Question 1

Which Slack scopes does Ana need?

Accepted Answer

The minimum scopes are channels:history, channels:read, search:read, and users:read. Admins can grant more scopes like groups:history for private channels or chat:write for Ana to post messages. Scopes are selected during Slack App installation and can be adjusted later.

Question 2

Can Ana search private channels?

Accepted Answer

Only if the TextQL Slack App is explicitly added to those channels. Slack's permission model is opt-in for private channels, so admins control exactly which ones Ana can reach. The bot cannot see any channel it has not been invited to.

Question 3

How is the Slack bot token secured?

Accepted Answer

Bot tokens are encrypted in TextQL's credential vault and injected by our egress proxy at the network layer. Ana's Python sandbox never sees the raw token value. Slack audit logs also capture every API call Ana makes for defense in depth.

Question 4

Can Ana post to Slack?

Accepted Answer

Yes with chat:write scope. Admins can enable Ana to post analysis results, alerts, or summaries to specific channels. Writes are audit-logged separately and can be restricted to allowlisted channels to prevent accidental cross-posting.

Question 5

Does Ana respect DM privacy?

Accepted Answer

Ana never accesses direct messages by default. The TextQL Slack App is installed with bot scopes that only cover channels it has been invited to. Reading DMs would require separate user scopes that are not granted by the default install.