Box MCP Server
Provides secure access to Box cloud storage, enabling document management, folder organization, search, AI-powered analysis, and collaboration through the Box API.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Box MCP Serversearch for documents with 'budget' in the filename"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Box MCP Server
A Model Context Protocol (MCP) server that provides secure access to Box cloud storage without local file persistence. This server enables Large Language Models to interact with Box files, folders, and AI capabilities through a standardized MCP interface.
Features
š§ 8 Core Tools (Intent-Based)
box_save_documents- Batch upload documents with automatic folder creationbox_read_document- Stream document content without local storagebox_manage_folders- Create and organize folder structuresbox_explore_storage- Navigate Box directory tree with filteringbox_share_content- Create shared links and manage collaborationsbox_analyze_document- Use Box AI for document analysis, Q&A, and extractionbox_search_content- Natural language search with advanced filteringbox_retrieve_documents- Batch retrieval with optional local saving
š MCP Resources (6 URI Templates)
box://file/{fileId}- Access specific Box files by IDbox://folder/{folderId}- Access specific Box folders by IDbox://search?q={query}- Search Box content with query parametersbox://user/storage- Current user's storage quota and usagebox://user/recent- Recently accessed filesbox://folder/root/tree- Complete folder structure from root
š¬ MCP Prompts (5 Interactive Templates)
share_file- Create shared links with customizable permissionsanalyze_document- Use Box AI to analyze documents with specific promptsorganize_folder- Organize files using different strategies (by date, type, name)bulk_upload- Upload multiple files with folder organizationcollaboration_setup- Set up collaboration with specific users and roles
š Security & Compliance
Zero Local Storage - All documents remain in Box cloud
Multi-Auth Support - OAuth 2.0, Client Credentials Grant (CCG), JWT
Encrypted Credentials - Secure token storage and auto-refresh
Enterprise-Grade - Leverages Box's enterprise security features
Related MCP server: Salesforce DX MCP Server
Quick Start
Prerequisites
Box Developer Account - Create at Box Developer Console
Node.js 18+ - Download Node.js
Box App Configuration - OAuth 2.0 or Client Credentials Grant app
Installation
# Clone and install
git clone https://github.com/your-org/mcp-box
cd mcp-box
npm install
# Build the server
npm run buildConfiguration
Create a .env file in the project root:
# Authentication Method (oauth | ccg)
AUTH_TYPE=oauth
# Box App Credentials
BOX_CLIENT_ID=your_client_id_here
BOX_CLIENT_SECRET=your_client_secret_here
BOX_ENTERPRISE_ID=your_enterprise_id_here # Required for CCG
# Server Configuration
MCP_TRANSPORT=stdio # stdio | http
LOG_LEVEL=info # debug | info | warn | error
NODE_ENV=developmentAuthentication Setup
OAuth 2.0 (Recommended for individual use)
Step 1: Box Developer Console Setup
Go to Box Developer Console: https://developer.box.com/
Create Custom App:
Click "Create New App"
Select "Custom App"
Choose "User Authentication (OAuth 2.0)"
Name your app (e.g., "MCP Box Server")
Configure OAuth Settings:
Redirect URI:
http://localhost:3000/auth/callbackApplication Scopes: Select all needed permissions:
ā Read all files and folders
ā Write all files and folders
ā Manage users
ā Manage enterprise properties
Save your configuration
Get Credentials:
Copy Client ID
Copy Client Secret
Step 2: Configure Your .env File
# OAuth 2.0 Configuration
AUTH_TYPE=oauth
BOX_CLIENT_ID=your_client_id_here
BOX_CLIENT_SECRET=your_client_secret_here
# Server Configuration
MCP_TRANSPORT=stdio
LOG_LEVEL=info
NODE_ENV=developmentStep 3: First-Time Authentication
# Build and start the server
npm run build
npm startWhat happens:
Server detects no stored OAuth tokens
Opens browser to Box login page automatically
You log in with your Box credentials
Box redirects back with authorization code
Server exchanges code for access/refresh tokens
Tokens are securely stored for future use
Client Credentials Grant (Enterprise)
Step 1: Box Developer Console Setup
Go to Box Developer Console: https://developer.box.com/
Create Custom App:
Click "Create New App"
Select "Custom App"
Choose "Server Authentication (Client Credentials Grant)"
Name your app (e.g., "MCP Box Server Enterprise")
Configure CCG Settings:
Application Scopes: Select enterprise permissions needed
Enterprise ID: Note your enterprise ID
Submit for Approval: Enterprise admin must approve
Get Credentials:
Copy Client ID
Copy Client Secret
Copy Enterprise ID
Step 2: Configure Your .env File
# CCG Configuration
AUTH_TYPE=ccg
BOX_CLIENT_ID=your_client_id
BOX_CLIENT_SECRET=your_client_secret
BOX_ENTERPRISE_ID=your_enterprise_id
# Server Configuration
MCP_TRANSPORT=stdio
LOG_LEVEL=info
NODE_ENV=productionStep 3: Enterprise Admin Approval
Enterprise admin must approve the app in Box Admin Console
Once approved, server will authenticate automatically
Integration Guides
Claude Code Integration
Add this MCP server to Claude Code for seamless Box integration:
Build the server:
npm run buildAdd to Claude Code configuration:
Option A: Via Claude Code UI
Open Claude Code settings
Navigate to "MCP Servers"
Add new server with these settings:
Name:
box-mcp-serverCommand:
nodeArgs:
["/Users/your-username/path-to/mcp-box/dist/index.js"]Environment Variables: Add your
.envvariables
Option B: Edit Claude Code config file
{ "mcpServers": { "box-mcp-server": { "command": "node", "args": ["/Users/your-username/path-to/mcp-box/dist/index.js"], "env": { "AUTH_TYPE": "oauth", "BOX_CLIENT_ID": "your_client_id", "BOX_CLIENT_SECRET": "your_client_secret" } } } }Restart Claude Code and verify the server appears in MCP servers list
Test the integration:
@box-mcp-server List my recent Box files @box-mcp-server Analyze the quarterly report in folder "Reports/2024" @box-mcp-server Share the presentation with my team
Claude Desktop Integration
For Claude Desktop, add to your MCP configuration:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%/Claude/claude_desktop_config.json
{
"mcpServers": {
"box-mcp-server": {
"command": "node",
"args": ["/path/to/mcp-box/dist/index.js"],
"env": {
"AUTH_TYPE": "oauth",
"BOX_CLIENT_ID": "your_client_id",
"BOX_CLIENT_SECRET": "your_client_secret"
}
}
}
}Other MCP Clients
The server supports standard MCP transports:
STDIO (Default):
node dist/index.jsHTTP with Server-Sent Events:
MCP_TRANSPORT=http MCPSERVER_PORT=3000 AUTH_TOKEN=your_secret node dist/index.jsUsage Examples
Document Management
// Save multiple documents with organization
{
"name": "box_save_documents",
"arguments": {
"documents": [
{
"content": "Meeting notes content...",
"path": "Projects/2024/Q4/meeting-notes.md",
"metadata": { "classification": "Internal" }
}
],
"options": {
"createFolders": true,
"shareSettings": { "createLink": true, "linkAccess": "company" }
}
}
}AI-Powered Analysis
// Analyze document with Box AI
{
"name": "box_analyze_document",
"arguments": {
"path": "Contracts/partnership-agreement.pdf",
"analysisType": "qa",
"options": {
"questions": ["What are the key payment terms?", "When does this contract expire?"]
}
}
}Smart Search
// Natural language search
{
"name": "box_search_content",
"arguments": {
"query": "quarterly financial reports from 2024 with revenue data",
"filters": {
"extensions": ["pdf", "xlsx"],
"dateRange": { "from": "2024-01-01" },
"includeContent": true
}
}
}MCP Protocol Support
This server implements the full MCP specification (v2025-06-18):
ā Tools - 8 intent-based tools with structured input/output
ā Resources - 6 Box URI templates for LLM context
ā Prompts - 5 interactive templates for common workflows
ā Transports - STDIO and HTTP/SSE support
ā Authentication - Bearer token support for HTTP transport
ā Error Handling - Comprehensive error responses with user-friendly messages
Development
Running Tests
# Unit + Integration tests
npm test
# E2E tests (requires Box credentials)
npm run test:e2e
# Test coverage
npm run test:coverageDevelopment Server
# Watch mode with hot reload
npm run dev
# Debug mode with verbose logging
LOG_LEVEL=debug npm startProject Structure
mcp-box/
āāā src/
ā āāā server.ts # MCP server implementation
ā āāā index.ts # Entry point & transport setup
ā āāā types.ts # TypeScript definitions
ā āāā box/ # Box API client
ā āāā tools/ # Individual MCP tools
āāā tests/ # Test suites
āāā docs/ # Planning documentation
āāā dist/ # Compiled JavaScriptAPI Reference
Tools
Tool | Description | Key Features |
| Upload files to Box | Batch upload, auto-folder creation, metadata |
| Read file content | Stream content, no local storage, text extraction |
| Folder operations | Create, move, rename, delete, batch operations |
| Navigate folders | Tree view, filtering, size info |
| Sharing & collaboration | Shared links, collaborator management |
| Box AI analysis | Summarize, extract, Q&A, classify, translate |
| Content search | Natural language, filters, metadata search |
| Download files | Batch download, optional local save |
Resources
URI Template | Description |
| Access file by ID |
| Access folder by ID |
| Search results |
| Storage quota info |
| Recent files |
| Complete folder tree |
Prompts
Prompt | Purpose | Arguments |
| Create shared links |
|
| AI document analysis |
|
| File organization |
|
| Multiple file upload |
|
| Team collaboration |
|
Troubleshooting
Authentication Issues
OAuth 2.0 Troubleshooting
Browser doesn't open automatically?
# Manual OAuth URL will be displayed in console # Copy and paste into browser"Invalid redirect URI" error?
Check Box app configuration matches your server settings
Ensure redirect URI is exactly:
http://localhost:3000/auth/callbackVerify no trailing slashes or extra characters
"Access denied" during login?
Check Box app has correct scopes enabled
Verify user has access to requested files/folders
Ensure app is not disabled in Box Admin Console
Tokens not persisting?
Check file system permissions for token storage
Verify
.envfile has correct credentialsTry deleting stored tokens and re-authenticating
CCG Troubleshooting
CCG Setup: Verify enterprise ID and app approval status
"App not authorized" error?
Enterprise admin must approve app in Box Admin Console
Check enterprise ID matches exactly
Verify app has required scopes enabled
Token Refresh: Check credential storage permissions
General Auth Issues
"Invalid client" errors: Double-check Client ID and Client Secret
"Unauthorized" responses: Verify auth method matches Box app type
Token refresh failures: Check network connectivity and Box API status
Common Errors
File Not Found: Use
box_search_contentto find correct file pathsPermission Denied: Verify Box app scopes and user permissions
Rate Limits: Server handles throttling automatically with exponential backoff
Debugging
# Enable debug logging
LOG_LEVEL=debug node dist/index.js
# Test MCP protocol compliance
npm run test:contract
# Validate Box API connectivity
npm run test:integrationContributing
Fork the repository
Create a feature branch:
git checkout -b feature-nameFollow TDD: Write tests first, then implementation
Ensure all tests pass:
npm testUpdate documentation as needed
Submit a pull request
License
MIT License - see LICENSE file for details.
Support
Issues: GitHub Issues
Discussions: GitHub Discussions
Box API: Box Developer Documentation
MCP Protocol: MCP Specification
Secure document management meets AI - Keep your files in Box cloud while enabling powerful AI interactions through the Model Context Protocol.
Available Tools
10 toolsbox_analyze_documentC
Use Box AI to analyze a document (summarize, Q&A, extract, translate)
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Box file path to analyze | |
| paths | No | Multiple file paths for batch analysis | |
| fileId | Yes | Box file ID to analyze | |
| fileIds | No | Multiple file IDs for batch analysis | |
| options | No | ||
| question | No | Question for Q&A mode | |
| analysisType | Yes | Type of AI analysis to perform |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure. It states that Box AI is used, but does not clarify side effects, permissions, cost/rate implications, output format, or whether the operation is read-only. The parenthetical operation list adds some context but is not enough for an AI-backed analysis tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single focused sentence with no wasted words and the core idea is front-loaded. Its brevity is acceptable, though the parenthetical list is slightly incomplete relative to the analysisType enum, which prevents a perfect score.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a complex tool with 7 parameters, nested option objects, six analysis modes, and no output schema. The description only provides a one-line overview and omits usage context, behavior, return expectations, and guidance for choosing analysisType. That is insufficient for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is high at 86%, so the schema already documents most parameters well. The description adds minimal value by listing some analysis types, but it does not explain how options, question, or file identifiers interact. A baseline 3 is appropriate because the schema carries the load.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ('analyze') and resource ('document') and lists the main operations: summarize, Q&A, extract, translate. It is clearer than the bare tool name and broadly distinguishes it from read/search siblings, though it omits 'classify' and 'extract_structured' from the parenthetical and remains somewhat generic.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given for when to use this tool versus alternatives like box_read_document or box_search_content. The description simply says 'Use Box AI to analyze a document' but does not explain what makes it the right choice, what inputs it requires, or when a sibling would be preferable.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
box_explore_storageC
Return a tree structure of folders/files starting at a path
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | / | |
| options | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the behavioral burden. It is transparent that this returns a tree structure and does not imply mutation, but it does not disclose how depth, permissions, errors, or edge cases are handled. The core behavior is clear; the edge behavior is silent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one front-loaded sentence with no filler. It communicates the core operation efficiently, though it is brief enough that it omits useful detail. The structure is appropriate, but it is not maximally informative.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no annotations, no output schema, and a nested options schema at 0% description coverage, the description is not complete enough for nuanced invocation. It does not describe return format, filtering behavior, default depth effects, or what 'pattern' applies to. The agent can guess a basic call but not fully understand the tool's behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description only clarifies that 'path' is the starting location. The nested 'options' object and its properties ā depth, sortBy, pattern, includeFiles, includeSizes, includeModified ā are not explained beyond their schema names and defaults. The description does not compensate for the missing schema documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ('Return') and resource ('tree structure of folders/files') with a path as the starting point. This clearly distinguishes it from siblings like box_search_content (which searches) and box_manage_folders (which manages). It does not explicitly name those alternatives, so it stops short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance about when to use this tool versus its siblings. The description implies browsing a storage hierarchy from a path, but it does not state when to prefer it over box_search_content or box_manage_folders. The agent must infer usage entirely.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
box_manage_foldersC
Create, move, rename, or delete folders by path or ID
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | ||
| folders | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It communicates that this tool mutates folders and can delete them, but it does not disclose auth requirements, side effects, reversibility, scope limitations, or error/response behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single efficient sentence with no filler and front-loads the key actions. It earns a 4 because it is concise, though the brevity contributes to the lack of behavioral and parameter detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This tool has a multi-action nested schema, no annotations, and no output schema, yet the description provides only a high-level summary. It does not clarify per-action requirements, folder addressing rules, return values, or error handling, leaving significant gaps for an agent to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema provides no descriptions for action, folders, or any nested property, and the description does not explain how actions relate to fields like newName, newPath, or folderId. 'By path or ID' only hints at path/folderId and leaves the rest of the parameter semantics undocumented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly names the resource (folders) and the specific operations (create, move, rename, delete), along with the two addressing modes (path or ID). This clearly differentiates it from sibling document, search, and sharing tools, even though no sibling is named.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance about when to use this tool versus alternatives, nor any mention of when not to use it. The only implication is that folder management belongs here, but no explicit usage conditions or exclusions are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
box_read_documentB
Read document content without saving locally
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Box file path to read (alternative to fileId) | |
| fileId | Yes | Box file ID to read | |
| options | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It states a non-destructive read behavior ('without saving locally') but does not disclose output format (text vs base64), permissions/authentication needs, size limits, or whether any network call or side effect occurs. This is a meaningful gap in a tool with zero annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence with zero waste. The verb, resource, and key constraint are front-loaded, making it immediately scannable. Perfectly concise for the information it conveys.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema and no annotations leave the description responsible for explaining return values and invocation context. It only states 'read document content without saving locally'āit does not mention how to specify the file, what the response looks like, or that text/base64 can be chosen. An agent would not know what to expect when calling it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 67%, and all parameters have at least a brief description, but the tool description adds no parameter-level meaning. It does not mention that fileId and path are alternatives or that options.asText controls text/base64 output. The description fails to compensate for the moderate schema coverage gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description uses specific verb 'read' and resource 'document content' plus the key constraint 'without saving locally', distinguishing it from sibling tools like box_save_documents and box_share_content. This is a clear, non-tautological purpose statement.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the use caseāreading content without persisting locallyābut gives no explicit 'when to use' vs 'when not to use' guidance, and does not mention any sibling alternatives. An agent has to infer from the name and siblings that this is for reading rather than saving, sharing, or analyzing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
box_save_documentsB
Save multiple documents to Box storage with automatic folder creation
| Name | Required | Description | Default |
|---|---|---|---|
| options | No | ||
| documents | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden, and it does disclose one genuinely latent side-effect: 'automatic folder creation' ā behavior an agent could not predict from the tool name alone. However, it stays silent on the failure profile of the overwrite=false default and on what happens when createFolders=false and the parent folder is missing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single ten-word sentence with the verb and resource front-loaded; 'multiple' and 'automatic folder creation' each add real scoping information. There is no wasted wording.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a write tool with zero annotations, no output schema, a nested array parameter, and nine siblings, the description is under-specified. The unstated consequence of the overwrite=false default, the absence of any routing context, and no note on return or permission behavior are material gaps an agent will encounter in real calls.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Top-level schema description coverage is 0%, so the description must add parameter meaning. It partially does ā 'multiple documents' maps to the documents array and 'automatic folder creation' explains the createFolders default ā but it says nothing about the overwrite option or the expected path/content entry shape, which is only partially covered by nested schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Save') with a clear resource ('documents to Box storage') and adds distinguishing scope ('multiple') plus a distinctive behavioral trait ('automatic folder creation'). This cleanly separates it from siblings like box_read_document, box_manage_folders, and box_explore_storage without needing to inspect the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given on when to prefer this tool over its nine siblings. There are no conditions, exclusions, or named alternatives ā an agent must infer routing from the name alone, such as choosing box_manage_folders when no document content needs saving.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
box_search_contentC
Search Box for files and folders with optional filters
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | ||
| filters | No | ||
| options | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full behavioral burden, but it discloses nothing beyond a bare 'search' verb. It does not reveal whether queries match file names, metadata, or content (relevant given the includeContent option), whether trashed items are excluded (includeTrashed defaults to false), or how results are ordered and paginated. The description adds no behavioral value beyond what the schema already exposes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single ten-word sentence with the verb and resource front-loaded ('Search Box') and zero filler. It is efficiently structured, though the brevity borders on under-specification rather than representing a model of economical completeness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has three parameters containing nested objects with eight subfields, no output schema, and no annotations, yet the description is only ten words. An agent cannot determine what the folders filter expects (IDs, paths, or names), what extension format to use, what includeContent does, or what the result shape looks like. This is insufficient for the tool's complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate, yet it only hints that filters operate on files and folders ā a loose mapping to the filters.type enum. The semantics of query, folders, extensions, limit, sortBy, direction, includeContent, and includeTrashed are left entirely unexplained. This adds only marginal value over the raw schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Search') with a clear resource ('Box' for files and folders), immediately identifying the tool as a content discovery utility. It distinguishes itself from read/save/share/analyze siblings implicitly, though it does not explicitly differentiate from the closely related box_explore_storage.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'With optional filters' describes capability, not invocation context ā it says nothing about when to use this tool versus box_explore_storage for browsing or box_read_document for retrieving a found item. No prerequisites, exclusions, or alternative routing guidance is provided. An agent must infer the tool's role purely from its name.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
box_update_collaboratorsB
Update collaborator roles or remove collaborators on a file/folder
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | ||
| itemId | Yes | ||
| updates | Yes | ||
| itemType | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the behavioral burden. It explicitly discloses the potentially destructive 'remove collaborators' action, which is useful. However, it does not mention permission requirements, whether updates are applied atomically, reversibility, or effects on existing access, leaving significant behavioral gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with no redundant phrasing. It front-loads the core action and resource scope, wasting no words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a batch mutation tool with no annotations and no output schema, the description is too thin. It lacks usage context, prerequisite information, and behavior around the updates array. An agent is left without enough guidance beyond the raw schema to know how to safely and correctly invoke the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It explains that roles can be updated and collaborators removed, and that the target is a file or folder, which maps to itemType and the updates array. It does not describe path or itemId, and does not clarify how the updates array should be structured beyond what the schema already shows, so compensation is partial.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a precise action ā updating collaborator roles or removing collaborators ā on a specific resource (file/folder). This clearly distinguishes it from siblings like box_update_shared_link, which targets shared link settings, and box_share_content, which is about sharing rather than permission changes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given on when to choose this tool over box_share_content or box_update_shared_link. The description implies a use case for managing collaborator permissions but does not state prerequisites, exclusions, or when an alternative would be more appropriate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
10 tool updates
v0.1.0- First observed
box_analyze_document - First observed
box_explore_storage - First observed
box_manage_folders - First observed
box_read_document - First observed
box_remove_shared_link - First observed
box_save_documents - First observed
box_search_content - First observed
box_share_content - First observed
box_update_collaborators - First observed
box_update_shared_link
TDQS
Most tools target distinct operations, but box_share_content overlaps with box_update_shared_link, box_remove_shared_link, and box_update_collaborators since sharing can involve both links and collaborators. box_manage_folders is also broad and could be confused with box_explore_storage for folder operations.
All tools share a consistent box_ prefix and mostly follow a verb_noun pattern. Minor inconsistencies exist such as box_save_documents vs box_read_document (plural mismatch) and the generic box_manage_folders instead of a specific verb like create/update/delete.
Ten tools is well-scoped for a Box storage MCP server covering document operations, folder management, search, sharing, and AI analysis. Each tool earns its place without overwhelming the agent.
The tool set covers core storage workflows: save, read, organize, explore, search, share, and analyze. Gaps include no direct file deletion (only folders) and no explicit file download or versioning, but agents can work around most limitations.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
- BoxOAuthcom.box.mcp
The Box MCP server is a secure gateway that connects external AI agents to enterprise content stored in Box, enabling agent-based document access, advanced search, and multi-file analysis while preserving Box security policies. It provides capabilities including keyword search, Box AI-powered Q&A across files, metadata extraction, file management, and authentication, all validated against Box's granular permission controls. The server integrates with major AI platforms like Anthropic Claude, Microsoft Copilot Studio, and Mistral Le Chat, and is available both as a Box-hosted remote server and a self-hosted open-source Python project.
Ingest, manage, and retrieve documents for RAG-powered AI applications
Secure integration between AI tools and Egnyte content with search, analysis, and workflow tools.
Search and reason over your Obsidian-style Markdown vault, right from ChatGPT.
Related MCP Servers
- AlicenseBqualityFmaintenanceA Python server that enables interaction with Box files and folders through the Box API, allowing operations like file search, text extraction, and AI-based querying and data extraction.100101MIT
- AlicenseNot gradedqualityAmaintenanceEnables secure interaction with Salesforce orgs through LLMs, providing tools for managing orgs, querying data, deploying metadata, running tests, and performing code analysis. Features granular access control and uses encrypted auth files to avoid exposing secrets in plain text.465Apache 2.0
- FlicenseNot gradedqualityDmaintenanceEnables Large Language Models to safely browse and interact with local file systems through secure directory listing, file reading, and content search capabilities. Built with comprehensive security controls and high-performance handling of large directories and files.-
- AlicenseNot gradedqualityDmaintenanceEnables secure interaction with Salesforce orgs through LLMs, providing tools for managing orgs, querying data, deploying metadata, running tests, and performing code analysis with granular access control and encrypted authentication.Apache 2.0
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/dennisonbertram/mcp-box'
If you have feedback or need assistance with the MCP directory API, please join our Discord server