{"registry_version":"2026.1025.387","generated_at":"2026-10-25T06:27:00Z","content_sha256":"089d16f627d9365e3d0663cc8069203706d7cb23a76c332226e29686968811a5","signed":true,"signature":{"key_id":"ed25519:74ca19268e364242","algorithm":"ed25519","expires_at":"2026-11-24T06:27:09Z","expired":false,"manifest":"/registry/manifest.json"},"entry_sha256":"d7dadff606375ee558466a49179d061eeaac64e6ed1fec9da2a8c4c84d43536d","entry":{"id":"slack/app-and-directory","name":"Slack app and Slack Marketplace listing","vendor":"Slack (Salesforce)","summary":"Create a Slack app in a development workspace, add scopes, install it and copy its tokens and signing secret. To offer it to other workspaces, activate public distribution; to list it in the Slack Marketplace (formerly the App Directory) it needs 10+ active workspaces and passes a preliminary and a functional review.","aliases":["slack","slack/app","slack/app-directory","slack/marketplace"],"category":"productivity","group":"B","homepage":"https://api.slack.com/apps","docs":["https://docs.slack.dev/app-management/quickstart-app-settings","https://docs.slack.dev/distribution","https://docs.slack.dev/slack-marketplace/slack-marketplace-review-guide","https://docs.slack.dev/slack-marketplace/slack-marketplace-app-guidelines-and-requirements"],"status":"researched","last_verified":null,"last_researched":"2026-10-25","sources":[{"id":"quickstart","url":"https://docs.slack.dev/app-management/quickstart-app-settings","title":"Slack - Quickstart (app settings)","accessed":"2026-10-25","supports":"Create an app, choose development workspace, add scopes under OAuth & Permissions, Install to Workspace, access token shown under OAuth Tokens, reinstall after scope changes, keep token in env","kind":"official"},{"id":"tokens","url":"https://docs.slack.dev/authentication/tokens","title":"Slack - Tokens","accessed":"2026-10-25","supports":"Token prefixes xoxb (bot), xoxp (user), xapp (app-level); rotated access tokens expire after 12 hours; rotation cannot be turned off once on","kind":"official"},{"id":"signing","url":"https://docs.slack.dev/authentication/verifying-requests-from-slack","title":"Slack - Verifying requests from Slack","accessed":"2026-10-25","supports":"Signing secret under Basic Info in the app admin panel; Client Secret can be regenerated in the admin panel","kind":"official"},{"id":"distribution","url":"https://docs.slack.dev/distribution","title":"Slack - Distributing your app","accessed":"2026-10-25","supports":"Manage Distribution checklist, Activate Public Distribution, Add to Slack button, OAuth required for other workspaces, HTTPS required for all request URLs","kind":"official"},{"id":"review-guide","url":"https://docs.slack.dev/slack-marketplace/slack-marketplace-review-guide","title":"Slack Marketplace review guide","accessed":"2026-10-25","supports":"10+ active workspaces (used in past 28 days), fully functional and public, test credentials, video demo, scope checks, preliminary review up to 10 business days, functional review up to 10 weeks new / 6 weeks updates, cannot expedite, rejection reasons, re-review triggers, live app locked","kind":"official"},{"id":"guidelines","url":"https://docs.slack.dev/slack-marketplace/slack-marketplace-app-guidelines-and-requirements","title":"Slack Marketplace app guidelines and requirements","accessed":"2026-10-25","supports":"Landing page, privacy policy contents, support within 2 business days, screenshots 1600x1000, short description 10 words, security requirements, prohibited behaviour, least-privilege scopes, AI app rules including no training LLMs on Slack data","kind":"official"},{"id":"rate-limit-change","url":"https://docs.slack.dev/changelog/2025/05/29/rate-limit-changes-for-non-marketplace-apps/","title":"Slack changelog - Rate limit changes for non-Marketplace apps","accessed":"2026-10-25","supports":"Updated API terms effective 29 May 2025 (new apps) / 30 June 2025 (older apps); Marketplace is the only appropriate channel for commercial distribution; internal apps not impacted; new limits for non-Marketplace apps","kind":"official"},{"id":"history-method","url":"https://docs.slack.dev/reference/methods/conversations.history/","title":"Slack API - conversations.history","accessed":"2026-10-25","supports":"Non-Marketplace commercially distributed apps limited to Tier 1 (1 request/minute) and 15 objects; existing installs subject from 3 March 2026; Marketplace and internal apps Tier 3","kind":"official"}],"allowed_domains":["api.slack.com","slack.com"],"account_model":{"summary":"A Slack app is created by a Slack user and belongs to a development workspace (Enterprise org admins may also have to approve installs). Each workspace that installs the app gets its own bot/user tokens via OAuth. Marketplace listing is a separate review on top of public distribution.","accounts":[{"name":"Slack user in a development workspace","kind":"personal","owned_by":"the person","required":true,"note":"Creates and manages the app at api.slack.com/apps."},{"name":"Development workspace","kind":"organisation","owned_by":"the company","required":true,"note":"The workspace the app is developed and first installed in."},{"name":"Slack app","kind":"developer","parent":"Development workspace","required":true,"note":"Holds client id/secret, signing secret, scopes, and per-install tokens."}],"notes":["Commercially distributed apps outside the Marketplace (\"unlisted\") get much lower rate limits on conversations.history and conversations.replies."]},"have_ready":[{"kind":"live_website","description":"A public landing page made for the Slack app (overview, how it works, install path, next steps, privacy link)","why":"Required for a Marketplace listing; PDFs and repo links are not accepted.","needed_for":["submit-marketplace"],"auto_check":"website_live","source":"guidelines"},{"kind":"app_privacy_policy_url","description":"Privacy policy covering data collected, use, retention, access/deletion requests and a contact email or webform","needed_for":["submit-marketplace"],"auto_check":"website_live","source":"guidelines"},{"kind":"domain_email","description":"Public support contact (email or form) able to respond within 2 business days","needed_for":["submit-marketplace"],"auto_check":"none","source":"guidelines"},{"kind":"demo_video","description":"Video showing installation, OAuth, setup, end-to-end use and uninstall (plus optional 30-90 s public YouTube listing video)","needed_for":["submit-marketplace"],"auto_check":"none","source":"review-guide"},{"kind":"other","description":"Test account credentials with dummy data for any third-party service the app uses","needed_for":["submit-marketplace"],"auto_check":"none","source":"review-guide"},{"kind":"other","description":"At least 10 active workspaces using the app in the past 28 days","why":"Apps below this cannot submit to the Marketplace.","needed_for":["submit-marketplace"],"auto_check":"none","source":"review-guide"},{"kind":"other","description":"Screenshots 1600 x 1000 px (8:5), JPG/PNG under 2 MB, and a short description of 10 words or fewer","needed_for":["submit-marketplace"],"auto_check":"none","source":"guidelines"}],"steps":[{"id":"sign-in","title":"Sign in to Slack in your development workspace","summary":"Sign in yourself to the workspace where you will build the app.","route":"guided","depends_on":[],"gate":"human_login","url":"https://api.slack.com/apps","sources":["quickstart"]},{"id":"create-app","title":"Create the app","summary":"At api.slack.com/apps choose Create an app, give it a name and pick the development workspace, then press Create.","route":"copilot","depends_on":["sign-in"],"gate":"human_submit","url":"https://api.slack.com/apps","sources":["quickstart"]},{"id":"scopes-install","title":"Add scopes and install to the workspace","summary":"Under OAuth & Permissions add only the bot scopes you need (user scopes only if acting as a user), then Install to Workspace and Allow. Reinstall after adding scopes.","route":"guided","depends_on":["create-app"],"gate":"human_submit","recovery":[{"hiccup":"New feature fails with missing_scope after you added a scope","fix":"Reinstall the app to the workspace so the token gets the new scopes.","source":"quickstart"},{"hiccup":"Install is blocked pending admin approval","fix":"Ask a workspace admin to approve the app [to verify exact admin flow for your plan]."}],"capture":{"env":"SLACK_BOT_TOKEN","kind":"token","mask_pattern":"^xoxb-"},"sources":["quickstart","guidelines"]},{"id":"signing-secret","title":"Copy the signing secret and client credentials","summary":"From Basic Information copy the Signing Secret (to verify incoming requests) and, for OAuth distribution, the Client ID and Client Secret.","route":"guided","depends_on":["create-app"],"gate":"none","sources":["signing"]},{"id":"public-distribution","title":"Activate public distribution (optional)","summary":"Under Manage Distribution complete the checklist (OAuth redirect URL, HTTPS on all request URLs) and Activate Public Distribution to get an Add to Slack button.","route":"guided","depends_on":["scopes-install"],"gate":"human_submit","optional":true,"sources":["distribution"]},{"id":"submit-marketplace","title":"Submit to the Slack Marketplace (optional)","summary":"Once the app is public, fully working and in 10+ active workspaces, submit it for review with the landing page, privacy policy, support details, test credentials, scope justifications and demo video. You press submit.","route":"guided","depends_on":["public-distribution"],"gate":"third_party_review","lead_time":{"official":{"text":"Preliminary review up to 10 business days; functional review up to 10 weeks for new submissions (6 weeks for updates to published apps). Reviews cannot be expedited.","source":"review-guide"}},"recovery":[{"hiccup":"Returned because the app is in private beta or not fully functional","fix":"Only submit a publicly installable, fully working app; test install, onboarding, use and uninstall on a workspace other than your dev workspace.","source":"review-guide"},{"hiccup":"Scopes questioned or rejected","fix":"Remove scopes for unbuilt features and any legacy, restricted or admin scopes; explain each remaining scope. Resubmitting resets your place in the preliminary queue.","source":"review-guide"},{"hiccup":"Reviewers cannot test","fix":"Provide working test credentials with dummy data and an install method (reviewers cannot use your workspace logins).","source":"review-guide"}],"optional":true,"sources":["review-guide","guidelines"]},{"id":"changes-after-listing","title":"Ship changes to a listed app","summary":"A live listed app is locked. New functionality or scopes need resubmission with a video and a staging app; display info and pricing changes do not.","route":"guided","depends_on":["submit-marketplace"],"gate":"third_party_review","lead_time":{"official":{"text":"Up to 6 weeks functional review for published apps resubmitting changes.","source":"review-guide"}},"optional":true,"sources":["review-guide"]}],"outputs":[{"name":"SLACK_BOT_TOKEN","description":"Bot user OAuth token for the installed workspace","secret":true,"example_format":"xoxb-…","from_step":"scopes-install"},{"name":"SLACK_SIGNING_SECRET","description":"Signing secret used to verify requests from Slack","secret":true,"from_step":"signing-secret"},{"name":"SLACK_CLIENT_ID","description":"App client id for the OAuth install flow","secret":false,"from_step":"signing-secret"},{"name":"SLACK_CLIENT_SECRET","description":"App client secret for the OAuth install flow","secret":true,"from_step":"signing-secret"},{"name":"SLACK_APP_TOKEN","description":"App-level token (only for Socket Mode and similar features)","secret":true,"example_format":"xapp-…"}],"terms_notes":[{"kind":"rules_say","severity":"red","title":"Marketplace is the channel for commercial apps","text":"Slack's 2025 API terms update says the Marketplace is the only appropriate channel for commercially distributing apps. Unlisted commercial apps get conversations.history and conversations.replies cut to 1 request per minute and 15 objects.","source":"rate-limit-change"},{"kind":"rules_say","severity":"red","title":"Do not train LLMs on Slack data","text":"Marketplace AI apps must not use Slack data to train LLMs and must disclose model, retention and data residency.","source":"guidelines"},{"kind":"rules_say","severity":"amber","title":"Prohibited app behaviours","text":"Exporting or backing up message data, bulk deletion, building third-party Slack clients, remote command execution, and financial/crypto/NFT transactions are not allowed in the Marketplace.","source":"guidelines"},{"kind":"rules_say","severity":"amber","title":"Long review queues","text":"Functional review can take up to 10 weeks and cannot be expedited for launch dates; plan launches accordingly.","source":"review-guide"},{"kind":"rules_say","severity":"yellow","title":"Token rotation is one-way","text":"Once token rotation is turned on it cannot be turned off; rotated access tokens expire after 12 hours.","source":"tokens"},{"kind":"rules_say","severity":"yellow","title":"Internal apps are exempt from the new limits","text":"Internal customer-built apps keep their higher rate limits.","source":"rate-limit-change"}],"pricing_notes":{"notes":"No fee to create or list an app is mentioned in the reviewed docs [to verify]. AI agent container apps need a paid Slack plan for users.","source":"guidelines"},"stripe_projects":false,"api_provisioning":{"available":"unknown","notes":"The reviewed docs describe app creation in the api.slack.com/apps UI. Manifest or CLI-based app creation [to verify]. Marketplace submission is a UI review.","source":"quickstart"},"detect":{"env_names":["SLACK_BOT_TOKEN","SLACK_SIGNING_SECRET","SLACK_APP_TOKEN","SLACK_CLIENT_ID","SLACK_CLIENT_SECRET"],"packages":["@slack/bolt","@slack/web-api","slack_bolt","slack_sdk"]}}}