Skip to main content

​
Slack

Henry’s Slack app requests these bot token scopes: Events subscribed: app_mention, message.im, message.channels, message.groups, member_joined_channel, reaction_added, and channel_created. Henry only reads channels it has been invited to. Channel capture can be turned off or purged per channel with /henry capture. See Slack.

​
Microsoft Teams

  • Microsoft Graph application permissions: none. Henry does not request tenant-wide Graph permissions. Files you send arrive through the Bot Framework, not Graph.
  • Sign-in: the standard delegated openid profile email scopes, used only to sign the connecting admin in.
  • Resource-specific consent (RSC): exactly one permission, ChannelMessage.Read.Group, granted per team when Henry is added to that team. It lets Teams deliver unmentioned channel messages so Henry can follow replies in threads it owns and learn from channels it has been added to.
The app registration is multi-tenant and supports personal chats, group chats, and team channels. Publisher domain: usehenry.ai, verified. Microsoft does not deliver unmentioned messages in private or shared channels to any bot, so in those channels every message to Henry must mention it. Henry deliberately does not request the tenant-wide ChannelMessage.Read.All permission.

​
Integrations

Each integration you connect asks for its own permissions on that tool’s consent screen. Henry requests the scopes needed for the tool’s read and write actions. Your tokens are held by the connection provider, not stored by Henry. See Integrations.