← Change Slack setup choice

Selected path New Slack bot

Set up PR Reviewer in Slack.

Complete the Slack app, agent settings, access rules, integrations, and final checks below.

01
SLACK API // WORKSPACE CREDENTIALS

Generate configuration tokens.

These workspace-level tokens let Agent Barn prepare a new Slack app. Generate both values and keep them ready for the next steps.

  1. 01.1

    Open Slack API → Your Apps.

    Go to api.slack.com/apps ↗, sign in, and confirm that you are working in the workspace where this agent should operate.

  2. 01.2

    Find “Your App Configuration Tokens.”

    Scroll near the bottom of the page and click Generate Token.

    Focused crop of the Slack App Configuration Tokens panel
    Slack API → Your Apps → App Configuration Tokens.
  3. 01.3

    Select the workspace and generate the pair.

    Choose the same workspace, then click Generate. Slack returns a configuration access token and an xoxe- refresh token.

    Slack Generate Your App Configuration Token workspace dialog
    1 // Select the workspace. 2 // Generate the token pair.
  4. 01.4

    Store both values securely.

    The access token authorizes app creation and expires after 12 hours. The refresh token rotates that access. Never place either value in chat, logs, prompts, or URLs.

  5. 01.5

    Submit the token pair in Agent Barn.

    Paste the configuration access token and xoxe- refresh token into their matching fields, then continue while the access token is still valid.

02
SLACK APP // PUBLIC IDENTITY

Define the bot identity.

Use recognizable, role-oriented metadata. These values are visible to teammates and can be changed later.

  1. 02.1

    Choose the display name.

    This name appears in Slack messages, mentions, and the app directory. Avoid secrets, environment names, or workspace-specific data.

    RECOMMENDEDAgentBarn_PR_Reviewer
  2. 02.2

    Write a one-sentence description.

    Describe the outcome teammates can expect rather than the implementation behind it.

    SUGGESTED

    Reviews pull requests for correctness, clarity, and style, then prepares suggestions for human review.

  3. 02.3

    Choose the icon background color.

    Pick a readable color that follows your workspace convention. Agent Barn orange is the recommended default.

    Aubergine#511152

    A familiar Slack-adjacent choice.

    Blue#1264A3

    Calm and conventional for utility bots.

    Green#2EB67D

    Useful for workflow or status-oriented agents.

    Amber#ECB22E

    High visibility for reminders and alerts.

    Agent Barn orange#CC4400

    Recommended for a consistent Agent Barn identity.

  4. 02.4

    Review the public metadata.

    Confirm that the name states the role, the description states the result, the color remains legible at small sizes, and no sensitive information is exposed.

  5. 02.5

    Create the app and confirm it appears in Slack.

    Save the identity in Agent Barn, complete app creation, then confirm the new app appears under Your Apps in the intended workspace before continuing.

03
SLACK API // SOCKET MODE

Connect the new Slack app.

Create the app-level token, install the bot, and store the two resulting credentials that Agent Barn needs.

Open Slack apps ↗
  1. 03.1

    Select the new app and verify its connection settings.

    Return to Your Apps ↗, open the app created for this recipe, verify the workspace, and confirm Socket Mode and the recipe's event subscriptions are enabled.

  2. 03.2

    Open App-Level Tokens and start a new token.

    In Basic Information → App-Level Tokens, click Generate Token and Scopes. The crop keeps the only control you need in view.

    Slack App-Level Tokens section focused on the Generate Token and Scopes button
    Basic Information → App-Level Tokens → Generate Token and Scopes.
  3. 03.3

    Name the Socket Mode token and add connections:write.

    Use a descriptive name such as agent-barn-socket. Add only connections:write, which lets Slack route Socket Mode events over WebSockets, then click Generate.

    Slack Generate an app-level token dialog with token name, connections write scope, and Generate button
    1 // Name the token. 2 // Confirm connections:write. 3 // Generate it.
  4. 03.4

    Copy the app-level token.

    Slack displays the xapp- token after generation. Click Copy, then keep it ready for the Agent Barn App-level token field. The token is blurred in this reference.

    Slack app-level token confirmation with the token value blurred and the Copy button highlighted
    The generated token has connections:write.
  5. 03.5

    Install the app to the workspace.

    Open Install App, then choose Install to [your workspace]. Review the requested permissions, make sure the workspace selector is correct, and choose Allow.

    Slack Install App page focused on the Install to workspace button
    Install App → Install to your workspace.
    Slack app permission review with workspace selection and Allow button
    1 // Confirm the workspace. 2 // Approve only after reviewing permissions.
  6. 03.6

    Find the Bot User OAuth Token after installation.

    After installation, Slack shows an OAuth Tokens section containing the Bot User OAuth Token. Click Copy and keep the xoxb- value ready for Agent Barn. The token is blurred in this reference.

    Slack Installed App Settings OAuth Tokens section with the token value blurred and the Copy button highlighted
    Installed App Settings → OAuth Tokens → Bot User OAuth Token → Copy.
  7. 03.7

    Enter both tokens in Agent Barn.

    Paste the xapp- value into App-level token and the xoxb- value into Bot token.

  8. 03.8

    Save and verify the connected app.

    Save both fields and confirm Agent Barn resolves the expected Slack app and workspace. Stop if either identity is wrong.

Keep them private

Enter Slack tokens only in their matching Agent Barn fields. Do not include them in messages or screenshots.

04
AGENT BARN // OPERATING BOUNDARIES

Configure how the teammate operates.

Work through these settings in order. Each controls a different part of the agent’s behavior or access.

  1. 04.1
    IDENTITY

    Name the teammate for its role.

    The operational name appears in dashboards and audit history. A short human name makes conversations and mentions easier.

    OPERATIONAL NAME

    AgentBarn_PR_Reviewer

    Clear in dashboards and logs.

    SUGGESTED HUMAN NAME

    Reeve

    Easy to mention and remember.

  2. 04.2
    MODEL

    Choose the model that performs the work.

    The model affects capability, speed, and cost. The supplied configuration shows DeepSeek: DeepSeek V4 Flash 0731. Confirm it is available and appropriate for this recipe’s complexity and data sensitivity.

    How to decide

    Use a fast model for structured, repeatable work. Use a more capable model for ambiguous context or nuanced reasoning. Evaluate representative tasks before granting broader access.

  3. 04.3
    COMMAND APPROVAL

    Decide when a human must approve commands.

    Start with the most restrictive mode that still makes the workflow useful.

    Command approval options: Auto, Manual, and Off
    Current default shown: Auto.
    RECOMMENDED START

    Auto

    Low-risk commands run automatically; higher-risk commands still require approval.

    MAXIMUM OVERSIGHT

    Manual

    The agent asks before every command. Best for pilots and sensitive systems.

    NO APPROVAL GATE

    Off

    All prompts are skipped. Use only with tightly sandboxed, narrowly scoped, reversible tools.

  4. 04.4
    CHANNEL ACCESS

    Choose which channels the agent may answer in.

    Slack controls which channels the app can see; this policy controls where the agent may respond.

    Channel access options: Allowlist and Open
    Current default shown: Allowlist.
    RECOMMENDED START

    Allowlist

    Respond only in approved channels. Best for pilots and team-specific workflows.

    BROAD AVAILABILITY

    Open

    Respond in any reachable channel. Use only for intentionally workspace-wide roles.

  5. 04.5
    DIRECT MESSAGES

    Control who can start private conversations.

    Direct messages remove shared-channel context and oversight. Enable them only when private interaction is genuinely needed.

    Direct message options: Off, Allowlist, and Open
    Current default shown: Off.
    RECOMMENDED START

    Off

    Ignore direct messages and keep work visible in approved channels.

    LIMITED PRIVATE ACCESS

    Allowlist

    Only designated operators and reviewers may send direct messages.

    WORKSPACE-WIDE DMS

    Open

    Anyone who can reach the app may DM it. Use only with strong identity and tool controls.

  6. 04.6
    VERBOSITY

    Choose how much work the agent narrates.

    This changes what teammates see while the agent works; it does not change capabilities or approvals.

    Verbosity options: Verbose and Concise
    Current default shown: Concise.
    VISIBLE EXECUTION

    Verbose

    Announces each step. Useful during onboarding, debugging, and supervised pilots.

    RECOMMENDED STEADY STATE

    Concise

    Provides final answers without narrating every intermediate step.

  7. 04.7

    Add the intended Slack destinations.

    Invite the app to each permitted channel. When Allowlist is selected, add the same channels and approved direct-message users in Agent Barn before testing.

  8. 04.8

    Configure the recipe trigger and workflow.

    Trigger: A pull request is opened or updated in a connected repository.

    1. Inspect change. Read the pull request, diff, and configured repository context.

    2. Assess quality. Look for correctness, clarity, and style concerns.

    3. Prepare feedback. Draft suggestions with references to the relevant change.

    4. Hand off. Share review notes for a human reviewer to assess.

  9. 04.9

    Apply the recipe requirements and review rule.

    Template

    The team’s review criteria, conventions, and instructions.

    Skills

    GitHub or Bitbucket access scoped to the intended repositories.

    Channels

    A Slack destination for review updates and questions.

Suggested starting profile

Auto command approval · Channel allowlist · Direct messages off · Concise responses. Expand access only after representative tests and review of the agent’s tools and data boundaries.

05
AGENT BARN // TOOLS AND CREDENTIALS

Assign the skills this recipe needs.

Skills connect the agent to external platforms. Select only the integrations required for the workflow, then connect each one with a dedicated or approved shared credential.

CHOOSE ONE PROVIDER

GitHub or Bitbucket

source control

Read pull-request metadata and diffs, then publish review suggestions when allowed.

Credential
A GitHub App or Bitbucket access token restricted to reviewed repositories.
Permissions
Repository metadata: read · Pull requests and diffs: read · Review comments: write · Merge and administration: no access
  1. Choose the provider and repositories in scope.
  2. Install read permissions first, then add review-comment access if needed.
  3. Trigger on opened, reopened, or updated pull requests, not merge or administration events.
  1. 05.1

    Keep required skills; resolve “choose one” integrations.

    Skills marked Required by template are part of this recipe’s workflow. When a card names alternatives, choose the provider your team actually uses. Optional skills should remain disconnected until a defined task needs them.

  2. 05.2

    Choose how each credential will be supplied.

    Choose Enter credentials to connect an account now. Choose Use shared credential when the correct workspace account is already connected.

    NEW CONNECTION

    Enter credentials

    Connect the account required by this recipe.

    EXISTING CONNECTION

    Use shared credential

    Select a matching account already available in Agent Barn.

  3. 05.S1

    Choose GitHub or Bitbucket.

    Read pull-request metadata and diffs, then publish review suggestions when allowed. Connect only the provider that owns the repositories for this recipe.

  4. 05.G1

    GitHub // Enter a dedicated credential.

    Choose GitHub → Enter credentials. Use a token created for this recipe instead of a personal token already used by other tools.

  5. 05.G2

    GitHub // Open the Classic PAT page.

    Open Settings → Credentials → Personal access tokens → Tokens (classic). Select Generate new token → Generate new token (classic), or open github.com/settings/tokens ↗.

  6. 05.G3

    GitHub // Name and expire the token.

    Use a note such as AgentBarn_PR_Reviewer, choose an expiration date, and continue.

  7. 05.G4

    GitHub // Select the Classic PAT scopes.

    REPO

    Repository access, including available private repositories.

    READ:ORG

    Read organization and team membership.

    READ:USER

    Read user profile data.

    Repository access

    The repo scope is broad. Add the specific repository names this recipe should use.

  8. 05.G5

    GitHub // Generate and copy the token.

    Click Generate token and copy the value for the Personal access token field in Agent Barn.

    GitHub Classic PAT success row with the secret blurred and the copy control visible
    The token value is blurred in this guide.
  9. 05.G6

    GitHub // Complete the credential fields.

    Read the repository header as owner/repository. In this example, aai-labs is Owner / Org and agent-barn is the repository.

    GitHub repository header showing aai-labs as the organization and agent-barn as the repository
    Owner / Org: aai-labs · Repository: agent-barn
    PERSONAL ACCESS TOKEN

    Paste the copied Classic PAT.

    OWNER / ORG

    Value before the slash.

    REPOSITORIES

    Add each permitted name after the slash.

    EMPTY REPOSITORY LIST

    Avoid it; the token could address any repository it can reach.

  10. 05.B1

    Bitbucket // Record the workspace ID.

    Open the target workspace. In a URL such as bitbucket.org/agentbarn/workspace/overview, agentbarn is the workspace ID. You can also confirm it in workspace settings under Workspace ID.

  11. 05.B2

    Bitbucket // Open Atlassian account security.

    Select the Bitbucket profile avatar, choose Account settings, open Security, then choose Create and manage API tokens.

    Atlassian Security page API tokens section
    Bitbucket account settings opens the shared Atlassian token manager.
  12. 05.B3

    Bitbucket // Create a scoped API token.

    Select Create API token with scopes, enter a recipe-specific name and expiration, select Bitbucket as the app, and continue to permissions.

  13. 05.B4

    Bitbucket // Select the required scopes.

    READ:USER:BITBUCKET

    Read the authenticated account.

    READ:WORKSPACE:BITBUCKET

    Read the configured workspace.

    READ:REPOSITORY:BITBUCKET

    Read repository source and metadata.

    READ:PULLREQUEST:BITBUCKET

    Read pull requests and their context.

    WRITE:PULLREQUEST:BITBUCKET

    Required only when this recipe posts review comments.

  14. 05.B5

    Bitbucket // Create and copy the token.

    Review the selected Bitbucket app and scopes, create the token, and copy it for the API token field in Agent Barn.

  15. 05.B6

    Bitbucket // Complete the credential fields.

    WORKSPACE

    Bitbucket workspace ID, such as agentbarn.

    REPOSITORIES

    Add every permitted repository; avoid an empty list.

    EMAIL

    Atlassian account email that created the token.

    API TOKEN

    Paste the Bitbucket-scoped token.

    If the Agent Barn panel still says “App password scopes,” use the API-token equivalents above. Bitbucket app passwords are no longer the current credential path.

  16. 05.S2

    Validate the selected provider boundary.

    Test one permitted repository and one repository outside the configured list. Confirm the agent can perform only the operations required by PR Reviewer: Repository metadata: read · Pull requests and diffs: read · Review comments: write · Merge and administration: no access.

  17. 05.Z

    Validate every selected skill before hiring.

    Run one expected action and confirm the recipe cannot reach anything outside its selected accounts and resources. Resolve permission issues before choosing Hire.

06
FINAL CHECK

Verify the setup before launch.

Run this short review once Slack, Agent Barn, and the required skills are configured.

  • Confirm the app is installed in the intended Slack workspace.
  • Verify the xapp- and xoxb- values connect the intended Slack app.
  • Validate every required skill and confirm its credential has only the intended site, space, project, or repository access.
  • Test one representative request in an allowlisted channel.
  • Confirm higher-risk commands still trigger the expected approval path.
  • Review the agent’s response quality, visibility, and logs before expanding access.
  • Run the configured trigger: A pull request is opened or updated in a connected repository.
  • Confirm the result follows Inspect change → Assess quality → Prepare feedback → Hand off.
  • Apply the review rule: Treat comments as review suggestions, not approval to merge or deploy code without the team’s established controls.
RECIPE PATH COMPLETE

PR Reviewer is ready for a controlled pilot.

Start with a narrow audience and reversible work, then widen access after observing representative tasks.

Return to recipes →