01 / THE OVERVIEW
Know the path before you start.
Scenario & assumptions
A server-hosted integration piloted in external Slack workspaces, with possible commercial distribution.
- You are registering your own provider app; managed OAuth may offer another path.
- Hands-on estimates cover console configuration with an existing callback and account, not building the integration.
A development workspace install, an external pilot, and Marketplace distribution are different milestones. Plan for the route your product actually needs. [2][4]
Marketplace submission has product and adoption prerequisites. The review guide requires at least 10 active workspaces, with an exception for certain Discovery API partners. Submission guidelines also discuss 20 monthly active users and exclude sandbox workspaces; confirm the complete eligibility wording for your app before submitting. [3][4]
Allow roughly 30–90 minutes for console configuration with a working callback and ready workspace. This estimate excludes implementing the integration and Marketplace preparation.
Planning estimateSlack publishes up to 10 business days for preliminary feedback, then up to 10 weeks for functional review of new submissions, or 6 weeks for changes. Check the current estimate in app settings; these are review stages, not setup durations. [4]
Applies when: You are eligible and submitting for Marketplace review.
A customer's workspace can require administrator approval or allow only Marketplace apps. Public distribution does not bypass these controls. [2]
02 / YOUR SETUP PATH
From prerequisites to the next gate.
Before you begin
Create the app for your development workspace, configure the necessary permissions and HTTPS redirect URL, and implement the authorization-code exchange. [1][2]
A customer's workspace can require administrator approval or allow only Marketplace apps. Public distribution does not bypass these controls. [2]
- 01
Configure the development app
YouCHECKPOINTTest installation and onboarding in a workspace other than the development workspace before Marketplace review. [4]
- 02
Prepare external installation
YouTo install beyond the associated workspace, complete Slack's distribution setup. Unlisted distribution suits a pilot; commercial distribution should follow the Marketplace path in current guidance. [2]
A customer's workspace can require administrator approval or allow only Marketplace apps. Public distribution does not bypass these controls. [2]
CHECKPOINTTest installation and onboarding in a workspace other than the development workspace before Marketplace review. [4]
- 03
Check Marketplace eligibility
YouMarketplace submission has product and adoption prerequisites. The review guide requires at least 10 active workspaces, with an exception for certain Discovery API partners. Submission guidelines also discuss 20 monthly active users and exclude sandbox workspaces; confirm the complete eligibility wording for your app before submitting. [3][4]
Slack publishes up to 10 business days for preliminary feedback, then up to 10 weeks for functional review of new submissions, or 6 weeks for changes. Check the current estimate in app settings; these are review stages, not setup durations. [4]
Applies when: You are eligible and submitting for Marketplace review.
CHECKPOINTMarketplace submission has product and adoption prerequisites. The review guide requires at least 10 active workspaces, with an exception for certain Discovery API partners. Submission guidelines also discuss 20 monthly active users and exclude sandbox workspaces; confirm the complete eligibility wording for your app before submitting. [3][4]
- 04
03 / PERMISSIONS
Ask for the access you need.
04 / APPROVAL GATES
These are separate decisions.
Registration, review, distribution, and customer policy can each have their own requirements.
App registration
requiredMarketplace distribution
conditionalTo install beyond the associated workspace, complete Slack's distribution setup. Unlisted distribution suits a pilot; commercial distribution should follow the Marketplace path in current guidance. [2]
Marketplace submission has product and adoption prerequisites. The review guide requires at least 10 active workspaces, with an exception for certain Discovery API partners. Submission guidelines also discuss 20 monthly active users and exclude sandbox workspaces; confirm the complete eligibility wording for your app before submitting. [3][4]
Slack publishes up to 10 business days for preliminary feedback, then up to 10 weeks for functional review of new submissions, or 6 weeks for changes. Check the current estimate in app settings; these are review stages, not setup durations. [4]
Applies when: You are eligible and submitting for Marketplace review.
User consent
requiredOrganization policy
conditionalA customer's workspace can require administrator approval or allow only Marketplace apps. Public distribution does not bypass these controls. [2]
Scope / app review
unresolvedThe reviewed material does not establish every approval condition for your exact scenario. Confirm unresolved gates before launch.
Unverified05 / WHEN YOU’RE BLOCKED
Find the next useful move.
An external workspace cannot install the app
To install beyond the associated workspace, complete Slack's distribution setup. Unlisted distribution suits a pilot; commercial distribution should follow the Marketplace path in current guidance. [2]
A customer's workspace can require administrator approval or allow only Marketplace apps. Public distribution does not bypass these controls. [2]
The app is not yet eligible for Marketplace review
Marketplace submission has product and adoption prerequisites. The review guide requires at least 10 active workspaces, with an exception for certain Discovery API partners. Submission guidelines also discuss 20 monthly active users and exclude sandbox workspaces; confirm the complete eligibility wording for your app before submitting. [3][4]
06 / AGENT & HUMAN STEPS
Make the handoff explicit.
Research an agent can help with
An agent can find public documentation, organize the requirements, and flag missing evidence. This guide does not mean it has created or approved your app.
InterpretationWhere a person takes over
You control sign-in, account permissions, credentials, consent, domain ownership, and provider submissions. An administrator or provider may need to make the final decision.
Interpretation07 / OPEN QUESTIONS
Keep the unknowns visible.
- Which exact bot or user permissions does the feature need?
- Will customer workspace policy allow the pilot?
- What estimate appears in your app's submission screen?
08 / EVIDENCE & SOURCES
Inspect what supports the guide.
Provider documentation was reviewed. No signed-in registration, OAuth connection, or approval was completed.
Published review estimates can change; check the provider before setting a launch date.
Recorded observations
The public page explicitly required Slack sign-in to create an application.
No workspace sign-in, app creation, installation or Marketplace submission was performed.
01Slack: OAuth authorization code installationdocs.slack.dev · Excerpt / documentation review
Your app obtains an access token in three steps
Read the original source ↗02Slack: app lifecycle and distributiondocs.slack.dev · Excerpt / documentation review
Some workspaces will restrict app installation so that only workspace administrators can provide authorization.
Read the original source ↗03Slack: Marketplace requirementsdocs.slack.dev · Excerpt / documentation review
unnecessarily request a large number of scopes when there is a less permissive option
Read the original source ↗04Slack: Marketplace review processdocs.slack.dev · Excerpt / documentation review
Our review turnaround time can vary depending on volume
Read the original source ↗05Slack: token rotationdocs.slack.dev · Excerpt / documentation review
Token rotation may not be turned off once it's turned on
Read the original source ↗Check the managed OAuth option
Composio may provide a managed app for the provider’s auth method. Your own app changes registration ownership, branding, scopes, or quotas; it does not remove provider conditions.
Composio managed OAuth directory ↗