---
title: "Slack Identity Link Callback"
method: POST
path: "/api/slack/identity-link/callback"
tags: ["slack"]
---

# Slack Identity Link Callback

`POST /api/slack/identity-link/callback`

Clerk-authenticated completion of the identity-link flow.

Validates the gate + org membership FIRST using a non-destructive peek,
and consumes the single-use token (DELETE ... RETURNING) only as the
LAST step, once every check has passed. A wrong-org signin (the caller
is authenticated, but into a DIFFERENT Every org than the one that
installed this Slack workspace) must not burn the token -- the correct
user still needs to be able to use it. Consuming first would let one
failed/wrong-org attempt permanently strand the real user with an
"expired" link.

## Request body

- IdentityLinkCallbackRequest
  - `token` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/every/apis/every-api.md) · [All operations](https://skmtc.net/every/apis/every-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/every/every-api/versions/9744001af85d/schema)