Skip to main content
The Box MCP server provides tools that let AI agents interact with Box content and features. Tools are organized by category so you can quickly find the right capabilities for your scenario.

User and authentication

Manage user authentication and retrieve information about the authenticated user.

Files and folders

Access, manage, and modify Box file and folder resources. These tools give you control over content, metadata, and versioning.

Read-only

Write

Locate content and containers using keywords, names, or structured metadata queries with optional filters and scopes.

Collaboration

Enable team collaboration through comments, shared links, and collaboration management tools.

Read-only

Write

Box AI

Use AI-powered tools to ask questions, extract insights, and analyze content across files and hubs.

Hubs

Create and manage Box Hubs for organizing collaborative content and resources around specific topics or projects.

Read-only

Write

Doc Gen

Automate document generation by using templates with placeholder tags to create custom documents at scale.

Read-only

Write

Upload and download URL tools

The upload and download URL tools require the AI agent to make a direct network request to transfer the file. Declarative agents can’t make these requests, so these tools work only in agentic (code-executing) environments. Some clients require you to allowlist specific domains before upload and download URLs work. If you’re not a Box Zones customer, add the following domains to your allowlist:
The domains you need vary depending on your Box Zone. For the full list, see Configuring A Firewall For Box Applications and Services. You can also use wildcard domains to allow all subdomains:

Feedback

To share feedback or ask questions about the Box MCP server, visit the Box AI API thread in the Box Developer Community forum.
1 Only works on items that meet all of the following:
  • No external collaborators on the item itself
  • No shared link on the item itself
  • No external collaborators or shared links on any parent folder, up to the root
Last modified on July 13, 2026