From 2e84a06b0996ae4c38ccda757fe7d444c8ae5464 Mon Sep 17 00:00:00 2001
From: Rhys Sullivan <39114868+RhysSullivan@users.noreply.github.com>
Date: Mon, 14 Sep 2026 20:53:29 -0700
Subject: [PATCH] Hide built-in Slack OAuth option

---
 apps/cloud/src/engine/first-party-oauth-clients.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/apps/cloud/src/engine/first-party-oauth-clients.ts b/apps/cloud/src/engine/first-party-oauth-clients.ts
index aa1359c16..12b074862 100644
--- a/apps/cloud/src/engine/first-party-oauth-clients.ts
+++ b/apps/cloud/src/engine/first-party-oauth-clients.ts
@@ -328,6 +328,9 @@ export const firstPartyOAuthClientsFor = (
   }),
   ...client(env.FIRST_PARTY_SLACK_CLIENT_ID, env.FIRST_PARTY_SLACK_CLIENT_SECRET, {
     name: "slack",
+    // Slack MCP requires Marketplace approval for use outside the app's workspace.
+    // Keep the client resolvable for existing connections while withholding it.
+    unlisted: true,
     authorizationUrl: "https://slack.com/oauth/v2_user/authorize",
     tokenUrl: "https://slack.com/api/oauth.v2.user.access",
     resource: "https://mcp.slack.com",