Box MCP server

Read from the package source without running it. The installed server may list more.

• abort_upload_sessionwrite action

  Permanently aborts an active upload session and discards all uploaded data. This action is irreversible and cannot be undone.

• add_file_classification

  Adds a security classification label to a file in Box. Use this to apply an enterprise-defined classification (e.g., Confidential, Sensitive) to control how the file is handled and shared.

• add_folder_classification

  Applies a security classification label to a specified folder. The classification must exist in the enterprise's classification template.

• apply_file_watermark

  Applies or updates a watermark on a specified file in Box. Use this to protect file content by overlaying a visible watermark when the file is viewed or downloaded.

• apply_folder_watermark

  Applies or updates a watermark on a specified folder in Box. Use this to protect folder contents by overlaying a visible watermark imprint.

• apply_metadata_cascade_policy

  Force-applies a metadata cascade policy to all existing children within a folder, ensuring inherited metadata values are propagated down. Useful after creating a new cascade policy to retroactively enforce metadata on files already present in the folder.

• commit_upload_sessionwrite action

  Finalizes an upload session by assembling all uploaded chunks into a complete file. Must be called after all parts have been uploaded to close the session and persist the file.

• copy_filewrite action

  Creates a copy of an existing file, optionally placing it in a different folder, renaming it, or copying a specific version. Returns the metadata of the newly created file copy.

• copy_file_request

  Copies an existing file request from one folder and applies it to another folder, duplicating its settings and configuration. Useful for reusing file request templates across multiple folders without manual recreation.

• copy_folderwrite action

  Creates a copy of an existing folder and places it inside a specified destination folder. The original folder and its contents remain unchanged.

• create_collaborationwrite action

  Grants a single user or group access to a file or folder by creating a collaboration with a specified role. Collaborators can be identified by user ID, group ID, or email address.

• create_commentwrite action

  Creates a new comment on a file or as a reply to an existing comment. Supports mentioning other users via a tagged message syntax to trigger email notifications.

• create_file_metadatawrite action

  Applies an instance of a metadata template to a file, associating structured key-value data with it. Only keys defined in the specified template are accepted, except for the global.properties template which allows arbitrary key-value pairs.

• create_file_upload_sessionwrite action

  Creates a chunked upload session for an existing file, enabling large file uploads to be split into multiple parts. Use the returned session to upload individual chunks and complete the upload.

• create_folderwrite action

  Creates a new empty folder inside a specified parent folder. The folder name must be unique within the parent (case-insensitive) and must not contain invalid characters or trailing spaces.

• create_folder_metadatawrite action

  Applies an instance of a metadata template to a folder, attaching structured key-value data based on the specified template. Note that the enterprise must have Cascading Folder Level Metadata enabled in the admin console for the metadata to appear in the Box web app.

• create_metadata_cascade_policywrite action

  Creates a metadata cascade policy that automatically applies a metadata template from a specified folder down to all files within it. The folder must already have an instance of the target metadata template applied before the policy can take effect.

• create_metadata_templatewrite action

  Creates a new metadata template that can be applied to files and folders within an enterprise, defining custom fields for organizing and categorizing content.

• create_skill_cardswrite action

  Applies one or more Box Skills metadata cards to a specified file, enabling AI-generated insights such as transcripts, topics, or keywords to be attached as structured metadata.

• create_taskwrite action

  Creates a new task on a specified file, optionally configuring the action type, due date, message, and completion rules. The task must be assigned to users separately after creation.

• create_upload_sessionwrite action

  Initiates a chunked upload session for uploading a new file, returning a session ID and upload URLs to use for subsequent chunk uploads.

• delete_collaborationwrite action

  Permanently removes a collaboration by its unique identifier. This action cannot be undone and will revoke the associated access or shared relationship.

• delete_commentwrite action

  Permanently deletes a comment by its unique identifier. This action is irreversible and cannot be undone.

• delete_filewrite action

  Deletes a specified file from Box, either permanently or by moving it to the trash depending on enterprise settings.

• delete_file_metadatawrite action

  Removes a specific metadata instance from a file by deleting the metadata template applied under the given scope. This permanently detaches the metadata from the file without affecting the file itself.

• delete_file_requestwrite action

  Permanently deletes a specified file request from Box. This action is irreversible and removes the file request and its associated upload link.

• delete_file_versionwrite action

  Moves a specific version of a file to the trash, effectively removing it from the version history. Version tracking is only available for Box accounts with premium subscriptions.

• delete_folderwrite action

  Deletes a Box folder either permanently or by moving it to the trash. Supports recursive deletion to remove folders that contain content.

• delete_folder_lockwrite action

  Deletes a specific folder lock, removing any restrictions it imposed on the folder. You must be authenticated as the owner or co-owner of the folder to perform this action.

• delete_folder_metadatawrite action

  Removes a specific metadata instance from a folder by deleting the metadata template instance identified by its scope and template key. This action permanently detaches the metadata from the folder.

• delete_metadata_templatewrite action

  Permanently deletes a metadata template and all of its associated instances. This action is irreversible and removes the template across all content it was applied to.

• download_file

  Downloads the binary content of a file from Box. Supports partial downloads via byte ranges, specific version retrieval, and access to shared link items.

• find_metadata_template_by_instance

  Finds a metadata template by looking up the ID of one of its existing instances. Useful when you have an instance ID and need to retrieve the template definition it was created from.

• get_collaboration

  Retrieves the details of a single collaboration by its unique identifier. Use this to inspect collaboration settings, permissions, and associated users or groups.

• get_comment

  Retrieves the message, metadata, and author information for a specific comment. Use this to fetch the full details of a single comment by its unique identifier.

• get_file

  Retrieves metadata and details for a specific file by its unique identifier. Optionally supports accessing files via a shared link, including password-protected ones.

• get_file_classification

  Retrieves the security classification metadata applied to a specific file. Returns the classification instance associated with the file's enterprise security policy.

• get_file_metadata_instance

  Retrieves a specific metadata template instance applied to a file, identified by its scope and template key. Optionally returns full taxonomy node details instead of raw node identifiers.

• get_file_request

  Retrieves detailed information about a specific file request, including its configuration and status. Use this to inspect an existing file request created via the Box web application.

• get_file_thumbnail

  Retrieves a scaled-down thumbnail image of a file in PNG or JPG format. Supports various sizes for image and video file types.

• get_file_version

  Retrieves metadata for a specific version of a file by its version ID. Version history is only available for Box accounts with premium subscriptions.

• get_file_watermark

  Retrieves the watermark applied to a specific file. Returns watermark details if one exists, or an error if no watermark has been applied.

• get_folder

  Retrieves metadata and the first 100 items for a specified folder. Use the sort, direction, offset, and limit parameters to control item ordering and pagination within the folder.

• get_folder_classification

  Retrieves the security classification metadata applied to a specific folder. Returns the classification instance associated with the folder's enterprise security policy.

• get_folder_metadata_instance

  Retrieves a specific metadata template instance applied to a folder, returning its field values and associated metadata. Cannot be used on the root folder (ID `0`).

• get_folder_watermark

  Retrieves the watermark applied to a specific folder in Box. Returns watermark details if one exists, or a 404 if no watermark has been applied.

• get_metadata_cascade_policy

  Retrieves the details of a specific metadata cascade policy assigned to a folder. Use this to inspect how metadata templates are being propagated from a folder to its contents.

• get_metadata_template

  Retrieves a specific metadata template by its scope and template key. Use this to fetch full template details including its fields and configuration.

• get_metadata_template_by_id

  Retrieves a specific metadata template by its unique ID. Use this to inspect template structure, fields, and configuration for a known template.

• get_trashed_file

  Retrieves metadata for a file that was directly moved to the trash. Note: if a parent folder was trashed instead, use the trashed folder endpoint to inspect it.

• get_trashed_folder

  Retrieves metadata for a specific folder that has been directly moved to the trash. Note: if a parent folder was trashed instead, only that parent folder can be retrieved via this endpoint.

• get_upload_sessionwrite action

  Retrieve the current status and details of an active chunked file upload session. The upload session ID is obtained from the Create upload session endpoint.

• initialize_classifications

  Initializes the classification metadata template for an enterprise with an initial set of classifications. Use this only when no classification template exists yet; if one already exists, use the add classifications endpoint instead.

• list_classifications

  Retrieves the enterprise security classification metadata template and returns all classification labels available to the enterprise. Can also be accessed by specifying the enterprise ID explicitly in the URL.

• list_enterprise_metadata_templates

  Retrieves all metadata templates created for use within the authenticated user's enterprise. Returns a paginated list of enterprise-scoped templates available for applying structured metadata to content.

• list_file_app_item_associations

  Retrieves all app items associated with a file, including associations inherited from ancestor folders. Association type and ID are returned even if the requesting user lacks View permission on the app item.

• list_file_collaborations

  Retrieves all pending and active collaborations for a specific file, including users who currently have access or have been invited to collaborate.

• list_file_comments

  Retrieves a paginated list of comments posted on a specific file. Useful for reviewing user feedback or discussion threads associated with a file.

• list_file_metadata

  Retrieves all metadata instances attached to a specific file. Optionally returns full taxonomy node details instead of node identifiers.

• list_file_skills_cards

  Retrieves all Box Skills metadata cards attached to a specific file. Useful for inspecting AI-generated insights such as transcripts, topics, or keywords extracted by Box Skills.

• list_file_tasks

  Retrieves all tasks associated with a specific file, returning the complete list in a single response. Note that this endpoint does not support pagination.

• list_file_versions

  Retrieves the version history of a specific file, returning all past versions in paginated results. Version tracking is available only for Box premium accounts; use the get_file operation to retrieve the current version ID.

• list_folder_app_item_associations

  Retrieves all app items associated with a folder, including associations inherited from ancestor folders. App item type and ID are visible to any user with folder access, regardless of View permission on the app item.

• list_folder_collaborations

  Retrieves all active and pending collaborations for a specified folder, returning details on users who currently have access or have been invited to collaborate.

• list_folder_items

  Retrieves a paginated list of files, folders, and web links contained within a specified folder. Use the dedicated Get Folder endpoint if you need metadata about the folder itself, such as its size.

• list_folder_locks

  Retrieves all lock details for a specified folder, including lock type and restrictions. You must be authenticated as the owner or co-owner of the folder to use this endpoint.

• list_folder_metadata

  Retrieves all metadata instances attached to a given folder. Cannot be used on the root folder (ID `0`).

• list_global_metadata_templates

  Retrieves all generic, global metadata templates available to every enterprise using Box. These templates are not organization-specific and can be applied universally across all Box accounts.

• list_metadata_cascade_policies

  Retrieves all metadata cascade policies applied to a specific folder, which automatically apply metadata templates to items within that folder. Cannot be used on the root folder (ID `0`).

• list_pending_collaborations

  Retrieves all pending collaboration invites for the authenticated user. Returns a paginated list of collaborations awaiting the user's response.

• list_trash_items

  Retrieves all files and folders currently in the trash. Supports offset-based and marker-based pagination, and allows sorting and filtering by specific attributes using the fields parameter.

• list_upload_session_partswrite action

  Retrieves a paginated list of all file chunks uploaded so far within a specific upload session, allowing you to track multipart upload progress.

• lock_folderwrite action

  Creates a lock on a folder to prevent it from being moved and/or deleted. You must be the owner or co-owner of the folder to perform this action.

• permanently_delete_trashed_filewrite action

  Permanently deletes a file that is currently in the trash, freeing storage and removing it from Box entirely. This action is irreversible and cannot be undone.

• permanently_delete_trashed_folderwrite action

  Permanently deletes a folder that is currently in the trash, freeing storage and removing it from Box entirely. This action is irreversible and cannot be undone.

• promote_file_version

  Promotes an older version of a file to the top of its version history by creating a new copy with the same contents, hash, etag, and name. Suitable for file formats like PDF, DOC, and PPTX, but not for Box Notes.

• query_items_by_metadata

  Search for files and folders using SQL-like syntax against a specific metadata template. Use the `fields` attribute to include additional metadata fields in the results.

• remove_file_classificationwrite action

  Removes any existing security classification from a specified file. This permanently strips the classification metadata, and can also be called using an explicit enterprise ID in the endpoint path.

• remove_file_skills_cardswrite action

  Removes all Box Skills cards metadata from a specified file. This clears any AI-generated skill annotations (such as transcripts, topics, or faces) associated with the file.

• remove_file_watermarkwrite action

  Removes an existing watermark from a specified file in Box. Use this to revoke watermark protection previously applied to a file.

• remove_folder_classificationwrite action

  Removes any existing security classification from a specified folder. This operation clears all classification metadata applied via the enterprise security classification schema.

• remove_folder_watermarkwrite action

  Removes the watermark from a specified folder in Box. Once removed, the folder's content will no longer display watermark overlays.

• restore_file

  Restores a file from the trash back to its original location or a specified parent folder. An optional new parent folder can be provided if the original folder no longer exists.

• restore_file_version

  Restores a previously deleted version of a file, making it the current version. Supports standard file formats such as PDF, DOC, and PPTX, but not Box Notes.

• restore_folder

  Restores a folder from the trash to its original location or an optional new parent folder. During the operation, the source folder, its descendants, and the destination folder are locked to prevent concurrent move, copy, delete, or restore actions.

• search_content
• update_collaborationwrite action

  Updates an existing collaboration on a Box item, allowing you to change the collaborator's role, accept or reject a pending invitation, set an expiration date, or toggle parent path visibility.

• update_commentwrite action

  Updates the message text of an existing comment. Use this to edit or correct the content of a previously posted comment.

• update_filewrite action

  Updates a file's metadata or settings, including renaming, moving to a new parent folder, managing shared links, applying locks, updating tags, and modifying collection membership.

• update_file_classificationwrite action

  Updates the security classification label on a file that already has a classification applied. Only classification values defined for the enterprise are accepted.

• update_file_metadatawrite action

  Updates an existing metadata instance on a file using JSON Patch operations. The metadata template must already be applied to the file, and all changes are applied atomically — if any operation fails, no changes are made.

• update_file_requestwrite action

  Updates the properties of an existing file request, such as its title, description, status, and submission requirements. Use this to activate or deactivate a file request or modify its configuration.

• update_folderwrite action
• update_folder_classificationwrite action

  Updates the security classification label on a folder that already has a classification applied. Only classification values defined for the enterprise are accepted.

• update_folder_metadatawrite action

  Updates a metadata instance on a folder using JSON Patch operations, applied atomically. The metadata template must already be applied to the folder, and all changes must conform to the template schema.

• update_metadata_templatewrite action

  Updates an existing metadata template by applying a series of JSON-Patch operations atomically. All changes succeed or fail together — no partial updates are applied if any operation encounters an error.

• update_skill_cardswrite action

  Updates one or more Box Skills metadata cards on a specified file using JSON-Patch operations, allowing targeted modifications to existing skill card data.

• upload_filewrite action

  Uploads a small file (under 50MB) to a specified Box folder. The attributes must be sent before the file content in the request body, or a 400 error will be returned.

• upload_file_partwrite action

  Uploads a single binary chunk of a file as part of an active chunked upload session. Each part must conform to the byte range and part size defined when the upload session was created.

• upload_file_versionwrite action

  Uploads a new version of an existing file's content, optionally renaming it or setting a custom last-modified timestamp. For files over 50MB, use the Chunk Upload APIs instead.

• Code scan5 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 138 days ago8/15
• Maintainer identityregistry namespace matches repository owner7/10

Safety score

80/100

higher than 60% of 48,255 servers

Tools

100

the typical server has 7

Tools that change things

49%

typical: 0%. Fewer write tools means less an agent can break

GitHub stars

31

more than 92% of 28,688 servers

Box: common questions

Is Box MCP server safe?

Mostly: it is graded B (80/100). Read the Box safety report

How do I install Box?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Box need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Box maintained?

The last commit was 176 days ago (2026-05-12). The latest release is v1.0.5.

How does Box compare with other MCP servers?

safety score 80/100 (higher than 60% of 48,255 servers); tools 100 (the typical server has 7); tools that change things 49% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.