Tolgee Octri Demo
POST/v2/public/slack/on-bot-event

Receive Slack bot events

Receives bot lifecycle events from Slack, such as an app being uninstalled from a workspace. Configure event delivery in the Slack App Event Subscription settings before Slack sends events to this endpoint.

  • IdempotentThe SDK sends Idempotency-Key, so a retried request is only applied once.

2 parameters
X-Slack-Signaturestringrequired
The signature Slack provides to verify the request.
X-Slack-Request-Timestampstringrequired
The timestamp Slack provides with the request.

5 status codes
200Returns an object confirming the Slack bot event request was processed.
400Returned when the request is invalid.
codestringrequired
Allowed:unauthenticatedapi_access_forbiddenapi_key_not_foundinvalid_api_keyinvalid_project_api_keyproject_api_key_expiredbad_credentialsmfa_enabledinvalid_otp_codemfa_not_enabledcan_not_revoke_own_permissionsdata_corrupted
paramsarray<object>optional
401Returned when authentication or Slack signature verification fails.
codestringrequired
Allowed:unauthenticatedapi_access_forbiddenapi_key_not_foundinvalid_api_keyinvalid_project_api_keyproject_api_key_expiredbad_credentialsmfa_enabledinvalid_otp_codemfa_not_enabledcan_not_revoke_own_permissionsdata_corrupted
paramsarray<object>optional
403Returned when the request is forbidden.
codestringrequired
Allowed:unauthenticatedapi_access_forbiddenapi_key_not_foundinvalid_api_keyinvalid_project_api_keyproject_api_key_expiredbad_credentialsmfa_enabledinvalid_otp_codemfa_not_enabledcan_not_revoke_own_permissionsdata_corrupted
paramsarray<object>optional
404Returned when the requested resource is not found.
codestringrequired
Allowed:unauthenticatedapi_access_forbiddenapi_key_not_foundinvalid_api_keyinvalid_project_api_keyproject_api_key_expiredbad_credentialsmfa_enabledinvalid_otp_codemfa_not_enabledcan_not_revoke_own_permissionsdata_corrupted
paramsarray<object>optional

Error handling

Send the request body as a JSON string and include the X-Slack-Signature and X-Slack-Request-Timestamp headers. A 400 indicates an invalid request, a 401 indicates failed authentication or signature verification, a 403 indicates insufficient access, and a 404 indicates that the requested resource was not found.