Connect Slack
Slack is where Averil works: one thread per case, approvals with a click, and answers to your questions.
What Averil uses it for
- Posting one thread per case in the channel you choose, and replying in it.
- Approve, Reject, Assign, It was intended and Accept risk buttons in case threads.
- Answering questions when you mention @Averil or send it a direct message.
- Catching secrets pasted in channels it is in. It keeps a fingerprint of the secret and drops the message.
- Listing members, guests and bots, so it can match people across tools and spot accounts of people who left.
Read access
Every read goes through Averil's broker, which allows only these operations.
| Operation | Slack permission | Why |
|---|---|---|
team.info | team:read | Identify the workspace. |
users.conversations | channels:read, groups:read | List the channels Averil's bot is a member of. |
users.list | users:read, users:read.email | Match people across tools and spot offboarded accounts. |
conversations.replies, conversations.history | channels:history, groups:history, im:history | Read back a thread, or the last day of a direct message, when someone talks to Averil there. |
To talk in Slack, the bot also asks for chat:write (case threads and answers), app_mentions:read and im:history (questions by mention or direct message), channels:history and groups:history (secrets pasted in public and private channels it is in), reactions:write (an eyes reaction while it works on your question), assistant:write (the line in a thread that says what it is checking while it answers) and incoming-webhook (picking its channel on Slack's install screen). Every permission is explained on Averil for Slack.
Averil reads a thread, or the last day of a direct message, only when someone talks to it there, so it can follow the conversation. It never reads other channel messages and never joins a channel on its own.
Write access
| Action | Slack permission | Verified by | Reversible |
|---|---|---|---|
| Restrict an app so it can no longer be used in the workspace | admin.apps:write | Reading the approved apps list | Yes |
This runs only after a person approves the exact plan. The rate limit for all Slack calls is 20 a minute.
How to connect
- 1Click Get started on averil.ai, or Add to Slack on the console's Get started page.
- 2Review the permissions on Slack's screen, pick the channel Averil should post in, and approve. The bot token goes straight to the broker.
- 3Sign in with Slack to reach the console.
- 4To have Averil in another channel, run
/invite @Averilthere. It posts only in channels it is a member of.
Averil then reads your people and channels and posts its introduction.
How to revoke
Remove the Averil app from your workspace in Slack's Manage apps page. Slack revokes its token at once, and Averil marks the integration as access revoked and stops posting. Cases and evidence collected so far stay in your account until you delete it.
What's next
Microsoft Teams, for teams not on Slack, is coming soon.
Stuck? Email averil@averil.ai or ask me in Slack.