Skip to main content
POST
Start Slack OAuth

Authorizations

Authorization
string
header
required

OAuth 2.1 authorization code + PKCE (S256). Tokens are tenant-bound (company_id) and scoped. Discover endpoints via /.well-known/oauth-authorization-server.

Body

application/json

Initiate the Slack OAuth flow. Unlike most writes on this surface, this one does NOT take the company from the token - send companyId in the body or the request is rejected with 400 invalid_request. The value is still checked against your token, so you can only pass a company you already have access to; sending someone else's is 403 rather than a way in.

companyId
string
required

The company to connect Slack for. Required, and must be one your token can access.

returnTo
string

Relative URL to return to after OAuth completes (defaults to /settings?tab=integrations; resolved as a safe relative redirect).

popup
boolean

If true, open the OAuth flow in a popup window.

Response

Signed Slack authorize URL.

data
object
required