Hey there! This is a great point and something we recognized when developing operator. We wanted to make a service that didn't expose your entire chat to a third-party service.
The OAuth scopes operator asks for are the following:
chat:write:bot - so we can post to your channel operator's response.
commands - to install the commands.
users:read - so we can get a bit more information about you (name, team permissions, etc).
We even toyed with the idea of eliminating the "users:read" to be as minimally invasive as possible.
The OAuth scopes operator asks for are the following: chat:write:bot - so we can post to your channel operator's response. commands - to install the commands. users:read - so we can get a bit more information about you (name, team permissions, etc).
We even toyed with the idea of eliminating the "users:read" to be as minimally invasive as possible.