Slack Block Kit Templates for Google Forms Notifications
Build schema-validated Slack Block Kit notifications with stable FormBeacon field variables, accessible fallback text, safe fixed-origin links, and controlled tests.
Published · Updated · 12 min read
Build validated Block Kit in Advanced mode
Standard and Business expose Slack Advanced mode for a supported Block Kit structure; Free keeps the control visible but disabled. FormBeacon validates the structure against supported Slack objects before saving. Consult Slack Block Kit blocks and Slack `blocks.validate` when a provider limit changes.
{
"text": "New hiring application",
"blocks": [
{"type":"header","text":{"type":"plain_text","text":"New hiring application"}},
{"type":"section","fields":[
{"type":"mrkdwn","text":"*Role*\n{{field:170042001}}"},
{"type":"mrkdwn","text":"*Availability*\n{{field:170042002}}"}
]},
{"type":"actions","elements":[
{"type":"button","text":{"type":"plain_text","text":"Review"},"url":"https://review.example/applications/{{response.id}}"}
]}
]
}Field variables may appear in supported text, labels, fields, and button URLs. The template owns the fixed HTTPS origin; FormBeacon URL-encodes each path or query value. A response can never replace review.example, the webhook URL, a channel, or object structure. Keep the top-level text fallback meaningful for notifications and accessibility.


Plan the Slack workflow
A useful notification must survive the values real respondents enter, not merely look polished with sample text. Use Slack Advanced mode for a validated Block Kit layout whose field substitutions remain text and whose links retain a literal trusted HTTPS origin.
Block Kit is Slack's structured message system; use Slack Block Kit blocks for supported blocks and Slack `blocks.validate` for current validation behavior.
FormBeacon validates the supported structure, inserts stable field variables only in safe strings, and keeps webhook credentials and routing outside the content document.
Choose the format before writing the template
| Question | Recommended starting point | Trade-off |
|---|---|---|
| Basic, Rich, or Advanced? | Use Advanced only for structured layout | Every block adds maintenance and provider limits |
| One block per field? | Only fields the first reader needs | Long forms become noisy and may exceed limits |
| Button behavior? | A safe external review link | Interactive actions require a separate callback system |
| Fallback text? | Always meaningful | Notifications and assistive tools may not reconstruct blocks |
Build the Slack message from the simplest reliable format
For Slack Block Kit notifications, basic is the safest default. Standard and Business add Rich mode and schema-validated Advanced Block Kit. Field variables remain text and FormBeacon maps them by stable Google item ID.
The first message for Slack Block Kit notifications should identify the form, state when the response was submitted, include only the information the first reader needs, and supply a stable response reference when useful. Put the action before decorative context. On a phone, the first few lines should explain why the alert matters without requiring the reader to expand a card or decode internal abbreviations.
| Format | Best use | Main risk |
|---|---|---|
| Basic | First setup, arbitrary respondent answers, incident fallback | Long forms can still create noisy messages |
| Rich | Supported emphasis, lists, quotes, code, and links on Standard or Business | Each provider supports a different safe subset |
| Advanced | Schema-validated Slack Block Kit, Discord embeds, or Telegram options | Only supported fields and variable positions are accepted |
Advanced mode in Slack Block Kit notifications is provider-specific and schema validated. Variable substitution is context-aware and JSON safe, and respondent values remain text: they cannot become keys, object structure, credentials, destinations, template identity, or routing. Basic mode remains the most resilient choice when a workflow does not need provider-specific structure.
Prove Basic delivery
Verify the saved destination and one fictional Google Forms submission before changing content mode.
Choose Advanced
Standard and Business can select Block Kit Advanced mode. Free sees the control and upgrade guidance but remains Basic only.
Add accessible fallback text
Write a concise top-level text value that identifies the event without duplicating every answer.
Create the smallest layout
Start with a header and one section. Validate before adding fields, context, or a supported button URL.
Insert stable field variables
Use the picker for form metadata, response metadata, or current form fields. Never type a guessed question-name token.
Add a fixed-origin review link
Keep the HTTPS origin literal and place an encoded variable only in the path or query.
Exercise hostile values
Use quotes, newlines, Slack-like mentions, angle brackets, emoji, empty values, duplicate labels, and multi-select values.
Inspect desktop and mobile
Confirm fallback, field order, wrapping, button label, and link host in the sandbox channel.
Formatting boundaries that affect real answers
- FormBeacon supports a validated Block Kit subset, not arbitrary Slack API operations.
- A displayed button does not implement Approve, Reject, Claim, or other interactive callbacks.
- Variables cannot control the webhook URL, channel, object keys, block types, or link origin.
- Slack acceptance does not prove a human read or acted on the alert.
If Slack Block Kit notifications requires a behavior listed here as a limit, do not hide the gap with copy or assume a future feature exists. Change the workflow, separate the forms, or choose a system that owns the missing behavior. Clear boundaries make setup and incident response easier.
Test with punctuation, blank fields, and long answers
To accept Slack Block Kit notifications, run both a saved configuration test and a real form submission because they answer different questions. The saved test checks whether the current credential, destination, and message can reach the provider. A real submission additionally checks the Google trigger, form binding, response rendering, and delivery path. Both results must succeed.
- 1Create a private test destination or tell the intended channel that a harmless test is coming.
- 2Use a copied form with short fictional values, including one blank optional answer and one value containing punctuation.
- 3Save the simplest supported mode first. Do not begin with a complex provider-specific Advanced structure.
- 4Run the destination test and confirm a harmless message in the intended Slack channel.
- 5Open the public responder view of the copied Google Form and submit it like a respondent would.
- 6Confirm that exactly one new message appears, that the form title and submission time are plausible, and that the message is visible only to the intended audience.
- 7Repeat once with a multiline answer and non-ASCII text. This catches formatting assumptions that a one-word test will miss.
- 8Return to the add-on and review the visible delivery status without pasting credentials into a support conversation.
When checking Slack Block Kit notifications, a working saved test and a failed real submission point to trigger ownership, Google authorization, the selected form, or event eligibility. If neither works, inspect the destination credential and provider permissions first. If delivery succeeds but the content is hard to read, keep the credential unchanged and simplify the template. Changing one layer at a time preserves evidence.
| Observation | Most useful interpretation | Next check |
|---|---|---|
| Saved test fails | Provider credential, destination, configuration, or entitlement problem | Re-enter the credential privately and verify provider-side access |
| Saved test succeeds; form submission does not | Google trigger, authorization, form binding, or event problem | Reopen the add-on as the trigger owner and inspect status |
| One submission creates two messages | More than one active trigger or destination may exist | Inspect active destinations and remove duplicate trigger ownership intentionally |
| Message arrives in the wrong room | The credential points to a different destination | Create or select the credential from the exact target destination |
| Basic works; Advanced fails | The provider-specific Advanced structure is invalid | Use the provider validator and reintroduce fields one at a time |
If Slack Block Kit notifications still fails, use the provider-by-provider Google Forms notifications diagnostic guide. Record the test time, form name, destination name, and redacted error code. Never record submitted answers or the secret itself in a shared incident note.
Debug content separately from delivery
| Symptom | Likely cause | What to do next |
|---|---|---|
| Schema rejected | Unsupported block, field, or provider limit | Reduce to the smallest valid layout and add one element at a time |
| Link rejected | Variable appears in the origin or unsupported field | Use a literal HTTPS origin and variable suffix |
| Mention-like answer pings users | Unsafe formatting was introduced | Remove mention syntax and use provider-safe serialization |
| Basic also fails | The problem is credential or destination, not Block Kit | Return to the webhook setup guide |
Understand where Slack formatting is applied
In Slack Block Kit notifications, Google invokes a user-owned installable form-submit trigger after configuration. The add-on reads the submitted response, renders the selected message, and sends it to FormBeacon's delivery API. The service applies plan limits and idempotency, uses the encrypted destination configuration to call the selected provider, and stores redacted delivery metadata rather than submitted answer content or rendered notification bodies.
That architecture is the diagnostic map for Slack Block Kit notifications. FormBeacon is not a direct browser-to-webhook shortcut, and it does operate a delivery service. At the same time, response answers do not become a searchable FormBeacon database. Google Forms remains the record you inspect or correct; the provider receives the message you explicitly send; FormBeacon retains only the bounded configuration and redacted operational data required to deliver and diagnose it.
- 1A respondent submits the Google Form and Google records the response.
- 2The verified form owner’s installable trigger runs for that submission.
- 3The add-on prepares a request containing the form and response references needed for delivery.
- 4FormBeacon validates identity, form entitlement, quota, destination configuration, and idempotency.
- 5The service calls the provider using an incoming-webhook URL created for one Slack app and one authorized destination.
- 6On success, the service records redacted success metadata and counts one successful outbound destination delivery as one notification.
- 7On failure, the failed attempt does not consume the Free successful-delivery quota; an idempotent retry must not count the same delivery twice.
Before publishing Slack Block Kit notifications, check provider behavior against Slack's incoming-webhook documentation, because provider interfaces, permissions, limits, and policy wording can change. Check FormBeacon's product behavior and prices on the pricing page and in the current add-on rather than inferring them from an old screenshot.
Keep sensitive answers out of decorative messages
For Slack Block Kit notifications, the webhook URL is a secret posting credential. Anyone holding it may be able to post through that webhook, so never put it in a form description, article, screenshot, ticket, or source repository.
Every delivery created by Slack Block Kit notifications is a new copy of the notification. Google Form sharing does not automatically restrict a Slack channel, Discord channel, Telegram group, WhatsApp recipient, or webhook receiver. Before choosing Insert all fields, review every form question and assume every destination member can read the rendered values. For sensitive workflows, send a minimal reference and instruct authorized staff to open Google Forms rather than copying all answers into a notification.
- Use the narrowest private destination that still supports the workflow.
- Remove webhook URLs, bot tokens, access tokens, and real phone numbers from screenshots and screen recordings.
- Do not submit real customer or employee data while testing.
- Review provider retention, export, moderation, and member-access settings separately from FormBeacon.
- Rotate an exposed credential at the provider, update FormBeacon, and run both tests again.
- Delete test messages that contain even fictional data if they could confuse the operational channel later.
The privacy boundary for Slack Block Kit notifications is specific: FormBeacon encrypts channel credentials and templates with versioned AES-256-GCM keys. It does not persist form answers, rendered notification bodies, raw provider payloads, OAuth or identity tokens, or complete billing webhook payloads. Retry storage in Google document properties is limited to form ID, response ID, idempotency key, and attempt count; the response is re-read from Google for a retry.
Those controls do not automatically make every form suitable for Slack Block Kit notifications. You remain responsible for lawful collection, notices, consent where required, access control, retention at Google and the provider, and any industry-specific rules. This article explains product behavior and operational precautions; it is not legal advice.
Know which formats and destinations each plan supports
Before launching Slack Block Kit notifications, match it to the pricing contract. Free supports one form, one active Basic destination on Slack, Discord, or Telegram, and 100 successful outbound destination deliveries per UTC calendar month. Standard supports up to 10 forms and Basic, Rich, and supported Advanced modes on Slack, Discord, and Telegram. Business adds WhatsApp approved templates, Webhook JSON, a shared 100-form workspace capacity, shared connectors, and unlimited explicitly invited workspace members.
For quota accounting in Slack Block Kit notifications, one notification is one successful delivery to one outbound destination. If one response is sent to three active destinations and all three succeed, that is three successful deliveries. A failed delivery does not consume the Free quota, and an idempotent retry of the same delivery must not count twice. The Free counter resets lazily when the UTC month key changes; there is no reset cron to wait for.
Multiple destinations attached to Slack Block Kit notifications use fan-out, not conditional routing. Every active destination on the form receives every eligible response. FormBeacon does not inspect an answer and select a destination, severity color, owner, or template branch. To keep different audiences separate, use separate forms or a workflow system that explicitly implements rules, and test that system with representative data.
Verify current FormBeacon amounts and included features for Slack Block Kit notifications on the pricing page. Product prices and provider charges are different: Meta or another provider may apply its own usage charges, taxes, or policies, and those charges are not replaced by a FormBeacon subscription.
Maintain the template as the form changes
Treat Slack Block Kit notifications like a small operational system. Name a form owner and a destination owner, document the purpose without recording secrets, and schedule a periodic harmless submission. Retest after changing form ownership, Google authorization, questions, destination membership, channel structure, webhook or bot settings, Meta templates, or the FormBeacon plan.
- Keep a copy of the intended message structure without any credential or real response data.
- Review whether every destination member still needs access to the notification content.
- Remove unused destinations before creating new ones so fan-out remains understandable.
- Use provider audit or administration features to investigate credential changes where available.
- When an owner leaves, deliberately transfer the Google Form and recreate or verify the user-owned trigger under the intended owner.
- During an incident, preserve timestamps and stable error codes, but redact identities, credentials, answers, and complete payloads.
The fallback for Slack Block Kit notifications should remain visible: authorized staff can open Google Forms and inspect responses when chat delivery is delayed. Do not delete or mutate a form response simply because a notification failed. Repair the delivery path, make a harmless test, and use the response reference to reconcile operational action without copying the original answers into troubleshooting logs.
Frequently asked questions
- Does FormBeacon store submitted answers?
- No. FormBeacon does not persist answers, rendered messages, or raw provider payloads. Google Forms remains the response record; providers retain messages they accept under their own controls.
- How are Google Form fields mapped?
- The variable picker stores the stable Google item ID. Renaming a question or giving two items the same title does not redirect a saved variable to another field.
- Can an answer choose a destination or credential?
- No. Respondent values remain text and cannot control credentials, endpoints, recipients, object structure, template identity, or routing.
- Can Block Kit buttons update the form?
- No. FormBeacon's incoming-webhook path is one-way. A button may link to a fixed-origin page but does not add callback application logic.
Set this up on your own form
Follow the installation guide to install the add-on, connect a destination and send a test alert. FormBeacon does not persist form answers or rendered notification bodies.