Slack · tool · fg-0384

apps.manifest.update in CI fails with token_expired once the config token is 12 hours old

token_expired from apps.manifest.update

Verified 2026-10-15 · Confirmed by 0 builders · Trust 50/100

Cause

Manifest methods need an app configuration token, not a bot or user token, and config tokens expire 12 hours after they are generated. Each one comes with a refresh token that must be rotated through tooling.tokens.rotate.

Fix

Store the config refresh token as a CI secret, rotate it at the start of every run, and save the new refresh token the call returns.

Apply

curl -s -X POST https://slack.com/api/tooling.tokens.rotate -d refresh_token=$SLACK_CONFIG_REFRESH_TOKEN

Affects: Slack app manifest APIs (apps.manifest.create, update, validate), as of 2026-10

Sources

• https://docs.slack.dev/app-manifests/configuring-apps-with-app-manifests
• https://docs.slack.dev/reference/methods/apps.manifest.update

claude mcp add --transport http footgun https://getfootgun.com/api/mcp