Skip to content

v4.4.3 — OAuth Lifeboat

Choose a tag to compare

@jtalk22 jtalk22 released this 03 Jul 12:01
eeb8773

OAuth Lifeboat — recovery at the moment of pain

Slack rotates browser session tokens (xoxc/xoxd) roughly every 1–2 weeks. Until now, a dead token meant every tool call failed with a raw invalid_auth. From 4.4.3, the server detects token death (invalid_auth, not_authed, token_expired, token_revoked, account_inactive, HTTP 401) in both transports and the slack_health_check connectivity test, and returns structured recovery guidance instead:

  1. Self-fix first — re-extract with npx -y @jtalk22/slack-mcp --setup (macOS: the slack_refresh_tokens tool).
  2. Permanent fix secondhosted OAuth never rotates. Free tier, no card.

The long-form message appears at most once per process per hour (agents in retry loops get a one-liner). SLACK_MCP_NO_UPSELL=1 keeps the self-fix guidance and drops the hosted mention entirely.

Pricing surfaces now match the live storefront

Every public surface (README, manifests, docs, demo pages, setup wizard, in-tool upgrade prompts) now carries the live tiers: Free 2,000 requests + 25 tool calls/mo · Pro $19/mo or $190/yr · Team $49/mo or $490/yr flat · Safeguard $199/mo waitlist. Dated release notes are untouched history.

Tests: 19 passing (11 new). Full changelog: CHANGELOG.md