yt-slack-mcp 0.3.2 → 0.5.0

package/README.md

@@ -8,7 +8,8 @@ A host-agnostic [Model Context Protocol](https://modelcontextprotocol.io) server
 - Read message permalinks from channels, DMs, and group DMs.
 - Return image attachments inline, extract text from PDFs, and return `text/*` attachment contents inline.
 - Retrieve private attachment contents through the authenticated Slack browser session.
-- Reply to a thread, add a reaction, edit an authored message or thread reply, or upload local files only in explicitly allowed channel IDs.
+- Reply to a thread, add or remove a reaction, edit an authored message or thread reply, or upload local files only in explicitly allowed channel IDs.
+- Prefix every message the agent posts with `🤖:` — or `🤖 <model>:` when the call names the model — so agent replies stand apart from the account's own messages; an edit can opt out with `agent_authored: false`.
 
 Attachment limits: images and text files are limited to 10 MB; text attachments are truncated at 100,000 characters. PDFs are limited to 20 MB, 50 pages, and 100,000 extracted characters.
 
@@ -19,10 +20,38 @@ Attachment limits: images and text files are limited to 10 MB; text attachments
 | `slack_read_permalink` | Read a message or thread from a channel, DM, or group-DM permalink, including supported attachments. |
 | `slack_get_replies` | Read replies for a thread by channel ID and timestamp. |
 | `slack_get_history` | Read recent channel history. |
-| `slack_reply_to_thread` | Reply to a thread; restricted to allowed channels. |
+| `slack_reply_to_thread` | Reply to a thread, with optional `model`, in a `🤖:`-prefixed message; restricted to allowed channels. |
 | `slack_add_reaction` | Add a reaction; restricted to allowed channels. |
-| `slack_upload_files` | Upload up to 10 local files to a channel or thread, with an optional initial comment; returns file and message permalinks; restricted to allowed channels. |
-| `slack_edit_message` | Edit an authored message or thread reply by channel ID and timestamp; replaces the message text (Slack removes any existing Block Kit blocks) and returns the updated timestamp and permalink; restricted to allowed channels. |
+| `slack_remove_reaction` | Remove a reaction added by this account; restricted to allowed channels. |
+| `slack_upload_files` | Upload up to 10 local files to a channel or thread, with an optional `initial_comment` prefixed with `🤖:` and an optional `model` (only used with a comment); returns file and message permalinks; restricted to allowed channels. |
+| `slack_edit_message` | Edit an authored message or thread reply by channel ID and timestamp; replaces the message text with `🤖:`-prefixed text and an optional `model`, or with the text as given when `agent_authored` is `false` (Slack removes any existing Block Kit blocks) and returns the updated timestamp and permalink; restricted to allowed channels. |
+
+## Agent message prefix
+
+The write tools post through the account's own browser session, so Slack shows
+the account name on them. To keep agent-written messages distinguishable, the
+text of every posted message is prefixed with `🤖:` by default:
+
+```text
+🤖: deployed revision 4f2c1a9
+```
+
+The MCP transport does not report which model is calling, so a write tool call
+can pass `model` with the model it is running; the prefix then names it:
+
+```text
+🤖 claude-sonnet-4-5: deployed revision 4f2c1a9
+```
+
+The prefix is added once: text that already starts with `🤖` is sent unchanged,
+so editing a prefixed message does not stack prefixes. A file upload without an
+`initial_comment` — or with only whitespace — gets no comment rather than a bare
+prefix, and `model` has no effect then.
+
+`slack_edit_message` can also replace a message with text that is not
+agent-written, such as a correction to the user's own message: pass
+`agent_authored: false` and the text is stored as given, without the prefix.
+`model` has no effect when `agent_authored` is `false`.
 
 ## Setup
 
@@ -60,9 +89,10 @@ All configuration can live in a JSON config file at
 ```
 
 By default the write tools (`slack_reply_to_thread`, `slack_add_reaction`,
-`slack_edit_message`) and `slack_upload_files` are locked down — no channel is
-writable. Each upload is limited to 10 MB. Every field is optional; a
-missing file just means defaults. Env vars always override the config file.
+`slack_remove_reaction`, `slack_edit_message`) and `slack_upload_files` are
+locked down — no channel is writable. Each upload is limited to 10 MB. Every
+field is optional; a missing file just means defaults. Env vars always override
+the config file.
 
 ## Configuration
 

package/index.js

@@ -370,8 +370,33 @@ function assertAllowedWriteChannel(channelId, allowed) {
     }
 }
 
+const AGENT_PREFIX_EMOJI = "🤖";
+
+// Slack shows the account's own name on everything this server posts, so mark
+// agent-written text with a robot emoji and name the model that wrote it when
+// the caller says which one it is running. Text is trimmed and blank text has no
+// prefix to carry, so an optional comment stays absent. Text that already
+// carries the prefix is returned unchanged, so editing a prefixed message does
+// not stack prefixes.
+function withAgentPrefix(text, model) {
+    const value = typeof text === "string" ? text.trim() : "";
+    if (!value) {
+        return undefined;
+    }
+    if (value.startsWith(AGENT_PREFIX_EMOJI)) {
+        return value;
+    }
+    const name = typeof model === "string" ? model.trim() : "";
+    return `${AGENT_PREFIX_EMOJI}${name ? ` ${name}` : ""}: ${value}`;
+}
+
 // ── Schemas ─────────────────────────────────────────────────────────────────
 
+const AgentModelField = z
+    .string()
+    .optional()
+    .describe("Model you are running, e.g. gpt-5.1, shown in the 🤖 prefix. Omit when unknown.");
+
 const ReadPermalinkSchema = z.object({
     url: z.string().describe("Slack permalink, e.g. https://<workspace>.slack.com/archives/C.../p..."),
 });
@@ -391,6 +416,7 @@ const ReplyToThreadSchema = z.object({
     channel_id: z.string(),
     thread_ts: z.string(),
     text: z.string(),
+    model: AgentModelField,
 });
 
 const AddReactionSchema = z.object({
@@ -404,12 +430,19 @@ const UploadFilesSchema = z.object({
     file_paths: z.array(z.string().min(1)).min(1).max(10),
     thread_ts: z.string().optional(),
     initial_comment: z.string().optional(),
+    model: AgentModelField,
 });
 
 const EditMessageSchema = z.object({
     channel_id: z.string(),
     timestamp: z.string().describe("Timestamp of the message or thread reply to edit."),
     text: z.string(),
+    agent_authored: z
+        .boolean()
+        .optional()
+        .default(true)
+        .describe("Set false when this text is not agent-written, for example correcting the user's own message, so it is stored without the 🤖 prefix; model is ignored when this is false."),
+    model: AgentModelField,
 });
 
 // ── Tool definitions ─────────────────────────────────────────────────────────
@@ -432,7 +465,7 @@ const TOOLS = [
     },
     {
         name: "slack_reply_to_thread",
-        description: "Reply to a Slack thread. Restricted to allowed channels.",
+        description: "Reply to a Slack thread. The posted text is prefixed with `🤖:` — or `🤖 <model>:` when model is given — so readers can tell it came from an agent; pass model to name the model writing it. Restricted to allowed channels.",
         inputSchema: zodToJsonSchema(ReplyToThreadSchema),
     },
     {
@@ -440,14 +473,19 @@ const TOOLS = [
         description: "Add a reaction to a Slack message. Restricted to allowed channels.",
         inputSchema: zodToJsonSchema(AddReactionSchema),
     },
+    {
+        name: "slack_remove_reaction",
+        description: "Remove a reaction added by this account from a Slack message. Restricted to allowed channels.",
+        inputSchema: zodToJsonSchema(AddReactionSchema),
+    },
     {
         name: "slack_upload_files",
-        description: "Upload one or more local files to a channel or thread. Restricted to allowed channels.",
+        description: "Upload one or more local files to a channel or thread. A given initial_comment is prefixed with `🤖:` — or `🤖 <model>:` when model is given — so readers can tell it came from an agent; pass model to name the model writing it, and note that model has no effect without initial_comment. Restricted to allowed channels.",
         inputSchema: zodToJsonSchema(UploadFilesSchema),
     },
     {
         name: "slack_edit_message",
-        description: "Edit an authored Slack message or thread reply by channel id and timestamp. Replaces the message text; any existing Block Kit blocks are removed by Slack. Restricted to allowed channels.",
+        description: "Edit an authored Slack message or thread reply by channel id and timestamp. Replaces the message text, prefixed with `🤖:` — or `🤖 <model>:` when model is given — unless it already carries the prefix; pass model to name the model writing it, and set agent_authored to false when the new text is not agent-written. Any existing Block Kit blocks are removed by Slack. Restricted to allowed channels.",
         inputSchema: zodToJsonSchema(EditMessageSchema),
     },
 ];
@@ -495,7 +533,7 @@ function createExecuteToolCall({ slackApi, formatMessages, uploadSlackFiles, all
                 const response = await slackApi("chat.postMessage", {
                     channel: channelId,
                     thread_ts: requireString(a.thread_ts, "thread_ts"),
-                    text: requireString(a.text, "text"),
+                    text: withAgentPrefix(requireString(a.text, "text"), a.model),
                 }, "POST");
                 return { content: [{ type: "text", text: `posted reply at ${response.ts}` }] };
             }
@@ -512,6 +550,18 @@ function createExecuteToolCall({ slackApi, formatMessages, uploadSlackFiles, all
                 return { content: [{ type: "text", text: "added reaction" }] };
             }
 
+            case "slack_remove_reaction": {
+                const a = AddReactionSchema.parse(args);
+                const channelId = requireString(a.channel_id, "channel_id");
+                assertAllowedWriteChannel(channelId, allowed);
+                await slackApi("reactions.remove", {
+                    channel: channelId,
+                    timestamp: requireString(a.timestamp, "timestamp"),
+                    name: requireString(a.reaction, "reaction"),
+                }, "POST");
+                return { content: [{ type: "text", text: "removed reaction" }] };
+            }
+
             case "slack_upload_files": {
                 const a = UploadFilesSchema.parse(args);
                 const channelId = requireString(a.channel_id, "channel_id");
@@ -520,7 +570,7 @@ function createExecuteToolCall({ slackApi, formatMessages, uploadSlackFiles, all
                     filePaths: a.file_paths,
                     channelId,
                     threadTs: a.thread_ts && requireString(a.thread_ts, "thread_ts"),
-                    initialComment: a.initial_comment,
+                    initialComment: withAgentPrefix(a.initial_comment, a.model),
                 });
                 return {
                     content: files.map((file) => ({
@@ -541,7 +591,7 @@ function createExecuteToolCall({ slackApi, formatMessages, uploadSlackFiles, all
                     updated = await slackApi("chat.update", {
                         channel: channelId,
                         ts: timestamp,
-                        text,
+                        text: a.agent_authored ? withAgentPrefix(text, a.model) : text,
                     }, "POST");
                 } catch (error) {
                     const reason = String(error?.message ?? error).replace(/^slack chat\.update failed: /, "");
@@ -599,7 +649,7 @@ async function main() {
         {
             capabilities: { tools: {} },
             instructions:
-                "MCP server for Slack. Read with slack_read_permalink, slack_get_replies, slack_get_history; write with slack_reply_to_thread, slack_add_reaction, slack_upload_files, slack_edit_message (restricted to allowed channels).",
+                "MCP server for Slack. Read with slack_read_permalink, slack_get_replies, slack_get_history; write with slack_reply_to_thread, slack_add_reaction, slack_remove_reaction, slack_upload_files, slack_edit_message (restricted to allowed channels). Messages sent by the write tools are prefixed with `🤖:` by default, and slack_edit_message can opt out with agent_authored false; pass model with the model you are running to include it in the prefix.",
         }
     );
 
@@ -644,6 +694,7 @@ export {
     parsePermalink,
     requireString,
     assertAllowedWriteChannel,
+    withAgentPrefix,
     createExecuteToolCall,
     createSlackClient,
     loadConfig,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "yt-slack-mcp",
-  "version": "0.3.2",
-  "description": "MCP server for Slack — read permalinks, threads, and channel history; reply to threads; add reactions; edit messages.",
+  "version": "0.5.0",
+  "description": "MCP server for Slack — read permalinks, threads, and channel history; reply to threads; add or remove reactions; edit messages.",
   "type": "module",
   "main": "index.js",
   "bin": {