Slack is in beta. It has not yet run against a real Slack workspace, and it is available only once
your deployment’s operator has registered the Slack app. Until then, Integrations → Slack says
so.
Connect your workspace
You need the owner or admin role.- In the console, open Integrations → Slack.
- Choose the assistant that should answer, and select Add to Slack.
- Slack asks you to allow the app in your workspace. Allow it, and you are back in the console with the workspace connected.
- In Slack, invite the bot to each channel where people should be able to mention it:
/invite @<bot name>. Direct messages work without an invitation.
What it can and cannot do
The permissions Slack asks you to allow are
app_mentions:read, chat:write and im:history, and
no others.
A Slack workspace can be connected to one MITHUNAI organisation, and an organisation to one Slack
workspace.
Only people in your own workspace are answered. Someone from another company in a shared
channel or through Slack Connect gets no reply, so inviting the bot there does not open your
knowledge to them.
Removing the app in Slack disconnects it here too, and so does revoking its token: nothing more
is answered, and Integrations → Slack shows it disconnected.
Approve AI-employee actions from Slack
This is Beta, off by default, and access on request. When your deployment has it switched on, an AI employee’s action that is waiting for approval can be posted to Slack as a card with Allow once, Always allow and Deny.- Choose where cards go. An owner or admin whose Slack account is linked mentions the bot with
approvals herein the channel that should receive them (invite the bot there first), andapprovals offto stop. - Link your Slack account once. Send the bot
linkin a direct message. It replies with a link that works once, for fifteen minutes; open it signed in to the console, check the Slack account it shows, and continue. The console shows a six-digit code: send it to the bot in that same direct message within ten minutes. Only then is your Slack account linked — opening the link alone links nothing. You can unlink under Integrations → Slack. Your Slack account is never matched to you by e-mail. - A card is decided as you. Pressing a button decides as the person the Slack account is linked to, with that person’s own permission to approve, exactly as in the console: the payload you saw, two-person rules and expiry all apply. The card then shows what was decided. Someone whose Slack account is not linked is told, privately, how to link, and nothing is decided.
- Always allow is never offered for an action that moves money, deletes, publishes or changes access, or one that always needs a person. The console refuses it too.
MITHUNAI_SLACK_APPROVALS and sets the Slack app’s
Interactivity Request URL. It needs no permission beyond the three above.
When it does not answer
- No reply at all: the bot is not in the channel (invite it), the workspace is not connected, the person asking is from another workspace, or your organisation is suspended.
- “I can’t answer right now”: your monthly answer allowance is used up, or the assistant could not be reached. Try again later, or check Analytics.
- “I don’t know”: the assistant found nothing in your knowledge that answers the question. See Coverage gaps for what to add.
- An approval card still shows its buttons after the action was decided elsewhere: a card is not updated when the action is decided in the console or expires. Pressing a button then says it is already decided.
- Approval cards stop arriving: the bot was removed from the approvals channel (invite it back), or the person who installed the bot left or lost access to AI employees (reconnect the workspace). Approve in the console meanwhile.
- The console names your Slack account by an ID, not a name: the bot cannot read your workspace’s member list, so the link page shows the Slack user ID. Check it against your own profile in Slack.
Security
- Every request from Slack is verified with your deployment’s signing secret, over its exact bytes, and refused if it is more than five minutes old.
- The organisation and assistant always come from the connection made in the console, never from the message, so a message cannot reach another organisation’s knowledge.
- A message is treated as a question and nothing more. Instructions inside it cannot change what the assistant may do.
- The bot’s token is stored sealed and is never shown. Disconnecting revokes it.
- A press on an approval card is verified the same way, and decides only as the person the Slack account was linked to, never as the workspace.