POST/v2/public/slack/on-event

Receive a Slack interactivity event

Receives an interactive event from Slack, such as a user clicking a button in a previous message. Include Slack's signature and request timestamp headers so the incoming event can be verified and handled.

  • IdempotentThe SDK sends Idempotency-Key, so a retried request is only applied once.

2 parameters
X-Slack-Signaturestringrequired
The signature Slack provides to verify the request.
X-Slack-Request-Timestampstringrequired
The timestamp Slack provides with the request.

5 status codes
200Confirms that the Slack interactivity event request was received.
400Returned when the request is invalid.
codestringrequired
Allowed:unauthenticatedapi_access_forbiddenapi_key_not_foundinvalid_api_keyinvalid_project_api_keyproject_api_key_expiredbad_credentialsmfa_enabledinvalid_otp_codemfa_not_enabledcan_not_revoke_own_permissionsdata_corrupted
paramsarray<object>optional
401Returned when authentication or Slack signature verification fails.
codestringrequired
Allowed:unauthenticatedapi_access_forbiddenapi_key_not_foundinvalid_api_keyinvalid_project_api_keyproject_api_key_expiredbad_credentialsmfa_enabledinvalid_otp_codemfa_not_enabledcan_not_revoke_own_permissionsdata_corrupted
paramsarray<object>optional
403Returned when the request is forbidden.
codestringrequired
Allowed:unauthenticatedapi_access_forbiddenapi_key_not_foundinvalid_api_keyinvalid_project_api_keyproject_api_key_expiredbad_credentialsmfa_enabledinvalid_otp_codemfa_not_enabledcan_not_revoke_own_permissionsdata_corrupted
paramsarray<object>optional
404Returned when the requested resource is not found.
codestringrequired
Allowed:unauthenticatedapi_access_forbiddenapi_key_not_foundinvalid_api_keyinvalid_project_api_keyproject_api_key_expiredbad_credentialsmfa_enabledinvalid_otp_codemfa_not_enabledcan_not_revoke_own_permissionsdata_corrupted
paramsarray<object>optional

Error handling

Send the request body as a JSON string and include the X-Slack-Signature and X-Slack-Request-Timestamp headers. A 400 indicates an invalid request, a 401 indicates failed authentication or signature verification, a 403 indicates insufficient access, and a 404 indicates that the requested resource was not found.