Type: Connector disposition
Subject: Slack Plugin (Claude plugin)
Decision requested: Approve the proposed disposition for Slack Plugin (Claude plugin) across its 7 assessed actions
Inherent / residual: High / Moderate
Control owner: Claude Owner / Primary Owner (plugin marketplace) + Slack Workspace Admin (MCP integration approval)
Context: 7 assessed actions. Runtime settings proposed: Needs Approval x3, Blocked x1, Always Allow x1. Administrative actions proposed: Permit with restrictions x5, Do not enable x1, Permit x1. Proposed for Blocked: Send messages. Class: Claude plugin - bundled skills plus one or more MCP servers, installed from a marketplace or a local directory. Control point: Claude Organization settings > Plugins (marketplace allowlist, provisioning, auto-install) + endpoint managed settings. NOT the connector tool-permission surface. Control owner: Claude Owner / Primary Owner (plugin marketplace) + Slack Workspace Admin (MCP integration approval).
Risks: R-11 [High inherent / Low residual] Substitution by unmanaged third-party MCP servers for the same services | R-18 [High inherent / Moderate residual] Slack direct-message and Connect-channel reach | R-27 [Critical inherent / High residual] Aggregate outbound surface across the estate | R-28 [Critical inherent / High residual] Slack functions as a laundering layer around Claude tool permissions | R-31 [Critical inherent / High residual] Slack is the aggregation point for the enterprise data estate | R-41 [Critical inherent / High residual] Plugin skills are auto-loading instruction content, and the vendor does not verify plugin contents | R-42 [High inherent / Moderate residual] A second Slack MCP server reaching the same workspace | R-44 [High inherent / Low residual] Plugin governance is a separate admin surface from connector governance
Open verification: V-32 [Critical] Whether the Slack plugin is installed anywhere, and what Slack's own MCP client approval permits at tool level - specifically whether message sending can be restricted independently of search.
Ruling:
Amendment or condition: