Skip to content

[Bug] Setting SLACK_MCP_ADD_MESSAGE_TOOL environment variable to comma separated string still allows messages to be sent to all channels #138

@kylecotter

Description

@kylecotter

Hi, thanks for your work here!

I tested SLACK_MCP_ADD_MESSAGE_TOOL with my own DM channel ID, and a comma separated list of whitelisted DM channel IDs, and I was still able to send messages to other channels and people not in that list.

Claude suggested there may be an issue with the negation logic in isChannelAllowed().

Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions