Secure Slack for AI
A Slack bot or user token grants AI access to every public channel, every DM the connecting user is in, and every file shared in workspace. PortEden sits between AI and the Slack API, enforcing channel-level rules and redacting sensitive content before any message reaches the model.
How PortEden Protects You
Six layers of security between AI and your data.
Channel-Level Access Rules
Allow AI in #engineering and #product while blocking #leadership, #finance, and any channel containing 'private' or 'exec' in the name. Rules apply to history reads, searches, and live message lookups.
DM and Group-DM Blocking
Hide every direct message and group DM from AI by default. Whitelist specific 1:1s only if you opt in. AI never sees private conversations or HR escalations.
Content Redaction
Mask credentials, customer PII, payment data, and access tokens pasted into channels before AI reads them. Patterns are tuned to common Slack leakage modes (env files, AWS keys, support escalations).
Action Limits
Restrict whether AI can post messages, react, or join channels. Read-only mode is the default; write actions require explicit per-channel grants.
Time Windows
Limit AI to recent messages only — e.g. last 24 hours or last 7 days — so long-tail context from years-old conversations never surfaces.
Full Audit Trail
Every channel read, search, and blocked request is logged with the agent identity, timestamp, and rule that fired. Investigate any incident in minutes.
Get Started in 3 Steps
Install — CLI or MCP
Install the PortEden CLI or add the cloud MCP connector to your AI client, then authorize the PortEden Slack app on your workspace.
Set Channel Rules
Allowlist channels for AI access, block private channels and DMs, and enable content redaction patterns.
Connect Your Agent
Point your AI agent at PortEden instead of Slack directly. Every read, search, and post is filtered, redacted, and logged.
Without vs. With PortEden
Without PortEden
- Bot token grants access to every public channel in the workspace
- User token additionally exposes every DM and group DM the user is in
- Pasted credentials, API keys, and PII flow straight into the AI model
- No granular audit of which channels or messages AI accessed
- Revoking AI requires uninstalling the Slack app entirely
With PortEden
- Channel allowlist limits AI to the channels you explicitly permit
- DMs and group-DMs blocked by default; opt-in per conversation
- Credential and PII redaction strips sensitive content before AI sees it
- Read-only mode prevents AI from posting, reacting, or joining channels
- Full per-agent audit log of every read, search, and blocked request