[JCBarry]

Hey there! This is a great point and something we recognized when developing operator. We wanted to make a service that didn't expose your entire chat to a third-party service.

The OAuth scopes operator asks for are the following: chat:write:bot - so we can post to your channel operator's response. commands - to install the commands. users:read - so we can get a bit more information about you (name, team permissions, etc).

We even toyed with the idea of eliminating the "users:read" to be as minimally invasive as possible.