Giving a bot access to a tool

A bot can only use the tools its job needs. If it wants something else it asks you, with the reason — “wants Slack, to post the morning alert into your team channel” — and you can allow it once or always. A one-off grant expires, so a tool borrowed for a single job does not quietly become permanent.