Creativity · MCP — server

MCP Box Server

The MCP Box Server integrates Box's content-cloud APIs with MCP clients: list folders, read and write files, search by metadata, and invoke Box AI for enterprise-grade question answering over governed documents. Authentication uses Box JWT or OAuth 2.0, and every call respects Box's granular collaboration permissions and shield policies.

MCP facts

Kind: server
Ecosystem: anthropic-mcp
Language: TypeScript / Python
Transports: stdio, http

Capabilities

Tools: list_items, get_file, upload_file, search_content, box_ai_ask
Resources: box://file/{id}, box://folder/{id}
Honors Box collaboration roles and Shield access policies

Install

npx -y @box/mcp-server

Configuration

{
  "mcpServers": {
    "box": {
      "command": "npx",
      "args": ["-y", "@box/mcp-server"],
      "env": {
        "BOX_CLIENT_ID": "${BOX_CLIENT_ID}",
        "BOX_CLIENT_SECRET": "${BOX_CLIENT_SECRET}",
        "BOX_ENTERPRISE_ID": "${BOX_ENTERPRISE_ID}"
      }
    }
  }
}

Frequently asked questions

Does Box have an official MCP server?

Box has published an MCP integration that leverages its AI for Enterprise stack. Community variants exist that wrap only the Content API. Always check the publisher before installing.

How does Box AI integrate with MCP?

Tools like box_ai_ask forward a natural-language question plus a file ID to Box AI, which runs retrieval over the file's permitted content and returns a grounded answer to the MCP client.

What permissions does it need?

Create a Custom App in the Box Developer Console, grant scopes like 'Read all files' or 'Write all files' as needed, and have an admin approve it for the enterprise.

Sources

Box Developer — API reference — accessed 2026-04-20
Box AI for Enterprise — accessed 2026-04-20
Model Context Protocol — accessed 2026-04-20