Skip to main content

Slack and Teams Chat Surfaces

Connect CVD Portal to Slack and Microsoft Teams for inbound compliance questions. Team members can query reporting deadlines and compliance tasks directly from their chat workspaces.

Prerequisites​

  1. A CVD Portal account on the Reporting plan or higher.
  2. An API key with only the read scope from Settings → API Keys.
  3. Administrator access in your Slack workspace or Microsoft 365 tenant.

Part 1. Slack app setup​

The CVD Portal Slack app answers the /cra slash command and @CVD Portal mentions.

1. Add the CVD Portal app to Slack​

CVD Portal runs one Slack app for all customers. Do not create your own Slack app from the manifest. CVD Portal cannot verify requests from an app that it does not run.

  1. In CVD Portal, navigate to Dashboard, Settings, and Integrations.
  2. Under Chat Assistant, select Add to Slack.
  3. Sign in to Slack as a workspace administrator, if Slack asks.
  4. Select Allow.

Slack returns you to Settings, Integrations. The link form opens with your Slack Team ID filled in.

The Slack app is turned on when a customer asks for it. If Slack is not on yet, Add to Slack sends a request to CVD Portal support and shows Slack requested. Support emails you when you can add the app.

  1. Paste a CVD Portal API key with read scope.
  2. Optional. Enter a workspace name.
  3. Save the link.

To link a workspace that already has the app, select Link Workspace and enter the Team ID yourself. The Team ID starts with T. It is in the URL of Slack in a browser.

3. Supported /cra commands​

Team members can ask questions using the slash command.

  • /cra deadline returns the soonest Article 14 deadline and remaining hours.
  • /cra task returns the next outstanding CRA conformity obligation.
  • /cra help returns usage guidance.

Natural phrases such as /cra how long do we have to report also resolve to the deadline tool.

Part 2. Microsoft Teams Copilot declarative agent​

CVD Portal integrates with Microsoft 365 Copilot in Teams as a declarative agent over the OpenAPI specification.

1. Teams manifest files​

CVD Portal publishes three manifest files.

  • https://cvdportal.com/teams/manifest.json
  • https://cvdportal.com/teams/declarativeAgent.json
  • https://cvdportal.com/teams/apiPlugin.json

The API plugin imports the published OpenAPI schema at https://cvdportal.com/openapi.json. The agent answers questions with /compliance/next-deadline and /compliance/next-task. The plugin uses Bearer API key authentication.

2. Installation in Microsoft Teams​

CVD Portal does not publish a ready-to-upload Teams app package. The manifest names two icon files, color.png and outline.png, and CVD Portal does not publish them. You cannot upload the manifest files as they are.

3. Example prompts in Copilot​

You can ask Copilot in Teams:

  • When is our next CRA Article 14 reporting deadline?
  • How long do we have to report open vulnerabilities under the CRA?
  • What is our next CRA compliance task?

4. Implementation notice​

This surface uses a declarative agent over the OpenAPI specification. A native Teams bot or messaging extension is the heavier alternative, and is not required for read queries.