Two ways to connect
Box now runs a hosted MCP server. For most people, that is the easier path: one connection, then file and folder tools across the content the signed-in user can already reach.- Box MCP server (recommended). Connect Box’s hosted MCP server once and your agents can search, read, and manage files and folders. Your Box admin must enable the Box MCP server in the Admin Console first. See Connect with MCP.
- Box OAuth. The original sign-in integration, scoped to what you grant. See Connect with OAuth.
What your agents can do
Find files
Search your Box account.
Read files
Pull content from a document.
Upload files
Save new files to a folder.
Browse folders
Move through your folder structure.
Example agent tasks
Connect with MCP
Connect to Box’s hosted MCP server to search, read, and manage files and folders in your Box account. Box’s own hosted MCP gives agents direct file and folder tools.Requires a Box account whose admin has enabled the Box MCP server in the Admin Console (Integrations, then MCP). Tools only reach content the signed-in user can already access. Write tools change real files, so confirm before destructive changes.
1
Add the Box connection
From the agent’s connections, choose Box. The platform connects you through Box’s MCP server.
2
Sign in to Box
A connect card appears. Sign in to your Box account and approve.
3
Your agents get to work
They can now search, read, and manage files and folders through the MCP server, within what the signed-in user can already access.
MCP is the first-class connection when both options are available. See Tools & MCP.
Connect with OAuth
What you share
During the connect flow you authorize what the agent can reach. It works only within what you grant. As with every connection, the underlying token is handled securely and never exposed to the model. See Permissioning.1
Authorize Box for the agent
From the agent’s connections, choose Box and sign in.
2
Approve the access
Confirm what the agent can reach. You can change this later.
3
The agent gets to work
It works through the secure proxy, within what you granted.
Learn more
Box MCP server
How to enable the hosted MCP endpoint and which tools it exposes.
Box API docs
The full reference for what’s possible.
How credentials stay safe
The proxy model that keeps tokens out of the agent’s reach.