This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
ReleasePort's take
Light signalSlack MCP v4.3.0 adds automatic token refresh capabilities through a new --refresh-tokens CLI flag and macOS LaunchAgent template. Documentation has been reorganized and MCP configuration guidance improved.
Why it matters: Token expiry is a common operational burden. Automation eliminates manual refresh workflows. Recommended for teams managing long-running Slack integrations.
Summary
AI summaryAdded --refresh-tokens CLI flag to automate token refresh and updated documentation.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds --refresh-tokens CLI flag for automatic token refresh Adds --refresh-tokens CLI flag for automatic token refresh Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Adds macOS LaunchAgent template for twice-daily token refresh Adds macOS LaunchAgent template for twice-daily token refresh Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Low |
Adds --refresh-tokens CLI flag to run Chrome auto‑extract path Adds --refresh-tokens CLI flag to run Chrome auto‑extract path Source: granite4.1:30b@2026-05-23-audit Confidence: low |
— |
| Bugfix | Medium |
Corrects SETUP.md MCP configuration troubleshooting guidance Corrects SETUP.md MCP configuration troubleshooting guidance Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Corrects SETUP.md troubleshooting to verify MCP config JSON syntax Corrects SETUP.md troubleshooting to verify MCP config JSON syntax Source: granite4.1:30b@2026-05-23-audit Confidence: low |
— |
| Refactor | Medium |
Reorganizes CLAUDE.md tool documentation into grouped categories Reorganizes CLAUDE.md tool documentation into grouped categories Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Refactor | Medium |
Improves README clarity on tool counts and release notes Improves README clarity on tool counts and release notes Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Refactor | Low |
Updates CLAUDE.md tool count from 16 to 21 and regroups categories Updates CLAUDE.md tool count from 16 to 21 and regroups categories Source: granite4.1:30b@2026-05-23-audit Confidence: low |
— |
| Refactor | Low |
Removes version pinning from Workflow Primitives heading in README Removes version pinning from Workflow Primitives heading in README Source: granite4.1:30b@2026-05-23-audit Confidence: low |
— |
| Refactor | Low |
Clarifies footer math in README regarding Slack tool counts Clarifies footer math in README regarding Slack tool counts Source: granite4.1:30b@2026-05-23-audit Confidence: low |
— |
| Refactor | Low |
Makes "What's New in 4.2.0" section collapsible using <details> Makes "What's New in 4.2.0" section collapsible using <details> Source: granite4.1:30b@2026-05-23-audit Confidence: low |
— |
Full changelog
Added
--refresh-tokensCLI flag —npx -y @jtalk22/slack-mcp --refresh-tokensnow runs the Chrome auto-extract path (equivalent tonpm run tokens:auto). Closes the gap between the wizard-only--setupflag and the unscheduled-by-default token-refresh capability. Designed to be called from a LaunchAgent, cron, or CI to keep tokens fresh while Claude is closed for weeks at a time.- Token-refresh LaunchAgent docs (
docs/SETUP.md) — Optional macOS LaunchAgent template that runs--refresh-tokenstwice a day, regardless of whether Claude is running. Closes the "tokens expired after vacation" failure mode. Honest about the trade-off (Chrome must be running for extraction to succeed).
Changed
- Tool count in maintainer docs —
CLAUDE.mdupdated from 16 to 21 tools, regrouped into Slack reads (12) / Slack writes (4) / workflow primitives (2) / hosted-brain upgrade stubs (3). Aligns with README's Tools section. - README clarity — Workflow Primitives heading no longer pinned to "(new in 4.2)" — version info moved into body copy. Footer math clarified: "16 Slack tools (12 read, 4 write)" replaces the ambiguous "all 16 read/write Slack tools". "What's New in 4.2.0" section now collapsible (
<details>) — sets a maintenance pattern for future release-note rollups.
Fixed
- SETUP.md troubleshooting — "Verify the path to server.js is correct" replaced with "Verify JSON syntax in your client's MCP config", aligning with the npx invocation pattern that's already canonical elsewhere in the docs.
Install
npx -y @jtalk22/[email protected] --setup
To keep tokens fresh while the MCP client is closed, see the optional LaunchAgent setup.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About jtalk22/slack-mcp-server
Your complete Slack context for Claude—DMs, channels, threads, search. No OAuth apps, no admin approval. `--setup` and done, 11 tools, auto-refresh.
Related context
Beta — feedback welcome: [email protected]