Slack

After installing Slack, your application exchanges a Keycard-issued access token for a token scoped to this resource. Pass the user’s access token as the subject_token.

from keycardai.oauth import Client, BasicAuth, TokenType
import requests

# Exchange the user's Keycard token for a Slack token.
with Client(
    "https://<zone-id>.keycard.cloud",
    auth=BasicAuth("<your-client-id>", "<your-client-secret>"),
) as client:
    response = client.exchange_token(
        subject_token=user_access_token,
        subject_token_type=TokenType.ACCESS_TOKEN,
        resource="https://slack.com/api",
    )

# Call Slack directly with the exchanged token.
r = requests.get(
    "https://slack.com/api/<endpoint>",
    headers={"Authorization": f"Bearer {response.access_token}"},
)

import { TokenExchangeClient } from "@keycardai/oauth/tokenExchange";

const client = new TokenExchangeClient("https://<zone-id>.keycard.cloud", {
  clientId: "<your-client-id>",
  clientSecret: "<your-client-secret>",
});

const response = await client.exchangeToken({
  subjectToken: userAccessToken,
  resource: "https://slack.com/api",
});

// Call Slack directly with the exchanged token.
const res = await fetch("https://slack.com/api/<endpoint>", {
  headers: { Authorization: `Bearer ${response.accessToken}` },
});

See the OAuth SDK → Token Exchange reference for the full client API.

1. Go to the Slack API Dashboard
2. Click Create New App → From scratch
3. Enter an app name and select the workspace you want to develop against
4. Click Create App

1. In OAuth & Permissions, scroll to Redirect URLs
2. Click Add New Redirect URL
3. Enter the redirect URI provided by Keycard
4. Click Save URLs

1. In Basic Information, scroll to App Credentials
2. Note the Client ID and Client Secret

1. Open Keycard Console → your zone → Resources
2. Click Explore Resources
3. Find and click Slack in the catalog
4. In the configuration dialog:
   • Enter the Client ID and Client Secret from your Slack app
   • Review the User scopes - the defaults (chat:write, channels:read, users:read) are pre-populated
5. Click Add Slack API

After adding the resource, go to the Slack provider settings and expand Advanced options. Slack’s OAuth v2 API uses non-standard parameter names, so you must set the following values:

• Catalog overview - browse other API and MCP servers
• Access policies - control who can use Slack
• Identity providers - control who can sign in