Slack interactivity callback (Approve/Reject buttons)

Called by Slack, not by API clients — there is no API-key auth. Trust comes from Slack's v0 request signature (X-Slack-Signature over "v0:<X-Slack-Request-Timestamp>:<body>", 5-minute replay window) verified against the tenant's sealed signing secret. Drives the same approve/reject flow as the API and records "via Slack by @username" in the audit trail.

post/integrations/slack/actions

Request

  • Base URL: https://api.klanexai.com
  • URL: https://api.klanexai.com/integrations/slack/actions
  • Auth: none required

Headers

X-Slack-Request-Timestampstring required
X-Slack-Signaturestring required

Response

Action processed (or acknowledged as not-for-us).

Changes

No recorded changes to this operation across all 1 revision of this API.