Token has a few slash commands for admins. They run on the server directly and
bypass the AI entirely, so they are a reliable way to see and control what Token
is doing.
Slash commands are available in Slack and are admin-only. If you are not an
admin, they will not be available to you.
/token-audit
See what Token has been doing: the actions it took, the decisions made, and the
outcomes.
/token-audit # the most recent entries
/token-audit today # everything from today
/token-audit notion # filter by a tool or service name
Each entry shows the action that ran, which channel triggered it, the decision
(allowed, denied, auto-allowed, or approved and by whom), and a timestamp. This
is the best way to review what happened while you were not watching, especially
actions that were approved automatically.
/token-rules
View and manage the rules Token has learned from Always allow.
/token-rules # list all rules
/token-rules delete 7 # remove a specific rule by id
Each rule shows the actions it matches, any conditions, whether it was learned
from a button or set manually, and which channel it applies to. If Token is
auto-approving something you would rather review, delete the rule. The next time
Token tries that action, it asks again.
/token-config
Manage workspace and owner settings.
/token-config # show the current configuration
/token-config workspace set <key> <values> # update a workspace setting
/token-config workspace list # list workspace settings
/token-config owner set <key> <values> # update an owner setting
Common settings include:
| Setting | What it controls |
|---|
| Internal domains | The email domains treated as inside your organization, used to tell internal recipients from external ones. |
| Internal contacts | The phone numbers treated as inside your organization, used the same way for chat groups. |
| Admins | Who is allowed to approve actions and run these commands. |
| Owner name | The name Token uses when it refers to its owner. |
These settings feed directly into approvals. For example,
classifying a recipient as internal or external is what decides whether an
action is auto-approved or needs a review.