Type: Connector disposition
Subject: Slack (connector)
Decision requested: Approve the proposed disposition for Slack (connector) across its 9 assessed actions
Inherent / residual: High / High
Control owner: Claude Owner / Primary Owner
Context: 9 assessed actions. Runtime settings proposed: Always Allow x6, Needs Approval x3. Class: Remote MCP server (first-party, vendor-hosted). Control point: Claude tool permission (Customize > Connectors; org-wide by Owner/Primary Owner). Control owner: Claude Owner / Primary Owner.
Risks: R-18 [High inherent / Moderate residual] Slack direct-message and Connect-channel reach | R-27 [Critical inherent / High residual] Aggregate outbound surface across the estate | R-28 [Critical inherent / High residual] Slack functions as a laundering layer around Claude tool permissions | R-31 [Critical inherent / High residual] Slack is the aggregation point for the enterprise data estate
Open verification: V-14 [High] The inventory of Slack Connect channels and externally-shared channels, and which of them receive automated content from connected applications. | V-27 [Moderate] The Slack message and file retention policy, and how it compares to the records schedule.
Ruling:
Amendment or condition: