Skip to content

Mark slack-mcp verified and name the toggle it needs - #65

Merged
haruotsu merged 1 commit into
mainfrom
verify-slack-mcp-and-name-the-mcp-toggle
Sep 9, 2026
Merged

Mark slack-mcp verified and name the toggle it needs#65
haruotsu merged 1 commit into
mainfrom
verify-slack-mcp-and-name-the-mcp-toggle

Conversation

@haruotsu

@haruotsu haruotsu commented Sep 9, 2026

Copy link
Copy Markdown
Collaborator

slack-mcp has now been taken through Gemini Enterprise from end to end:
consent screen, code exchange, and the MCP server answering a search call
with results. The entry records that, and one condition it did not have.

setup says what was seen, not what the metadata suggests

The paragraph that opened "No authorization has been taken through Gemini
Enterprise yet" and its five unconfirmed items are replaced by what the run
settled:

  • the code exchange goes through however Gemini Enterprise sends the client
    secret (post or Basic was not observed, and a connection has no field to
    say which)
  • the consent screen is built from the scopes sent under scope;
    user_scope was not needed
  • access_type and prompt on the authorization URL are ignored
  • resource (RFC 8707) is not required

Refreshing stays unconfirmed: no token issued here has lived long enough to
expire. The oauth: comments on token_url, scope_parameter and
authorization_query are rewritten the same way.

the Model Context Protocol toggle

Setup did not mention it, and it is the one thing that makes a correct token
look broken. With Model Context Protocol off under Features -> Agents & AI
Apps, the server answers initialize with 400 and "App is not enabled",
after it has read the token - a token it does not accept answers 401
invalid_token instead. Turning it on needs neither a reinstall nor a fresh
authorization, so a token taken before the toggle keeps working.

tests

tests/conformance/test_catalog.py: the entry is now expected to carry the
verification date, setup to name the toggle, the 400, and the reinstall it
does not need, and to leave exactly one line unconfirmed - the refresh one.
Written first, red, then the entry.

Scopes, the optional menu, hosts and token shapes are untouched.

An authorization has now been taken through Gemini Enterprise end to end:
consent, code exchange, and a search tool answering through the MCP server.
Everything setup listed as read off the server's metadata rather than seen
to work is settled, so it says what happened instead of what might. Only
refreshing stays unconfirmed - no token issued here has expired yet.

The run also turned up a condition setup did not have. Unless the Slack app
has Model Context Protocol on under Features -> Agents & AI Apps, the server
answers initialize with 400, having already read the token: a correct token
looks broken, and the 401 a bad one gets never appears. Setup now says so,
and that the toggle costs nothing already granted.

🤖 Generated with Claude Code
@haruotsu
haruotsu merged commit b920dc4 into main Sep 9, 2026
3 checks passed
@haruotsu
haruotsu deleted the verify-slack-mcp-and-name-the-mcp-toggle branch September 9, 2026 10:30
@github-actions github-actions Bot mentioned this pull request Sep 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant