
What Gets Notified
Channel Notifications
Sent to your configured notification channel:| Event | Description |
|---|---|
| New connector request | A user requests a new MCP server to be added |
| Access request | A user requests access to an existing MCP server |
| Security violation | ToolGuard detects a policy violation or security threat |

Direct Messages
Sent to individual users via DM:| Event | Description |
|---|---|
| Request approved | Your connector or access request was approved |
| Request rejected | Your connector or access request was rejected |
| Config token expired | Your Slack configuration token needs to be refreshed |
DM notifications require the user’s Slack email to match their Runlayer email. Runlayer looks up and caches the Slack user ID automatically.
Setup
All Slack configuration lives in Admin → Settings → Slack Integration.Generate a Configuration Token
Go to api.slack.com/apps, scroll to Your App Configuration Tokens, click Generate Token, and select your workspace. Copy the Refresh Token (starts with 
xoxe-).
Save the token in Runlayer
In Admin → Settings → Slack Integration, expand the Configuration Tokens section, click Configure, paste the refresh token, and click Save Token.

Create the Notifications Slack App
Click Create Slack App in the Notifications section. Runlayer creates a Slack app with the correct permissions and redirects you to Slack for OAuth authorization.
Select a notification channel
Choose the channel where notifications should be sent. Only channels the Slack app has been invited to will appear.
Enterprise Grid
For Slack Enterprise Grid installations, an additional Workspace selector appears after connecting. Select the workspace first, then choose a channel within it. The notification channel and workspace are saved together.Managing the Integration
Changing the notification channel
Select a different channel from the dropdown at any time. The change takes effect immediately.Disconnecting
Click Disconnect next to the connection status. This revokes the bot token and stops all notifications. The Slack app itself remains in your workspace — you can reconnect by clicking Connect to Slack again.Removing the Slack app entirely
With a valid configuration token, click Delete App to remove the Slack app from your workspace completely.If the app was created by a different Slack admin than the one who configured the token, Runlayer cannot auto-update or delete the app. You’ll see a warning — manage it directly at api.slack.com/apps.
Agent Slack Apps
Separate from notifications, each agent can have its own Slack app for @mentions and DMs. These are configured per-agent in Build → [Agent] → Slack and require the same configuration token. See the Slack Integration section in Settings for a list of all connected agent apps.Troubleshooting
No channels appear in the dropdown
No channels appear in the dropdown
The Slack app can only see channels it’s been invited to. For public channels, the app should see them automatically. For private channels, send
/invite @Runlayer in the channel first, then refresh the page.Test message fails
Test message fails
Check that:
- The Slack app is still authorized (not uninstalled from Slack)
- A notification channel is selected
- The app hasn’t been removed from the channel
DMs not being delivered
DMs not being delivered
DM notifications require the recipient’s email in Runlayer to match their email in Slack. If emails don’t match, the Slack user lookup fails silently and the DM is skipped.
'Cannot auto-update' warning
'Cannot auto-update' warning
This appears when the Slack app was created by a different admin than the one whose configuration token is currently saved. Runlayer needs the original creator’s token to update app manifests. Either:
- Have the original creator generate a new configuration token, or
- Delete the app and recreate it with the current admin’s token
Configuration token expired
Configuration token expired
Slack configuration tokens expire periodically. When this happens, the admin who configured the token receives a DM (if Slack is still connected) and the token is automatically removed. Generate a new token at api.slack.com/apps and save it in Settings.