Slack

Which Slack permissions Attributed requests and why

A breakdown of the OAuth scopes Attributed asks for and what each one does.


Which Slack permissions Attributed requests and why

When you click Add to Slack, Slack shows a permission screen. Here's what each scope is for.

ScopeWhat it lets us doWhy we need it
chat:writePost messages as the Attributed botTo deliver findings and Implementation Packs
chat:write.publicPost in public channels the bot hasn't been added toSo you don't have to manually invite the bot to public channels
channels:readList public channelsPowers the channel picker during install
groups:readList private channels you're a member ofPowers the channel picker for private channels
team:readRead workspace name and iconShown in Integrations so you can tell workspaces apart
incoming-webhookPost to a specific channel via webhookThe destination channel you select during install

What we do not request

  • We do not request channels:history or groups:history — we never read messages from your channels.
  • We do not request users:read.email or any user data scopes beyond what's needed to identify the installer.
  • We do not request files:write — we don't upload files to Slack.

See our privacy policy for how the data we do store is handled.

Still need help?

Email support and we'll get back within one business day.

Email support
Back to all articles