This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryOAuth token death detection now provides structured recovery guidance and pricing surfaces display live tiers.
Full changelog
OAuth Lifeboat — recovery at the moment of pain
Slack rotates browser session tokens (xoxc/xoxd) roughly every 1–2 weeks. Until now, a dead token meant every tool call failed with a raw invalid_auth. From 4.4.3, the server detects token death (invalid_auth, not_authed, token_expired, token_revoked, account_inactive, HTTP 401) in both transports and the slack_health_check connectivity test, and returns structured recovery guidance instead:
- Self-fix first — re-extract with
npx -y @jtalk22/slack-mcp --setup(macOS: theslack_refresh_tokenstool). - Permanent fix second — hosted OAuth never rotates. Free tier, no card.
The long-form message appears at most once per process per hour (agents in retry loops get a one-liner). SLACK_MCP_NO_UPSELL=1 keeps the self-fix guidance and drops the hosted mention entirely.
Pricing surfaces now match the live storefront
Every public surface (README, manifests, docs, demo pages, setup wizard, in-tool upgrade prompts) now carries the live tiers: Free 2,000 requests + 25 tool calls/mo · Pro $19/mo or $190/yr · Team $49/mo or $490/yr flat · Safeguard $199/mo waitlist. Dated release notes are untouched history.
Tests: 19 passing (11 new). Full changelog: CHANGELOG.md
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About jtalk22/slack-mcp-server
Your complete Slack context for Claude—DMs, channels, threads, search. No OAuth apps, no admin approval. `--setup` and done, 11 tools, auto-refresh.
Related context
Beta — feedback welcome: [email protected]