QAmcp

Copied. Paste it into Claude Code, Cursor or Codex:Fetch and follow the instructions at https://qamcp.dev/setup.md to test my MCP server.

Your AI finds your server in your project, tests it with QAmcp, explains what's wrong in plain words, fixes it with your OK, and tests again. Read the instructions

SoonYour score can change any day. QAmcp Monitor tests your server every hour and emails you when it breaks.See what Monitor does →

Directory / Slack MCP by Nova (CIVAI)

Slack MCP by Nova (CIVAI)

Q: Is Slack MCP by Nova (CIVAI) server safe?

QAmcp's test on 2 Nov 2026: None of the hidden-instruction wordings we know were found in its tool descriptions. 0 of its 17 tools are labeled read-only; the others may change or send things. Overall it scored 74/100 on 2 Nov 2026. A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

by nova.civai.co · https://nova.civai.co/mcp/agents/mcp-slack_android

Use Slack from chat: see channels, catch up on messages, post updates, and reply in threads in your…

17 tools✓ no account neededPricing: not listed

Visit website

74 /100

PASS · WITH NOTES

Partial: 9 of 12 checks · 2 Nov 2026

Is Slack MCP by Nova (CIVAI) server safe?

None of the hidden-instruction wordings we know were found in its tool descriptions.
0 of its 17 tools are labeled read-only; the others may change or send things.
Overall it scored 74/100 on 2 Nov 2026.

A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

What it can do

17 tools, in the server's own words.

session_status

Verify Slack mobile session (run before other tools).

list_channels

List Slack channels and group DMs (mobile client.channels).

channel_info

Channel name and member count for a channel id.

list_channel_members

List member user ids in a Slack channel.

list_workspace_users

List users in the workspace.

search_people

Search people by name or email fragment.

post_message_rich

Post using mobile Block Kit blocks (message_blocks_json).

thread_replies

Read messages in a thread.

reply_thread

Post a reply in a thread.

delete_message

Delete one of your messages.

post_message

Post a message to a Slack channel or DM using the mobile user session.

conversation_history

Fetch recent messages in a channel.

open_conversation

Open a DM conversation with a Slack user id.

create_channel

Create a channel (may be restricted on some workspaces).

user_boot

Workspace client bootstrap after login.

list_workspaces

List workspaces after email confirmation.

confirm_email_signin

Start Slack email sign-in.

Test results

Safe mode: only tools labeled read-only were run. How the test works

!
Ready for the newest MCP version
1 warning
- !Uses an older MCP version (2025-11-25). It works today, but it isn't on the July 2026 version (2026-07-28) yet.
note
!
Every tool is described
15 warnings
- !channel_info: Inputs with no description: channel_id
- !list_channel_members: Inputs with no description: channel_id, members_limit
- !list_workspace_users: Inputs with no description: users_limit
- !list_workspace_users: Description only repeats the tool name, so it adds nothing an AI could use: "List users in the workspace."
- !search_people: Inputs with no description: search_query, people_count, people_page
- !post_message_rich: Inputs with no description: channel_id, message_blocks_json
- !thread_replies: Inputs with no description: channel_id, thread_ts, replies_limit
- !reply_thread: Inputs with no description: channel_id, thread_ts, message_text
- and 7 more
note
!
Tools are labeled safe or dangerous
2 warnings
- !17 of 17 tools have no safety label (read-only or dangerous): session_status, list_channels, channel_info, list_channel_members, list_workspace_users, search_people, post_message_rich, thread_replies, reply_thread, delete_message, post_mess
- !delete_message: Name sounds like it deletes something, but it is not labeled dangerous
note
!
Follows MCP best practices (not scored yet)
2 tips (not scored)
- !17 tools not labeled read-only don't say whether running them twice is safe (idempotentHint): session_status, list_channels, channel_info, list_channel_members, list_workspace_users, search_people and 11 more
- !17 tools don't say whether they reach outside services like the web (openWorldHint): session_status, list_channels, channel_info, list_channel_members, list_workspace_users, search_people and 11 more
note
!
Resources and prompts work
1 warning (3 resources)
- !civai-secops://slack_android/@public/CAPTCHA_AGENT.md: The content contains "don't tell the user". If an AI reads this, it may follow it. Check where this text comes from.
- and 2 more
note
✓
ConnectsConnected in 188 ms
pass
✓
Lists its toolsFound 17 tools
pass
✓
No known hidden instructionsNone of the hidden-instruction wordings we know were found in tool descriptions. New wordings can get past this check.
pass
✓
Fast enough
All good
- ✓Connecting took 188 ms
- ✓Listing tools took 131 ms
pass
–
Tools work with good inputs
Not tested
- –session_status: Not run: no safety label (if you own this server, test again in owner mode)
- –list_channels: Not run: no safety label (if you own this server, test again in owner mode)
- –channel_info: Not run: no safety label (if you own this server, test again in owner mode)
- –list_channel_members: Not run: no safety label (if you own this server, test again in owner mode)
- –list_workspace_users: Not run: no safety label (if you own this server, test again in owner mode)
- –search_people: Not run: no safety label (if you own this server, test again in owner mode)
- –post_message_rich: Not run: no safety label (if you own this server, test again in owner mode)
- –thread_replies: Not run: no safety label (if you own this server, test again in owner mode)
- and 9 more
not tested
–
Bad inputs give a clean errorNot tested
not tested
–
Tools work togetherNo safe tool returned data to start a chain from, so chains were not tested (not counted either way)
not tested
–
No secrets leakedNo error messages to check
not tested

Test it yourself

Free and open source. Same checks, same score.

npx qamcp-cli https://nova.civai.co/mcp/agents/mcp-slack_android

Show this score on GitHub

Free for every server in the directory. Paste this into your README: the badge shows the score from our latest test.

[![QAmcp score](https://qamcp.dev/s/co-civai-nova-mcp-slack-android.svg)](https://qamcp.dev/s/co-civai-nova-mcp-slack-android.html)

Score over time

2 Nov 202674

One test so far. New tests will show here.

Reviews

Coming soon: reviews from people who use Slack MCP by Nova (CIVAI), signed in with GitHub, one per person. Reviews never change the score.

Is this your server? Get an alert the moment it breaks.

QAmcp Monitor (coming soon) tests it every hour and emails you when it goes down, the score drops, a tool changes or a secret leaks. You'll also be able to claim this page and get a verified owner mark. Founding price: $19/month for life for the first 50 teams.

Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works