Box

​

At a glance

• Availability: Experimental (how to enable).
• Auth: OAuth 2.0.
• Connection: A user authorizes the connection in the provider’s consent screen.
• Scopes: root_readwrite.
• Docs: https://developer.box.com/guides/authentication/oauth2/

​

Credentials

Set these per environment. See Connect an integration. With a managed OAuth app, Connect works without these variables; set them to use your own OAuth app instead.

​

Setup

1. Create a Box app: Sign in at https://app.box.com/developers/console (a free Individual Box account works) and create a Custom App with ‘User Authentication (OAuth 2.0)’.
2. Configure the redirect URI and scopes: In the app’s Configuration tab, add your redirect URI ending in /api/auth/box/callback and enable the ‘Read and write all files and folders’ application scope.
3. Copy credentials: Copy the Client ID and Client Secret from the Configuration tab into BOX_CLIENT_ID and BOX_CLIENT_SECRET.
4. Verify access: Connect your Box account and run the List Folder Items tool against folder 0.

• Authorization codes are only valid for 30 seconds; the client is authenticated with client_id/client_secret in the token request body
• Refresh tokens are issued; access tokens are short-lived and refreshed automatically
• Uploads go to upload.box.com as multipart/form-data: the ‘attributes’ part must come before the ‘file’ part, and files over 50 MB require Box’s chunked upload API (not covered by these tools)

Provider API reference: https://developer.box.com/reference/

​

Tools

​

Example prompts

• List the files and folders in my Box root folder.
• Search my Box account for a file by name and show its details.