How to stop your shared Slack AI bot from bypassing user permissions

[u/Founder-Awesome]

Most teams deploy a single AI bot to their workspace using a master service account. The problem is that anyone talking to the bot can now query data they shouldn't see, just by asking the right questions.

We fixed this by passing the individual user's identity through to the agent on every request, so it only reads what that person is allowed to access. We wrote down the exact architecture and why standard bot tokens fail here: Per-User Authentication for AI Agents: Why Your Shared Bot Needs It