feat: port Slack MCP Server changes to claude-agent-sdk and openai-agents-sdk

Port all pydantic-ai branch changes to the other two implementations:
- Add Slack MCP Server integration with OAuth user token
- Replace button-based App Home UI with text-based MCP status
- Use AsyncOAuthSettings for claude-agent-sdk's AsyncApp
- Add MCP setup steps to README OAuth sections
- Expand user scopes for MCP capabilities
- Update system prompt with Slack MCP Server section
- Simplify app_home_opened to use context.user_token

Author: mwbrooks

claude-agent-sdk/.env.sample

@@ -5,13 +5,11 @@ ANTHROPIC_API_KEY=YOUR_ANTHROPIC_API_KEY
 # SLACK_APP_TOKEN=YOUR_SLACK_APP_TOKEN
 # SLACK_BOT_TOKEN=YOUR_SLACK_BOT_TOKEN
 
-# Optional, uncomment and set when running app_oauth.py without the Slack CLI.
-# SLACK_SIGNING_SECRET=YOUR_SLACK_SIGNING_SECRET
-
 # Required for OAuth (app_oauth.py). Set your app's OAuth credentials.
 # SLACK_CLIENT_ID=YOUR_SLACK_CLIENT_ID
 # SLACK_CLIENT_SECRET=YOUR_SLACK_CLIENT_SECRET
-# SLACK_REDIRECT_URI=https://YOUR_NGROK_URL.ngrok-free.app/slack/oauth_redirect
+# SLACK_REDIRECT_URI=https://YOUR_NGROK_SUBDOMAIN.ngrok-free.app/slack/oauth_redirect
+# SLACK_SIGNING_SECRET=YOUR_SLACK_SIGNING_SECRET
 
 # Optional, uncomment and set when using a custom Slack instance.
 # SLACK_API_URL=YOUR_SLACK_API_URL

claude-agent-sdk/README.md

@@ -165,40 +165,46 @@ mv manifest.json manifest_socket_mode.json
 mv manifest_oauth.json manifest.json
 ```
 
-Replace all instances of `https://PLACEHOLDER.ngrok-free.app` in `manifest.json` with your ngrok URL.
+Replace all instances of `https://YOUR_NGROK_SUBDOMAIN.ngrok-free.app` in `manifest.json` with your ngrok URL.
 
 4. Create a new local dev app:
 
 ```sh
 slack install -E local
 ```
 
-5. Copy the following values into your `.env`. Run `slack app settings` and copy the **Signing Secret**, **Client ID**, and **Client Secret**:
+5. Enable MCP for your app:
+   - Run `slack app settings` to open your app's settings
+   - Navigate to **Agents & AI Apps** in the left-side navigation
+   - Toggle **Model Context Protocol** on
+
+6. Update your `.env` OAuth environment variables:
+   - Run `slack app settings` to open App Settings
+   - Copy **Client ID**, **Client Secret**, and **Signing Secret**
+   - Update the **Slack Redirect URI** with your ngrok URL
 
 ```sh
-SLACK_SIGNING_SECRET=YOUR_SIGNING_SECRET
 SLACK_CLIENT_ID=YOUR_CLIENT_ID
 SLACK_CLIENT_SECRET=YOUR_CLIENT_SECRET
-SLACK_REDIRECT_URI=https://YOUR_NGROK_URL.ngrok-free.app/slack/oauth_redirect
+SLACK_REDIRECT_URI=https://YOUR_NGROK_SUBDOMAIN.ngrok-free.app/slack/oauth_redirect
+SLACK_SIGNING_SECRET=YOUR_SIGNING_SECRET
 ```
 
-Replace `YOUR_NGROK_URL` in `SLACK_REDIRECT_URI` with your ngrok subdomain.
-
-6. Start the app:
+7. Start the app:
 
 ```sh
 slack run app_oauth.py
 ```
 
-7. Click the install URL printed in the terminal to install the app to your workspace via OAuth.
+8. Click the install URL printed in the terminal to install the app to your workspace via OAuth.
 
 </details>
 
 <details><summary><strong>Using the Terminal</strong></summary>
 
 #### Terminal
 
-3. Create your Slack app at [api.slack.com/apps/new](https://api.slack.com/apps/new) using [`manifest_oauth.json`](./manifest_oauth.json). Before pasting the manifest, replace all instances of `https://PLACEHOLDER.ngrok-free.app` with your ngrok URL.
+3. Create your Slack app at [api.slack.com/apps/new](https://api.slack.com/apps/new) using [`manifest_oauth.json`](./manifest_oauth.json). Before pasting the manifest, replace all instances of `https://YOUR_NGROK_SUBDOMAIN.ngrok-free.app` with your ngrok URL.
 
 4. Install the app to your workspace and copy the following values into your `.env`:
    - **Signing Secret** — from _Basic Information_
@@ -210,18 +216,23 @@ SLACK_SIGNING_SECRET=YOUR_SIGNING_SECRET
 SLACK_BOT_TOKEN=xoxb-YOUR_BOT_TOKEN
 SLACK_CLIENT_ID=YOUR_CLIENT_ID
 SLACK_CLIENT_SECRET=YOUR_CLIENT_SECRET
-SLACK_REDIRECT_URI=https://YOUR_NGROK_URL.ngrok-free.app/slack/oauth_redirect
+SLACK_REDIRECT_URI=https://YOUR_NGROK_SUBDOMAIN.ngrok-free.app/slack/oauth_redirect
 ```
 
-Replace `YOUR_NGROK_URL` in `SLACK_REDIRECT_URI` with your ngrok subdomain.
+Replace `YOUR_NGROK_SUBDOMAIN` in `SLACK_REDIRECT_URI` with your ngrok subdomain.
+
+5. Enable MCP for your app:
+   - Open your app at [api.slack.com/apps](https://api.slack.com/apps)
+   - Navigate to **Agents & AI Apps** in the left-side navigation
+   - Toggle **Model Context Protocol** on
 
-5. Start the app:
+6. Start the app:
 
 ```sh
 python3 app_oauth.py
 ```
 
-6. Click the install URL printed in the terminal to install the app to your workspace via OAuth.
+7. Click the install URL printed in the terminal to install the app to your workspace via OAuth.
 
 </details>
 

claude-agent-sdk/agent/casey.py

@@ -57,6 +57,8 @@
 2. Search the knowledge base for relevant articles
 3. If the KB has a solution, walk the user through it step by step
 4. If the issue requires action (password reset, ticket creation), use the appropriate tool
+   - For password resets: look up the user's email address using Slack MCP tools before \
+triggering the reset — don't ask the user for information you can look up yourself
 5. After taking action, confirm what was done and what the user should expect next
 6. If you cannot resolve the issue, create a support ticket and let the user know
 
@@ -75,6 +77,21 @@
 Call this once when the issue is fully resolved (password reset done, ticket created, problem fixed).
 - Do not use `eyes` — it is added automatically
 
+## SLACK MCP SERVER
+You may have access to the Slack MCP Server, which gives you powerful Slack tools beyond \
+your built-in IT helpdesk tools. Use them whenever they would help the user.
+
+Available capabilities:
+- **Search**: Search messages and files across public channels, search for channels by name
+- **Read**: Read channel message history, read thread replies, read canvas documents
+- **Write**: Send messages, create draft messages, schedule messages for later
+- **Canvases**: Create, read, and update Slack canvas documents
+
+Use these tools proactively when they can help resolve an IT issue — for example, \
+searching for related reports from other users, checking a channel for outage updates, \
+or creating a canvas to document a solution. Also use them when the user explicitly \
+asks you to perform a Slack action like sending a message or creating a canvas.
+
 ## BOUNDARIES
 - You are an IT helpdesk agent only — politely redirect non-IT questions
 - Do not make up system statuses or ticket numbers — always use the provided tools

claude-agent-sdk/agent/tools/password_reset.py

@@ -7,7 +7,8 @@
         "Trigger a password reset for a specified user account. "
         "Use this tool when a user requests a password reset for their own account "
         "or reports being locked out. The reset link will be sent to their registered "
-        "email address."
+        "email address. Before calling this tool, look up the user's email address "
+        "using available Slack tools if possible, rather than asking the user for it."
     ),
     input_schema={"target_user": str},
 )
@@ -17,7 +18,7 @@ async def trigger_password_reset_tool(args):
 
     text = (
         f"Password reset initiated for **{target_user}**.\n\n"
-        f"A reset link has been sent to the email address on file. "
+        f"A reset link has been sent to **{target_user}@acme.com**. "
         f"The link will expire in 30 minutes.\n\n"
         f"_If the user doesn't receive the email within 5 minutes, "
         f"ask them to check their spam folder or verify their registered email address._"

claude-agent-sdk/app_oauth.py

@@ -3,11 +3,10 @@
 
 from dotenv import load_dotenv
 from slack_bolt.async_app import AsyncApp
-from slack_bolt.oauth.oauth_settings import OAuthSettings
 from slack_sdk.web.async_client import AsyncWebClient
 
 from listeners import register_listeners
-from oauth import BOT_SCOPES, USER_SCOPES, installation_store, state_store
+from oauth import oauth_settings
 
 load_dotenv(dotenv_path=".env", override=False)
 
@@ -23,19 +22,11 @@
     # Allow bot-posted messages (e.g. issue modal submissions with metadata)
     # to reach the message handler instead of being silently dropped
     ignoring_self_events_enabled=False,
-    oauth_settings=OAuthSettings(
-        client_id=os.environ.get("SLACK_CLIENT_ID"),
-        client_secret=os.environ.get("SLACK_CLIENT_SECRET"),
-        scopes=BOT_SCOPES,
-        user_scopes=USER_SCOPES,
-        installation_store=installation_store,
-        state_store=state_store,
-    ),
+    oauth_settings=oauth_settings,
 )
 
 register_listeners(app)
 
 if __name__ == "__main__":
     port = int(os.environ.get("PORT", 3000))
-    print(f"To install the app, navigate to http://localhost:{port}/slack/install")
     app.start(port=port)

claude-agent-sdk/listeners/actions/__init__.py

@@ -2,13 +2,10 @@
 
 from slack_bolt.async_app import AsyncApp
 
-from .account_connection import handle_connect_account, handle_disconnect_account
 from .issue_buttons import handle_issue_button
 from .feedback_buttons import handle_feedback_button
 
 
 def register(app: AsyncApp):
     app.action(re.compile(r"^category_"))(handle_issue_button)
     app.action("feedback")(handle_feedback_button)
-    app.action("connect_account")(handle_connect_account)
-    app.action("disconnect_account")(handle_disconnect_account)

claude-agent-sdk/listeners/actions/account_connection.py

@@ -1,5 +1,6 @@
 import os
 from logging import Logger
+from urllib.parse import urljoin
 
 from slack_bolt.context.async_context import AsyncBoltContext
 from slack_sdk.web.async_client import AsyncWebClient
@@ -13,26 +14,17 @@ async def handle_app_home_opened(
     """Publish the App Home view when a user opens the app's Home tab."""
     try:
         user_id = context.user_id
-        authorize_url = None
+        install_url = None
         is_connected = False
 
         if os.environ.get("SLACK_CLIENT_ID"):
-            from oauth import authorize_url_generator, installation_store, state_store
-
-            installation = installation_store.find_installation(
-                enterprise_id=context.enterprise_id or "",
-                team_id=context.team_id or "",
-                user_id=user_id,
-            )
-            if installation and installation.user_token:
+            if context.user_token:
                 is_connected = True
             else:
-                state = state_store.issue()
-                authorize_url = authorize_url_generator.generate(state)
+                redirect_uri = os.environ.get("SLACK_REDIRECT_URI", "")
+                install_url = urljoin(redirect_uri, "/slack/install")
 
-        view = build_app_home_view(
-            authorize_url=authorize_url, is_connected=is_connected
-        )
+        view = build_app_home_view(install_url=install_url, is_connected=is_connected)
         await client.views_publish(user_id=user_id, view=view)
     except Exception as e:
         logger.exception(f"Failed to publish App Home: {e}")

claude-agent-sdk/listeners/events/app_home_opened.py

@@ -28,16 +28,15 @@
 
 
 def build_app_home_view(
-    authorize_url: str | None = None, is_connected: bool = False
+    install_url: str | None = None, is_connected: bool = False
 ) -> dict:
     """Build the App Home Block Kit view with category buttons.
 
     Args:
-        authorize_url: OAuth authorize URL. When provided, the user has not
-            connected and will see a "Connect" URL button.
-        is_connected: When ``True``, the user is connected and will see a
-            "Disconnect" action button. When both params are default, the
-            OAuth section is hidden (app.py mode).
+        install_url: OAuth install URL. When provided, the user has not
+            connected and will see a link to install.
+        is_connected: When ``True``, the user is connected and the MCP
+            status section shows as connected.
     """
     blocks = [
         {
@@ -75,7 +74,6 @@ def build_app_home_view(
                 for cat in CATEGORIES
             ],
         },
-        {"type": "divider"},
         {
             "type": "context",
             "elements": [
@@ -94,40 +92,42 @@ def build_app_home_view(
                 "type": "section",
                 "text": {
                     "type": "mrkdwn",
-                    "text": (
-                        ":white_check_mark: *Your Slack account is connected.*\n"
-                        "Casey has access to search messages, read channels, and more."
-                    ),
-                },
-                "accessory": {
-                    "type": "button",
-                    "text": {"type": "plain_text", "text": "Disconnect"},
-                    "action_id": "disconnect_account",
-                    "style": "danger",
+                    "text": "\U0001f7e2 *Slack MCP Server is connected.*",
                 },
             }
         )
-    elif authorize_url:
+        blocks.append(
+            {
+                "type": "context",
+                "elements": [
+                    {
+                        "type": "mrkdwn",
+                        "text": "Casey has access to search messages, read channels, and more.",
+                    }
+                ],
+            }
+        )
+    elif install_url:
         blocks.append(
             {
                 "type": "section",
                 "text": {
                     "type": "mrkdwn",
-                    "text": (
-                        ":electric_plug: *Connect your Slack account*\n"
-                        "Unlock full functionality including searching messages, "
-                        "reading channels, and more."
-                    ),
-                },
-                "accessory": {
-                    "type": "button",
-                    "text": {"type": "plain_text", "text": "Connect"},
-                    "url": authorize_url,
-                    "action_id": "connect_account",
-                    "style": "primary",
+                    "text": f"\U0001f534 *Slack MCP Server is disconnected.* <{install_url}|Connect the Slack MCP Server.>",
                 },
             }
         )
+        blocks.append(
+            {
+                "type": "context",
+                "elements": [
+                    {
+                        "type": "mrkdwn",
+                        "text": "The Slack MCP Server enables Casey to search messages, read channels, and more.",
+                    }
+                ],
+            }
+        )
 
     return {
         "type": "home",