Slack Integration

Roy OS Integration Guide  |  READ + WRITE

Overview

The Roy OS Slack integration allows the meeting agent to read channel history for meeting preparation context and post meeting summaries and action items back to your team's channels. The agent acts as a Slack bot that your workspace administrators fully control.

What Roy Can Do in Slack

CapabilityDescription
Read channel historyBefore a meeting, the agent reads recent messages from designated channels to understand ongoing discussions, prior decisions, and team context.
Post meeting summariesAfter a meeting, the agent posts a structured summary (key decisions, discussion points) to a designated channel.
Post action itemsAction items extracted from meetings are posted to channels with assignees and due dates.
What Roy cannot do: Access DMs, search across the entire workspace, browse the user directory, upload or download files, modify user profiles, or perform any admin operations.

Required Permissions

OAuth Bot ScopeWhy It's Needed
channels:historyRead messages from public channels the bot is invited to
groups:historyRead messages from private channels the bot is invited to
channels:readList which channels the bot is a member of (for the channel selector UI)
chat:writePost meeting summaries and action items to channels
chat:write.publicPost to public channels the bot hasn't explicitly joined (for broadcast channels)

Setup Guide

Prerequisites

You'll need Slack workspace admin access and access to your organization's Azure Key Vault.

1
Create a Slack App

Go to api.slack.com/appsCreate New AppFrom scratch. Name it "Roy OS" (or your preferred name) and select your workspace.

2
Configure Bot Scopes

Navigate to OAuth & PermissionsScopesBot Token Scopes. Add the five scopes listed above: channels:history, groups:history, channels:read, chat:write, chat:write.public.

3
Install to Workspace

Click Install to Workspace and authorize. Copy the Bot User OAuth Token (starts with xoxb-). Also note the Client ID and Client Secret from the Basic Information page.

4
Store Credentials in Key Vault

Add three secrets to your Azure Key Vault:

Secret NameValue
slack-client-idClient ID from Slack app
slack-client-secretClient Secret from Slack app
slack-bot-tokenBot User OAuth Token (xoxb-...)
5
Invite the Bot to Channels

In each Slack channel you want Roy to read from or post to, type /invite @RoyOS (or your bot's name). The bot can only access channels it has been explicitly invited to.

6
Verify Connectivity

Roy AI runs an integration smoke test: OAuth flow validation, token exchange, and a test API call to confirm the bot can read and write to at least one channel.

Managing Access

ActionHow
Add a channelInvite the bot to a new channel with /invite @RoyOS
Remove a channelKick the bot from the channel with /remove @RoyOS. Immediate effect.
Pause integrationDeactivate the Slack app in api.slack.com. Bot token stops working immediately. Re-activate to resume.
Revoke permanentlyDelete the Slack app. All tokens invalidated. Roy OS loses all Slack access.
Rotate credentialsRegenerate client secret in Slack app settings. Update the Key Vault secret. Roy OS picks up the new value automatically.

FAQ

Can Roy read my DMs?

No. The bot only has channels:history and groups:history scopes, which apply to channels the bot has been invited to. It has no access to direct messages.

Can I limit which channels Roy posts to?

Yes. Roy only posts to channels configured by your team. You can also remove the bot from any channel at any time to stop both reading and posting.

Does Roy store Slack messages?

Channel messages read by Roy are used as context for meeting preparation and may be extracted into memory facts (decisions, commitments). Your organization's data retention policy governs how long memory facts are retained. The original messages remain in Slack under your workspace's retention policy.

How do I rotate credentials?

Go to your Slack app settings → Basic Information → regenerate the Client Secret. Then update the slack-client-secret value in your Azure Key Vault. For the bot token, reinstall the app to your workspace to generate a fresh xoxb- token and update slack-bot-token in Key Vault. Roy OS retrieves secrets from Key Vault at runtime — no application restart needed.

Audit trail: Every Slack API call Roy makes is logged (channel ID, action type, timestamp, success/failure) and available in your Azure Log Analytics workspace.