions.resources.list
method: get
operationId: getAppsPermissionsResourcesList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- none
token:
max-ttl: 3600
audit: none
- path: /apps.permissions.scopes.list
method: get
operationId: getAppsPermissionsScopesList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- none
token:
max-ttl: 3600
audit: none
- path: /apps.permissions.users.list
method: get
operationId: getAppsPermissionsUsersList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- none
token:
max-ttl: 3600
audit: none
- path: /apps.permissions.users.request
method: get
operationId: getAppsPermissionsUsersRequest
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- none
token:
max-ttl: 3600
audit: none
- path: /apps.uninstall
method: get
operationId: getAppsUninstall
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- none
token:
max-ttl: 3600
audit: none
- path: /assistant.threads.setStatus
method: post
operationId: postAssistantThreadsSetStatus
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- assistant:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /assistant.threads.setSuggestedPrompts
method: post
operationId: postAssistantThreadsSetSuggestedPrompts
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- assistant:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /assistant.threads.setTitle
method: post
operationId: postAssistantThreadsSetTitle
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- assistant:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /auth.revoke
method: get
operationId: getAuthRevoke
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- none
token:
max-ttl: 3600
audit: none
- path: /auth.test
method: get
operationId: getAuthTest
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- none
token:
max-ttl: 3600
audit: none
- path: /bookmarks.add
method: post
operationId: postBookmarksAdd
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- bookmarks:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /bookmarks.edit
method: post
operationId: postBookmarksEdit
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- bookmarks:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /bookmarks.list
method: get
operationId: getBookmarksList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- bookmarks:read
token:
max-ttl: 3600
audit: none
- path: /bookmarks.remove
method: post
operationId: postBookmarksRemove
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- bookmarks:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /bots.info
method: get
operationId: getBotsInfo
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- users:read
token:
max-ttl: 3600
audit: none
- path: /calls.add
method: post
operationId: calls_add
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- calls:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /calls.end
method: post
operationId: calls_end
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- calls:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /calls.info
method: get
operationId: calls_info
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- calls:read
token:
max-ttl: 3600
audit: none
- path: /calls.participants.add
method: post
operationId: calls_participants_add
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- calls:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /calls.participants.remove
method: post
operationId: calls_participants_remove
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- calls:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /calls.update
method: post
operationId: calls_update
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- calls:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /canvases.create
method: post
operationId: postCanvasesCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- canvases:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /canvases.delete
method: post
operationId: postCanvasesDelete
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- canvases:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /canvases.edit
method: post
operationId: postCanvasesEdit
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- canvases:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /canvases.access.delete
method: post
operationId: postCanvasesAccessDelete
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- canvases:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /canvases.access.set
method: post
operationId: postCanvasesAccessSet
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- canvases:write
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /canvases.sections.lookup
method: post
operationId: postCanvasesSectionsLookup
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- canvases:read
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /chat.delete
method: post
operationId: postChatDelete
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- chat:write:bot
- chat:write:user
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /chat.deleteScheduledMessage
method: post
operationId: postChatDeletescheduledmessage
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- chat:write:bot
- chat:write:user
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /chat.getPermalink
method: get
operationId: getChatGetpermalink
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- none
token:
max-ttl: 3600
audit: none
- path: /chat.meMessage
method: post
operationId: postChatMemessage
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- chat:write:bot
- chat:write:user
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /chat.postEphemeral
method: post
operationId: pos
# --- truncated at 32 KB (80 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/slack/refs/heads/main/agentic-access/slack-agentic-access.yml