Before you start
- Permission to install apps in your Slack workspace.
Step-by-step
- 1
Connect
Integrations → Slack → Connect, then "Continue with Slack" and choose the channel to post to.
- 2
Confirm the channel
Slack returns an incoming webhook for the channel you pick; the bot token is stored encrypted.
Security best practices
- Use OAuth v2 bot tokens with only chat:write and the channels you need.
- Verify inbound requests from Slack using the signing secret and the v0 signature scheme (reject stale timestamps).
- Credentials are encrypted at rest with AES-256-GCM — they are never stored in plain text.
- Only organization owners and admins can create or modify a connection.
- Prefer OAuth where available: it issues short-lived, scoped, revocable tokens instead of long-lived secrets.
- When you must use a token, create a fine-grained, least-privilege token and rotate it periodically.