yt-slack-mcp 0.4.0 → 0.5.0

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 Maksim Korinets
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 Maksim Korinets
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -9,6 +9,7 @@ A host-agnostic [Model Context Protocol](https://modelcontextprotocol.io) server
 - Return image attachments inline, extract text from PDFs, and return `text/*` attachment contents inline.
 - Retrieve private attachment contents through the authenticated Slack browser session.
 - Reply to a thread, add or remove a reaction, edit an authored message or thread reply, or upload local files only in explicitly allowed channel IDs.
+- Prefix every message the agent posts with `🤖:` — or `🤖 <model>:` when the call names the model — so agent replies stand apart from the account's own messages; an edit can opt out with `agent_authored: false`.
 
 Attachment limits: images and text files are limited to 10 MB; text attachments are truncated at 100,000 characters. PDFs are limited to 20 MB, 50 pages, and 100,000 extracted characters.
 
@@ -19,11 +20,38 @@ Attachment limits: images and text files are limited to 10 MB; text attachments
 | `slack_read_permalink` | Read a message or thread from a channel, DM, or group-DM permalink, including supported attachments. |
 | `slack_get_replies` | Read replies for a thread by channel ID and timestamp. |
 | `slack_get_history` | Read recent channel history. |
-| `slack_reply_to_thread` | Reply to a thread; restricted to allowed channels. |
+| `slack_reply_to_thread` | Reply to a thread, with optional `model`, in a `🤖:`-prefixed message; restricted to allowed channels. |
 | `slack_add_reaction` | Add a reaction; restricted to allowed channels. |
 | `slack_remove_reaction` | Remove a reaction added by this account; restricted to allowed channels. |
-| `slack_upload_files` | Upload up to 10 local files to a channel or thread, with an optional initial comment; returns file and message permalinks; restricted to allowed channels. |
-| `slack_edit_message` | Edit an authored message or thread reply by channel ID and timestamp; replaces the message text (Slack removes any existing Block Kit blocks) and returns the updated timestamp and permalink; restricted to allowed channels. |
+| `slack_upload_files` | Upload up to 10 local files to a channel or thread, with an optional `initial_comment` prefixed with `🤖:` and an optional `model` (only used with a comment); returns file and message permalinks; restricted to allowed channels. |
+| `slack_edit_message` | Edit an authored message or thread reply by channel ID and timestamp; replaces the message text with `🤖:`-prefixed text and an optional `model`, or with the text as given when `agent_authored` is `false` (Slack removes any existing Block Kit blocks) and returns the updated timestamp and permalink; restricted to allowed channels. |
+
+## Agent message prefix
+
+The write tools post through the account's own browser session, so Slack shows
+the account name on them. To keep agent-written messages distinguishable, the
+text of every posted message is prefixed with `🤖:` by default:
+
+```text
+🤖: deployed revision 4f2c1a9
+```
+
+The MCP transport does not report which model is calling, so a write tool call
+can pass `model` with the model it is running; the prefix then names it:
+
+```text
+🤖 claude-sonnet-4-5: deployed revision 4f2c1a9
+```
+
+The prefix is added once: text that already starts with `🤖` is sent unchanged,
+so editing a prefixed message does not stack prefixes. A file upload without an
+`initial_comment` — or with only whitespace — gets no comment rather than a bare
+prefix, and `model` has no effect then.
+
+`slack_edit_message` can also replace a message with text that is not
+agent-written, such as a correction to the user's own message: pass
+`agent_authored: false` and the text is stored as given, without the prefix.
+`model` has no effect when `agent_authored` is `false`.
 
 ## Setup
 

package/index.js

@@ -370,8 +370,33 @@ function assertAllowedWriteChannel(channelId, allowed) {
     }
 }
 
+const AGENT_PREFIX_EMOJI = "🤖";
+
+// Slack shows the account's own name on everything this server posts, so mark
+// agent-written text with a robot emoji and name the model that wrote it when
+// the caller says which one it is running. Text is trimmed and blank text has no
+// prefix to carry, so an optional comment stays absent. Text that already
+// carries the prefix is returned unchanged, so editing a prefixed message does
+// not stack prefixes.
+function withAgentPrefix(text, model) {
+    const value = typeof text === "string" ? text.trim() : "";
+    if (!value) {
+        return undefined;
+    }
+    if (value.startsWith(AGENT_PREFIX_EMOJI)) {
+        return value;
+    }
+    const name = typeof model === "string" ? model.trim() : "";
+    return `${AGENT_PREFIX_EMOJI}${name ? ` ${name}` : ""}: ${value}`;
+}
+
 // ── Schemas ─────────────────────────────────────────────────────────────────
 
+const AgentModelField = z
+    .string()
+    .optional()
+    .describe("Model you are running, e.g. gpt-5.1, shown in the 🤖 prefix. Omit when unknown.");
+
 const ReadPermalinkSchema = z.object({
     url: z.string().describe("Slack permalink, e.g. https://<workspace>.slack.com/archives/C.../p..."),
 });
@@ -391,6 +416,7 @@ const ReplyToThreadSchema = z.object({
     channel_id: z.string(),
     thread_ts: z.string(),
     text: z.string(),
+    model: AgentModelField,
 });
 
 const AddReactionSchema = z.object({
@@ -404,12 +430,19 @@ const UploadFilesSchema = z.object({
     file_paths: z.array(z.string().min(1)).min(1).max(10),
     thread_ts: z.string().optional(),
     initial_comment: z.string().optional(),
+    model: AgentModelField,
 });
 
 const EditMessageSchema = z.object({
     channel_id: z.string(),
     timestamp: z.string().describe("Timestamp of the message or thread reply to edit."),
     text: z.string(),
+    agent_authored: z
+        .boolean()
+        .optional()
+        .default(true)
+        .describe("Set false when this text is not agent-written, for example correcting the user's own message, so it is stored without the 🤖 prefix; model is ignored when this is false."),
+    model: AgentModelField,
 });
 
 // ── Tool definitions ─────────────────────────────────────────────────────────
@@ -432,7 +465,7 @@ const TOOLS = [
     },
     {
         name: "slack_reply_to_thread",
-        description: "Reply to a Slack thread. Restricted to allowed channels.",
+        description: "Reply to a Slack thread. The posted text is prefixed with `🤖:` — or `🤖 <model>:` when model is given — so readers can tell it came from an agent; pass model to name the model writing it. Restricted to allowed channels.",
         inputSchema: zodToJsonSchema(ReplyToThreadSchema),
     },
     {
@@ -447,12 +480,12 @@ const TOOLS = [
     },
     {
         name: "slack_upload_files",
-        description: "Upload one or more local files to a channel or thread. Restricted to allowed channels.",
+        description: "Upload one or more local files to a channel or thread. A given initial_comment is prefixed with `🤖:` — or `🤖 <model>:` when model is given — so readers can tell it came from an agent; pass model to name the model writing it, and note that model has no effect without initial_comment. Restricted to allowed channels.",
         inputSchema: zodToJsonSchema(UploadFilesSchema),
     },
     {
         name: "slack_edit_message",
-        description: "Edit an authored Slack message or thread reply by channel id and timestamp. Replaces the message text; any existing Block Kit blocks are removed by Slack. Restricted to allowed channels.",
+        description: "Edit an authored Slack message or thread reply by channel id and timestamp. Replaces the message text, prefixed with `🤖:` — or `🤖 <model>:` when model is given — unless it already carries the prefix; pass model to name the model writing it, and set agent_authored to false when the new text is not agent-written. Any existing Block Kit blocks are removed by Slack. Restricted to allowed channels.",
         inputSchema: zodToJsonSchema(EditMessageSchema),
     },
 ];
@@ -500,7 +533,7 @@ function createExecuteToolCall({ slackApi, formatMessages, uploadSlackFiles, all
                 const response = await slackApi("chat.postMessage", {
                     channel: channelId,
                     thread_ts: requireString(a.thread_ts, "thread_ts"),
-                    text: requireString(a.text, "text"),
+                    text: withAgentPrefix(requireString(a.text, "text"), a.model),
                 }, "POST");
                 return { content: [{ type: "text", text: `posted reply at ${response.ts}` }] };
             }
@@ -537,7 +570,7 @@ function createExecuteToolCall({ slackApi, formatMessages, uploadSlackFiles, all
                     filePaths: a.file_paths,
                     channelId,
                     threadTs: a.thread_ts && requireString(a.thread_ts, "thread_ts"),
-                    initialComment: a.initial_comment,
+                    initialComment: withAgentPrefix(a.initial_comment, a.model),
                 });
                 return {
                     content: files.map((file) => ({
@@ -558,7 +591,7 @@ function createExecuteToolCall({ slackApi, formatMessages, uploadSlackFiles, all
                     updated = await slackApi("chat.update", {
                         channel: channelId,
                         ts: timestamp,
-                        text,
+                        text: a.agent_authored ? withAgentPrefix(text, a.model) : text,
                     }, "POST");
                 } catch (error) {
                     const reason = String(error?.message ?? error).replace(/^slack chat\.update failed: /, "");
@@ -616,7 +649,7 @@ async function main() {
         {
             capabilities: { tools: {} },
             instructions:
-                "MCP server for Slack. Read with slack_read_permalink, slack_get_replies, slack_get_history; write with slack_reply_to_thread, slack_add_reaction, slack_remove_reaction, slack_upload_files, slack_edit_message (restricted to allowed channels).",
+                "MCP server for Slack. Read with slack_read_permalink, slack_get_replies, slack_get_history; write with slack_reply_to_thread, slack_add_reaction, slack_remove_reaction, slack_upload_files, slack_edit_message (restricted to allowed channels). Messages sent by the write tools are prefixed with `🤖:` by default, and slack_edit_message can opt out with agent_authored false; pass model with the model you are running to include it in the prefix.",
         }
     );
 
@@ -661,6 +694,7 @@ export {
     parsePermalink,
     requireString,
     assertAllowedWriteChannel,
+    withAgentPrefix,
     createExecuteToolCall,
     createSlackClient,
     loadConfig,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "yt-slack-mcp",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "MCP server for Slack — read permalinks, threads, and channel history; reply to threads; add or remove reactions; edit messages.",
   "type": "module",
   "main": "index.js",