Slack

1. In your zone’s Keycard Console, go to Resources -> Explore Resources.

2. Search for Slack and click into the catalog entry.

3. The install dialog shows a Redirect URI. Copy it - you’ll paste it into Slack in Step 2. Leave this Keycard tab open.

1. Go to the Slack API Dashboard
2. Click Create New App → From scratch
3. Enter an app name and select the workspace you want to develop against
4. Click Create App

1. In OAuth & Permissions, scroll to Redirect URLs
2. Click Add New Redirect URL
3. Enter the redirect URI provided by Keycard
4. Click Save URLs

1. In Basic Information, scroll to App Credentials
2. Note the Client ID and Client Secret

1. Switch back to the Keycard install dialog you left open in Step 1.

2. Paste the Client ID and Client Secret from Step 2.

3. Click Add Slack. The resource is provisioned and your app can start exchanging tokens for it.

After adding the resource, go to the Slack provider settings and expand Advanced options. Slack’s OAuth v2 API uses non-standard parameter names, so you must set the following values:

After installing Slack, your application exchanges a Keycard-issued access token for a token scoped to this resource. Pass the user’s access token as the subject_token.

from keycardai.oauth import Client, BasicAuth, TokenType
import requests

# Exchange the user's Keycard token for a Slack token.
with Client(
    "https://<zone-id>.keycard.cloud",
    auth=BasicAuth("<your-client-id>", "<your-client-secret>"),
) as client:
    response = client.exchange_token(
        subject_token=user_access_token,
        subject_token_type=TokenType.ACCESS_TOKEN,
        resource="https://slack.com/api",
    )

# Call Slack directly with the exchanged token.
r = requests.get(
    "https://slack.com/api/<endpoint>",
    headers={"Authorization": f"Bearer {response.access_token}"},
)

import { TokenExchangeClient } from "@keycardai/oauth/tokenExchange";

const client = new TokenExchangeClient("https://<zone-id>.keycard.cloud", {
  clientId: "<your-client-id>",
  clientSecret: "<your-client-secret>",
});

const response = await client.exchangeToken({
  subjectToken: userAccessToken,
  resource: "https://slack.com/api",
});

// Call Slack directly with the exchanged token.
const res = await fetch("https://slack.com/api/<endpoint>", {
  headers: { Authorization: `Bearer ${response.accessToken}` },
});

See the OAuth SDK → Token Exchange reference for the full client API.

Now do this

• Call Slack from your code - see the Use Slack from your code section above for Python and TypeScript samples.

Recommended

• Decide who can use it - write access policies scoped to the Slack resource so only the right users and apps reach the API.
• Watch the calls - every token exchange and downstream call lands in your audit log with user identity, resource, and policy decision.

Optional

• End-to-end example - see the Slack agent tutorial for a working integration.