RELATED 01
Microsoft 365 MCP Server
Reads and changes Outlook mail, calendars, OneDrive, Teams, SharePoint and more through Microsoft Graph
1.1kGitHub stars
52k/wknpm downloads
84popularity score
Box MCP server
Box's hosted MCP endpoint for searching, reading, editing and analysing files stored in Box
Official · box.com Remote (hosted) · Streamable HTTP Files and storageProductivity
Connect your client
Remote (hosted)
Add in one click
Opens the app, which asks before it adds the server. Then replace each <NAME> in its settings with your value.
Or add it by command or config
Its sign-in lets no client register itself: a client signs in only with an app (a client ID) registered with its maker first, so these snippets work only after that step.
Claude Codeterminal
claude mcp add box --transport http https://mcp.box.comCursormcp.json (Settings > Tools and MCPs > Add Custom MCP)
{
"mcpServers": {
"box": {
"url": "https://mcp.box.com",
"auth": {
"CLIENT_ID": "<CLIENT_ID>",
"CLIENT_SECRET": "<CLIENT_SECRET>"
}
}
}
}VS Code.vscode/mcp.json
{
"servers": {
"box": {
"type": "http",
"url": "https://mcp.box.com/"
}
}
}Codex~/.codex/config.toml
[mcp_servers.box]
url = "https://mcp.box.com/"What it does
The Box MCP server is a remote endpoint that Box runs at https://mcp.box.com. An AI client connects to it over HTTP and signs in to Box with OAuth. After that, the client's agent can browse folders, read file text and details, search by keyword or by metadata query, upload files and new versions, manage comments, collaborations and shared links, work with Box Hubs and Doc Gen templates, and ask Box AI questions about files or have it extract structured fields from documents. There is nothing to install. An admin enables the integration in the Box Admin Console, and for custom clients the admin also creates OAuth client credentials with a redirect URI and scopes.
The tools page lists 54 tools in seven groups. 16 of them are off until an admin turns them on (Box product docs explain how): moving files and folders, renaming or retagging items, setting metadata, editing metadata templates, uploading new file versions, every shared-link and collaboration tool except commenting, update_hub, create_docgen_batch, and the single-use upload and download URL tools. Out of the box, an agent can read, search, create folders, upload new files, copy items and comment, but it cannot share content outside the organisation.
The endpoint's own OAuth metadata (/.well-known/oauth-protected-resource) names api.box.com as its authorization server and accepts bearer tokens only in the request header. Box describes the open-source self-hosted Python server (box-community/mcp-server-box) as deprecated and points new integrations to this endpoint.
What it needs
A Box enterprise account where an admin has enabled the integration for your client in Admin Console > Integrations (for example Claude, ChatGPT - MCP, or Custom Box MCP Server). Cursor, VS Code and other custom clients also need integration credentials from the admin: a client ID and secret, the client's redirect URI, and the scopes to allow. The docgen.readwrite scope requires an Enterprise Advanced licence. In Codex, Box is added as a plugin from the plugin marketplace.
Limits
16 of the 54 tools are off by default and need an admin to turn them on. The upload and download URL tools need the agent to make its own network request, so they work only in agents that can run code, and some clients need upload.box.com, dl.boxcloud.com and related domains allowlisted. The Box AI single-file Q&A and freeform extract tools read up to 1 MB of a file's text; for a larger file only the first 1 MB is processed. The Enhanced Extract tools cost more than the standard extract tools. Users only reach content they already have permission to view or edit in Box.
Who it suits
Teams on a Box enterprise plan who want Claude Code, Cursor, Copilot in VS Code, Codex or an agent platform to work with documents already stored in Box, and whose admin can enable the integration. Because Box runs it, there is no local process to maintain, and it is the route Box recommends over the deprecated self-hosted box-community/mcp-server-box. It does not suit personal Box accounts without admin access. It also does not suit setups where files must not pass through Box's own servers and Box AI, or setups needing an offline or local-only server.
Tools 54
who_am_i- Shows the signed-in Box user's details
get_file_content- Reads the content of a file
get_file_details- Gets a file's metadata, permissions and version info
get_file_preview- Returns a preview widget for a file
get_folder_details- Gets a folder's metadata, permissions and collaboration settings
list_folder_content_by_folder_id- Lists a folder's items page by page; folder 0 is the root
get_download_url- Issues a single-use download link (off by default)
copy_file- Copies a file into another folder
copy_folder- Copies a folder under another parent
create_folder- Creates a folder
create_metadata_template- Creates an enterprise metadata template
get_upload_url- Issues a single-use upload link (off by default)
move_file- Moves a file to another folder (off by default)
move_folder- Moves a folder to a new parent (off by default)
set_file_metadata- Adds or updates template metadata on a file (off by default)
set_folder_metadata- Adds or updates template metadata on a folder (off by default)
update_file_properties- Changes a file's name, description, tags or collections (off by default)
update_folder_properties- Changes a folder's name, description, tags or collections (off by default)
update_metadata_template- Adds, edits or removes fields of a metadata template (off by default)
upload_file- Uploads a new file
upload_file_version- Replaces a file's contents with a new version (off by default)
get_metadata_template_schema- Shows the fields of a metadata template
list_metadata_templates- Lists enterprise or global metadata templates
search_files_keyword- Finds files by keyword, with metadata and extension filters
search_files_metadata- Finds files with SQL-like metadata queries
search_folders_by_name- Finds folders by name
list_file_comments- Lists comments on a file
list_item_collaborations- Lists who an item is shared with
list_tasks- Lists a file's tasks with status and due dates
add_file_shared_link- Creates or changes a file's shared link (off by default)
add_folder_shared_link- Creates or changes a folder's shared link (off by default)
create_collaboration- Invites a user or group to a file, folder or hub (off by default)
create_file_comment- Posts a comment on a file
update_collaboration- Changes an existing collaboration (off by default)
ai_extract_freeform- Pulls fields from files with Box AI using a plain-language prompt
ai_extract_structured- Extracts key-value fields with Box AI's Enhanced Extract Agent
ai_extract_structured_from_fields- Extracts fields you define from one or more files with Box AI
ai_extract_structured_from_fields_enhanced- Same as above with the Enhanced Extract Agent, at higher cost
ai_extract_structured_from_metadata_template- Extracts fields matching an existing metadata template
ai_extract_structured_from_metadata_template_enhanced- Template-based extraction with the Enhanced Extract Agent, at higher cost
ai_qa_hub- Answers a question from a hub's content with Box AI
ai_qa_multi_file- Answers a question across several files with Box AI
ai_qa_single_file- Answers a question about one file with Box AI
get_hub_details- Gets details of a hub
get_hub_items- Lists the files and folders in a hub
list_hubs- Lists hubs the user can open
add_items_to_hub- Adds files, folders or web links to a hub
copy_hub- Duplicates a hub with its structure and settings
create_hub- Creates a hub
update_hub- Changes a hub's title and description (off by default)
get_docgen_template_by_id- Gets details of a Doc Gen template
list_docgen_templates- Lists the Doc Gen templates the user can use
create_docgen_batch- Generates documents by filling a Doc Gen template with data (off by default)
create_docgen_template- Marks a .docx or .pptx file as a Doc Gen template