Skip to main content
Receive a press on an approval card from Slack
This is the address you give Slack as the app’s Request URL under Interactivity & Shortcuts. Slack calls it when someone presses Allow once, Always allow or Deny on an AI employee’s approval card. Nothing else can call it: every request must carry Slack’s v0 signature over its exact body, at most five minutes old, and one that does not verify is refused with 401 before anything in it is read.
  • The press is decided as the person the clicker’s Slack account is linked to, in the organisation that connected the workspace, with that person’s own permission to approve — exactly as in the console. Approving needs the payload the card showed.
  • The card is then replaced, for everyone in the channel, with what was decided.
  • Nothing is decided — and only the person who pressed is told why — when their Slack account is not linked, the same press arrives twice, the approvals service refuses (no permission, already decided, changed since the card was posted), or approvals from Slack are switched off. A press by someone from another workspace decides nothing and is not answered.
The organisation is always the one that connected the workspace, and the person is always the one the clicker linked. Nothing in the press can choose another.
Approvals from Slack are in beta and off by default: this route answers 404 until the Slack app is registered, and decides nothing until the operator switches on MITHUNAI_SLACK_APPROVALS. It has not yet run against a real Slack workspace.

Response

Returns 200 with no body, whatever was decided.
Last modified on November 11, 2026