--- title: "Box MCP server for AI agents - actionlake" description: "Give Claude 283 Box actions through one MCP server: file, metadata, folder, shield. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/box updated: 2026-09-21 --- Connectors · Files & documents # Box MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Box and the rest of your systems. It gives your agent 283 Box actions (130 reads, 105 writes and 48 that wait for a confirmation) and holds the Box credential itself, so the agent never does. It paces Box's limits and records every call. Connecting Box needs your own Box OAuth app and one admin sign-in. [Connect Box free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "box.users.list", intent: "check which Box account is connected" } # Users: list · read · 1 upstream call ``` - 283 actions in one signed file - 130 read look, never change - 105 write create and update - 48 wait for a yes destructive, confirmed first Set up ## Connect Box in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Box. OAuth 2.0, authorization code. You register your own OAuth app with Box, an admin signs in once, and you paste the app's client id and secret and the tokens from that sign-in; actionlake renews the access token from then on. actionlake stores what you paste write-only, sealed under your tenant's key. Before the first sign-in, Box needs an OAuth app of your own, registered in its developer portal. actionlake has no Box app to lend you. - `access_token` Access token from one sign-in with your own OAuth app - `refresh_token` Refresh token from the same sign-in; the access token is renewed from it - `client_id` Box client ID - `client_secret` Box client secret ``` account { op: "connections.requirements", service: "box" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "box.users.list" } # users: list · read · 1 upstream call check { action: "box.users.create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Box at a glance **Sign-in** OAuth 2.0, authorization code. You register your own OAuth app with Box, an admin signs in once, and you paste the app's client id and secret and the tokens from that sign-in; actionlake renews the access token from then on. **You provide** `access_token` `refresh_token` `client_id` `client_secret` **Limits we pace to** 1,000 calls a minute, at most 8 at a time, per connection **API covered** Box API 2.0`api.box.com/2.0` **Built from** Box's documentation, read 19 September 2026[OpenAPI spec (GitHub)](https://raw.githubusercontent.com/box/box-openapi/main/openapi.json) [developer.box.com](https://developer.box.com/reference/) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 129 of 130 reads, for up to an hour; a write clears what it affects **Ready-made plans** 9 in the store **Shared entities** 7, so ask can line Box up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Box. 283 actions in 29 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **130** read look, never change - **105** write create and update - **48** destructive wait for a confirmation 1. ### File 51 22 read · 20 write · 9 destructive Files: get · Files: delete · Files: update · Files Comments: list 2. ### Metadata 33 14 read · 15 write · 4 destructive Metadata Taxonomies Nodes: list · Metadata Taxonomies Nodes: create · Metadata Templates: list · Metadata Templates Enterprise: list 3. ### Folder 28 11 read · 12 write · 5 destructive Folders Items: list · Folders: get · Folders: create · Folders: update 4. ### Shield 20 10 read · 7 write · 3 destructive Shield Information Barrier Reports: list · Shield Information Barrier Segments: list · Shield Information Barriers: list · Shield Information Barrier Reports: create 5. ### User 13 5 read · 4 write · 4 destructive Users: list · Users: create · Users: get · Users: update 6. ### Group 12 5 read · 4 write · 3 destructive Groups: list · Groups: create · Groups: get · Groups: update 7. ### Web link 11 3 read · 6 write · 2 destructive Web Links: create · Web Links: create · Web Links: get · Web Links: get get shared link 8. ### Legal hold 11 6 read · 3 write · 2 destructive Legal Hold Policy Assignments Files On Hold: list · Legal Hold Policy Assignments File Versions On Hold: list · Legal Hold Policies: list · Legal Hold Policies: create **21 more areas · 104 actions** - Retention **11** - Platform **11** - AI **10** - Sharing **9** - Task **9** - Integration **8** - Request **7** - Storage policy **7** - Terms **7** - Webhook **5** - Comment **4** - Collection **3** - Workflow **2** - Device **2** - Invite **2** - Zip **2** - Enterprise **1** - Recent **1** - Search **1** - Event **1** - Skill **1** Box's own MCP server ## Box's MCP server, or actionlake? Box runs a remote MCP server at mcp.box.com, signed in with OAuth once a Box admin turns MCP on. Use Box's server when one person wants to work in Box from their own AI client. Use actionlake when you also want Box behind the same endpoint as your other systems: a key per agent with allowed actions and a spending cap, a named person's approval before destructive actions, a sealed record of every call, and one ask across Box and another system. Source: [Box's documentation](https://developer.box.com/guides/box-mcp/), checked 22 October 2026. Top actions ## The Box API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 154 of Box's 156 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `box.users.list` Users: list | List enterprise users | read | `identity.user.list` 474 connectors | | `box.folders_items.list` Folders Items: list | List items in folder | read | `content.file.list` 77 connectors | | `box.folders.get` Folders: get | Get folder information | read | `content.folder.get` 47 connectors | | `box.groups.list` Groups: list | List groups for enterprise | read | `identity.group.list` 262 connectors | | `box.users.create` Users: create | Create user | write | `identity.user.create` 262 connectors | | `box.folders.create` Folders: create | Create folder | write | `content.folder.create` 62 connectors | | `box.files.get` Files: get | Get file information | read | `content.file.get` 74 connectors | | `box.files.delete` Files: delete | Delete file | destructive | `content.file.delete` 68 connectors | | `box.files_comments.list` Files Comments: list | List file comments | read | `content.file_comment.list` 12 connectors | | `box.groups.create` Groups: create | Create group | write | `identity.group.create` 205 connectors | | `box.files_tasks.list` Files Tasks: list | List tasks on file | read | `work.task.list` 122 connectors | | `box.files.update_add_shared_link` Files: update add shared link | Add shared link to file | write | `content.file_link.create` 18 connectors | Try it ## Prompts to paste into Claude. Each one names the Box actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Which Box tasks are overdue, and who owns each one? calls `box.files_tasks.list` 2. Plan destructive Retire a legal hold policy in Box. Ask me before anything is sent or changed. calls `box.legal_hold_policies.get` `box.legal_hold_policy_assignments.list` `box.legal_hold_policy_assignments_files_on_hold.list` `box.legal_hold_policy_assignments.delete` `box.legal_hold_policies.delete` 3. Plan read Audit pending collaborations on a folder in Box. calls `box.collaborations.list` `box.folders.get` `box.folders_collaborations.list` `box.collaborations.get` 4. Write write Users: create in Box. Show me exactly what you will send before you save it. calls `box.users.create` The plan store ## Ready-made plans for Box. 9 plans in the store. Install one and your agent runs it by name; the reply says which connections are still missing. A schedule can run a plan on a timetable. There are no triggers or webhooks, by design. 1. ### Summarise a folder with Box AI Use it when Someone wants to know what is inside a Box folder without opening every document in it. **Effect** read **Steps** 3 **Needs** folder id and question **Install** `box-summarise-folder-contents` 2. ### Audit pending collaborations on a folder Use it when Someone wants to see who has outstanding invitations to a Box folder before those invites turn into real access. **Effect** read **Steps** 4 · loops **Needs** folder id **Install** `box-audit-external-collaborations` 3. ### Chase outstanding signature requests Use it when Signature requests have gone quiet and someone wants every outstanding signer nudged in one pass. **Effect** write **Steps** 2 · loops **Install** `box-chase-outstanding-signatures` 4. ### Classify a folder's files with Box AI Use it when Files in a folder need a security classification applied and someone wants AI help deciding what is in them first. **Effect** write **Steps** 4 · loops **Needs** classification key and folder id **Install** `box-classify-folder-contents` 5. ### Onboard a new user into a team folder Use it when A new joiner needs a Box account and access to one team folder in a single approved run. A person decides Create Box user '_name_' and grant them _role_ on folder _folder id_. **Effect** write **Steps** 5 **Needs** email, folder id, name and role **Install** `box-onboard-user-to-workspace` 6. ### Publish a shared link for a folder Use it when A folder needs a public or company shared link and someone must sign off before it is exposed. A person decides Publish a '_access_' shared link for Box folder '_name_'. **Effect** write **Steps** 5 **Needs** access and folder id **Install** `box-publish-shared-link` 7. ### Start a Box Relay workflow and wait for it Use it when A Box Relay workflow needs to be kicked off on a folder and the caller must know when it has finished. **Effect** write **Steps** 6 **Needs** folder id and workflow id **Install** `box-run-folder-workflow` 8. ### Revoke a collaboration after sign-off Use it when A person or partner must lose access to a Box item and someone needs to sign off before the access is cut. A person decides Revoke Box collaboration _collaboration id_, removing _login_ from _name_. **Effect** destructive **Steps** 4 **Needs** collaboration id and folder id **Install** `box-revoke-collaboration` 9. ### Retire a legal hold policy Use it when A legal hold has ended and the policy plus all of its assignments must be removed with a compliance sign-off on record. A person decides Retire legal hold policy '_policy name_' and delete its _number of items_ assignments. Files come off hold. **Effect** destructive **Steps** 6 · loops **Needs** legal hold policy id **Install** `box-retire-legal-hold-policy` install a plan ``` account { op: "plans.install", slug: "box-summarise-folder-contents" } # then ask for it by name; a schedule can run it on a timetable ``` Governance for Box ## Destructive actions wait for a yes. 48 Box actions are destructive. The first 10: - Files: delete `box.files.delete` - Users: delete `box.users.delete` - Folders: delete `box.folders.delete` - Groups: delete `box.groups.delete` - Comments: delete `box.comments.delete` - Collaborations: delete `box.collaborations.delete` - Tasks: delete `box.tasks.delete` - Device Pinners: delete `box.device_pinners.delete` - Users Terminate Sessions: create `box.users_terminate_sessions.create` - Groups Terminate Sessions: create `box.groups_terminate_sessions.create` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do box.files.delete confirm_policy: **human** Files: delete? **intent:** the user asked me to files: delete run suspended · waiting for a named person · key _box-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "box-agent", allowed_actions: ["box.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "box.files.delete", approver: "lead@example.com" }, { match: "box.users.delete", approver: "lead@example.com" }, { match: "box.folders.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Box only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Box costs on actionlake. Every Box action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Box refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 283 Box actions - 283 actions page each page of a long list is one call - 129 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Box action. 283 actions by area: the id your agent calls, what it does, and its effect. **File 51** - `box.file_requests.delete` File Requests: delete destructive - `box.file_requests.get` File Requests: get read - `box.file_requests.update` File Requests: update write - `box.file_requests_copy.create` File Requests Copy: create write - `box.file_version_legal_holds.get` File Version Legal Holds: get read - `box.file_version_legal_holds.list` File Version Legal Holds: list read - `box.file_version_retentions.get` File Version Retentions: get read - `box.file_version_retentions.list` File Version Retentions: list read - `box.files.create` Files: create write - `box.files.delete` Files: delete destructive - `box.files.get` Files: get read - `box.files.get_get_shared_link` Files: get get shared link read - `box.files.update` Files: update write - `box.files.update_add_shared_link` Files: update add shared link write - `box.files.update_remove_shared_link` Files: update remove shared link write - `box.files.update_update_shared_link` Files: update update shared link write - `box.files_app_item_associations.list` Files App Item Associations: list read - `box.files_collaborations.list` Files Collaborations: list read - `box.files_comments.list` Files Comments: list read - `box.files_copy.create` Files Copy: create write - `box.files_metadata.create` Files Metadata: create write - `box.files_metadata.delete` Files Metadata: delete destructive - `box.files_metadata.get` Files Metadata: get read - `box.files_metadata.list` Files Metadata: list read - `box.files_metadata.update` Files Metadata: update write - `box.files_metadata_enterprise_security_classification_6_vmvochw_uwo.create` Files Metadata Enterprise Security Classification 6 Vmvochw Uwo: create write - `box.files_metadata_enterprise_security_classification_6_vmvochw_uwo.delete` Files Metadata Enterprise Security Classification 6 Vmvochw Uwo: delete destructive - `box.files_metadata_enterprise_security_classification_6_vmvochw_uwo.get` Files Metadata Enterprise Security Classification 6 Vmvochw Uwo: get read - `box.files_metadata_enterprise_security_classification_6_vmvochw_uwo.update` Files Metadata Enterprise Security Classification 6 Vmvochw Uwo: update write - `box.files_metadata_global_box_skills_cards.create` Files Metadata Global Box Skills Cards: create write - `box.files_metadata_global_box_skills_cards.delete` Files Metadata Global Box Skills Cards: delete destructive - `box.files_metadata_global_box_skills_cards.get` Files Metadata Global Box Skills Cards: get read - `box.files_metadata_global_box_skills_cards.update` Files Metadata Global Box Skills Cards: update write - `box.files_tasks.list` Files Tasks: list read - `box.files_trash.delete` Files Trash: delete destructive - `box.files_trash.get` Files Trash: get read - `box.files_upload_sessions.create` Files Upload Sessions: create write - `box.files_upload_sessions.create_post` Files Upload Sessions: create write - `box.files_upload_sessions.delete` Files Upload Sessions: delete destructive - `box.files_upload_sessions.get` Files Upload Sessions: get read - `box.files_upload_sessions_commit.create` Files Upload Sessions Commit: create write - `box.files_upload_sessions_parts.list` Files Upload Sessions Parts: list read - `box.files_upload_sessions_plan.create` Files Upload Sessions Plan: create read - `box.files_versions.delete` Files Versions: delete destructive - `box.files_versions.get` Files Versions: get read - `box.files_versions.list` Files Versions: list read - `box.files_versions.update` Files Versions: update write - `box.files_versions_current.create` Files Versions Current: create write - `box.files_watermark.delete` Files Watermark: delete destructive - `box.files_watermark.get` Files Watermark: get read - `box.files_watermark.update` Files Watermark: update write **Metadata 33** - `box.metadata_cascade_policies.create` Metadata Cascade Policies: create write - `box.metadata_cascade_policies.delete` Metadata Cascade Policies: delete destructive - `box.metadata_cascade_policies.get` Metadata Cascade Policies: get read - `box.metadata_cascade_policies.list` Metadata Cascade Policies: list read - `box.metadata_cascade_policies_apply.create` Metadata Cascade Policies Apply: create write - `box.metadata_queries_execute_read.search` Metadata Queries Execute Read: search read - `box.metadata_taxonomies.create` Metadata Taxonomies: create write - `box.metadata_taxonomies.delete` Metadata Taxonomies: delete destructive - `box.metadata_taxonomies.get` Metadata Taxonomies: get read - `box.metadata_taxonomies.get_get` Metadata Taxonomies: get read - `box.metadata_taxonomies.update` Metadata Taxonomies: update write - `box.metadata_taxonomies_levels.create` Metadata Taxonomies Levels: create write - `box.metadata_taxonomies_levels.update` Metadata Taxonomies Levels: update write - `box.metadata_taxonomies_levels_append.create` Metadata Taxonomies Levels Append: create write - `box.metadata_taxonomies_levels_trim.create` Metadata Taxonomies Levels Trim: create write - `box.metadata_taxonomies_nodes.create` Metadata Taxonomies Nodes: create write - `box.metadata_taxonomies_nodes.delete` Metadata Taxonomies Nodes: delete destructive - `box.metadata_taxonomies_nodes.get` Metadata Taxonomies Nodes: get read - `box.metadata_taxonomies_nodes.list` Metadata Taxonomies Nodes: list read - `box.metadata_taxonomies_nodes.update` Metadata Taxonomies Nodes: update write - `box.metadata_templates.get` Metadata Templates: get read - `box.metadata_templates.list` Metadata Templates: list read - `box.metadata_templates_enterprise.list` Metadata Templates Enterprise: list read - `box.metadata_templates_enterprise_security_classification_6_vmvochw_uwo_schema.get` Metadata Templates Enterprise Security Classification 6 Vmvochw Uwo Schema: get read - `box.metadata_templates_enterprise_security_classification_6_vmvochw_uwo_schema.update_add` Metadata Templates Enterprise Security Classification 6 Vmvochw Uwo Schema: update add write - `box.metadata_templates_enterprise_security_classification_6_vmvochw_uwo_schema.update_update` Metadata Templates Enterprise Security Classification 6 Vmvochw Uwo Schema: update update write - `box.metadata_templates_fields_options.list` Metadata Templates Fields Options: list read - `box.metadata_templates_global.list` Metadata Templates Global: list read - `box.metadata_templates_schema.create` Metadata Templates Schema: create write - `box.metadata_templates_schema.create_classifications` Metadata Templates Schema: create classifications write - `box.metadata_templates_schema.delete` Metadata Templates Schema: delete destructive - `box.metadata_templates_schema.get` Metadata Templates Schema: get read - `box.metadata_templates_schema.update` Metadata Templates Schema: update write **Folder 28** - `box.folders.create` Folders: create write - `box.folders.create_post` Folders: create write - `box.folders.delete` Folders: delete destructive - `box.folders.get` Folders: get read - `box.folders.get_get_shared_link` Folders: get get shared link read - `box.folders.update` Folders: update write - `box.folders.update_add_shared_link` Folders: update add shared link write - `box.folders.update_remove_shared_link` Folders: update remove shared link write - `box.folders.update_update_shared_link` Folders: update update shared link write - `box.folders_app_item_associations.list` Folders App Item Associations: list read - `box.folders_collaborations.list` Folders Collaborations: list read - `box.folders_copy.create` Folders Copy: create write - `box.folders_items.list` Folders Items: list read - `box.folders_metadata.create` Folders Metadata: create write - `box.folders_metadata.delete` Folders Metadata: delete destructive - `box.folders_metadata.get` Folders Metadata: get read - `box.folders_metadata.list` Folders Metadata: list read - `box.folders_metadata.update` Folders Metadata: update write - `box.folders_metadata_enterprise_security_classification_6_vmvochw_uwo.create` Folders Metadata Enterprise Security Classification 6 Vmvochw Uwo: create write - `box.folders_metadata_enterprise_security_classification_6_vmvochw_uwo.delete` Folders Metadata Enterprise Security Classification 6 Vmvochw Uwo: delete destructive - `box.folders_metadata_enterprise_security_classification_6_vmvochw_uwo.get` Folders Metadata Enterprise Security Classification 6 Vmvochw Uwo: get read - `box.folders_metadata_enterprise_security_classification_6_vmvochw_uwo.update` Folders Metadata Enterprise Security Classification 6 Vmvochw Uwo: update write - `box.folders_trash.delete` Folders Trash: delete destructive - `box.folders_trash.get` Folders Trash: get read - `box.folders_trash_items.list` Folders Trash Items: list read - `box.folders_watermark.delete` Folders Watermark: delete destructive - `box.folders_watermark.get` Folders Watermark: get read - `box.folders_watermark.update` Folders Watermark: update write **Shield 20** - `box.shield_information_barrier_reports.create` Shield Information Barrier Reports: create write - `box.shield_information_barrier_reports.get` Shield Information Barrier Reports: get read - `box.shield_information_barrier_reports.list` Shield Information Barrier Reports: list read - `box.shield_information_barrier_segment_members.create` Shield Information Barrier Segment Members: create write - `box.shield_information_barrier_segment_members.delete` Shield Information Barrier Segment Members: delete destructive - `box.shield_information_barrier_segment_members.get` Shield Information Barrier Segment Members: get read - `box.shield_information_barrier_segment_members.list` Shield Information Barrier Segment Members: list read - `box.shield_information_barrier_segment_restrictions.create` Shield Information Barrier Segment Restrictions: create write - `box.shield_information_barrier_segment_restrictions.delete` Shield Information Barrier Segment Restrictions: delete destructive - `box.shield_information_barrier_segment_restrictions.get` Shield Information Barrier Segment Restrictions: get read - `box.shield_information_barrier_segment_restrictions.list` Shield Information Barrier Segment Restrictions: list read - `box.shield_information_barrier_segments.create` Shield Information Barrier Segments: create write - `box.shield_information_barrier_segments.delete` Shield Information Barrier Segments: delete destructive - `box.shield_information_barrier_segments.get` Shield Information Barrier Segments: get read - `box.shield_information_barrier_segments.list` Shield Information Barrier Segments: list read - `box.shield_information_barrier_segments.update` Shield Information Barrier Segments: update write - `box.shield_information_barriers.create` Shield Information Barriers: create write - `box.shield_information_barriers.get` Shield Information Barriers: get read - `box.shield_information_barriers.list` Shield Information Barriers: list read - `box.shield_information_barriers_change_status.create` Shield Information Barriers Change Status: create write **User 13** - `box.users.create` Users: create write - `box.users.delete` Users: delete destructive - `box.users.get` Users: get read - `box.users.list` Users: list read - `box.users.update` Users: update write - `box.users_avatar.delete` Users Avatar: delete destructive - `box.users_email_aliases.create` Users Email Aliases: create write - `box.users_email_aliases.delete` Users Email Aliases: delete destructive - `box.users_email_aliases.list` Users Email Aliases: list read - `box.users_folders_0.update` Users Folders 0: update write - `box.users_me.get` Users Me: get read - `box.users_memberships.list` Users Memberships: list read - `box.users_terminate_sessions.create` Users Terminate Sessions: create destructive **Group 12** - `box.group_memberships.create` Group Memberships: create write - `box.group_memberships.delete` Group Memberships: delete destructive - `box.group_memberships.get` Group Memberships: get read - `box.group_memberships.update` Group Memberships: update write - `box.groups.create` Groups: create write - `box.groups.delete` Groups: delete destructive - `box.groups.get` Groups: get read - `box.groups.list` Groups: list read - `box.groups.update` Groups: update write - `box.groups_collaborations.list` Groups Collaborations: list read - `box.groups_memberships.list` Groups Memberships: list read - `box.groups_terminate_sessions.create` Groups Terminate Sessions: create destructive **Web link 11** - `box.web_links.create` Web Links: create write - `box.web_links.create_post` Web Links: create write - `box.web_links.delete` Web Links: delete destructive - `box.web_links.get` Web Links: get read - `box.web_links.get_get_shared_link` Web Links: get get shared link read - `box.web_links.update` Web Links: update write - `box.web_links.update_add_shared_link` Web Links: update add shared link write - `box.web_links.update_remove_shared_link` Web Links: update remove shared link write - `box.web_links.update_update_shared_link` Web Links: update update shared link write - `box.web_links_trash.delete` Web Links Trash: delete destructive - `box.web_links_trash.get` Web Links Trash: get read **Legal hold 11** - `box.legal_hold_policies.create` Legal Hold Policies: create write - `box.legal_hold_policies.delete` Legal Hold Policies: delete destructive - `box.legal_hold_policies.get` Legal Hold Policies: get read - `box.legal_hold_policies.list` Legal Hold Policies: list read - `box.legal_hold_policies.update` Legal Hold Policies: update write - `box.legal_hold_policy_assignments.create` Legal Hold Policy Assignments: create write - `box.legal_hold_policy_assignments.delete` Legal Hold Policy Assignments: delete destructive - `box.legal_hold_policy_assignments.get` Legal Hold Policy Assignments: get read - `box.legal_hold_policy_assignments.list` Legal Hold Policy Assignments: list read - `box.legal_hold_policy_assignments_file_versions_on_hold.list` Legal Hold Policy Assignments File Versions On Hold: list read - `box.legal_hold_policy_assignments_files_on_hold.list` Legal Hold Policy Assignments Files On Hold: list read **Retention 11** - `box.retention_policies.create` Retention Policies: create write - `box.retention_policies.delete` Retention Policies: delete destructive - `box.retention_policies.get` Retention Policies: get read - `box.retention_policies.list` Retention Policies: list read - `box.retention_policies.update` Retention Policies: update write - `box.retention_policies_assignments.list` Retention Policies Assignments: list read - `box.retention_policy_assignments.create` Retention Policy Assignments: create write - `box.retention_policy_assignments.delete` Retention Policy Assignments: delete destructive - `box.retention_policy_assignments.get` Retention Policy Assignments: get read - `box.retention_policy_assignments_file_versions_under_retention.list` Retention Policy Assignments File Versions Under Retention: list read - `box.retention_policy_assignments_files_under_retention.list` Retention Policy Assignments Files Under Retention: list read **Platform 11** - `box.collaboration_whitelist_entries.create` Collaboration Whitelist Entries: create write - `box.collaboration_whitelist_entries.delete` Collaboration Whitelist Entries: delete destructive - `box.collaboration_whitelist_entries.get` Collaboration Whitelist Entries: get read - `box.collaboration_whitelist_entries.list` Collaboration Whitelist Entries: list read - `box.collaboration_whitelist_exempt_targets.create` Collaboration Whitelist Exempt Targets: create write - `box.collaboration_whitelist_exempt_targets.delete` Collaboration Whitelist Exempt Targets: delete destructive - `box.collaboration_whitelist_exempt_targets.get` Collaboration Whitelist Exempt Targets: get read - `box.collaboration_whitelist_exempt_targets.list` Collaboration Whitelist Exempt Targets: list read - `box.folder_locks.create` Folder Locks: create write - `box.folder_locks.delete` Folder Locks: delete destructive - `box.folder_locks.list` Folder Locks: list read **AI 10** - `box.ai_agent_default.get` Ai Agent Default: get read - `box.ai_agents.create` Ai Agents: create write - `box.ai_agents.delete` Ai Agents: delete destructive - `box.ai_agents.get` Ai Agents: get read - `box.ai_agents.list` Ai Agents: list read - `box.ai_agents.update` Ai Agents: update write - `box.ai_ask.run` Ai Ask: run read - `box.ai_extract.run` Ai Extract: run read - `box.ai_extract_structured.run` Ai Extract Structured: run read - `box.ai_text_gen.run` Ai Text Gen: run read **Sharing 9** - `box.collaborations.create` Collaborations: create write - `box.collaborations.delete` Collaborations: delete destructive - `box.collaborations.get` Collaborations: get read - `box.collaborations.list` Collaborations: list read - `box.collaborations.update` Collaborations: update write - `box.shared_items.get` Shared Items: get read - `box.shared_items.get_app_items` Shared Items: get app items read - `box.shared_items.get_folders` Shared Items: get folders read - `box.shared_items.get_web_links` Shared Items: get web links read **Task 9** - `box.task_assignments.create` Task Assignments: create write - `box.task_assignments.delete` Task Assignments: delete destructive - `box.task_assignments.get` Task Assignments: get read - `box.task_assignments.update` Task Assignments: update write - `box.tasks.create` Tasks: create write - `box.tasks.delete` Tasks: delete destructive - `box.tasks.get` Tasks: get read - `box.tasks.update` Tasks: update write - `box.tasks_assignments.list` Tasks Assignments: list read **Integration 8** - `box.integration_mappings_slack.create` Integration Mappings Slack: create write - `box.integration_mappings_slack.delete` Integration Mappings Slack: delete destructive - `box.integration_mappings_slack.list` Integration Mappings Slack: list read - `box.integration_mappings_slack.update` Integration Mappings Slack: update write - `box.integration_mappings_teams.create` Integration Mappings Teams: create write - `box.integration_mappings_teams.delete` Integration Mappings Teams: delete destructive - `box.integration_mappings_teams.list` Integration Mappings Teams: list read - `box.integration_mappings_teams.update` Integration Mappings Teams: update write **Request 7** - `box.sign_requests.create` Sign Requests: create write - `box.sign_requests.get` Sign Requests: get read - `box.sign_requests.list` Sign Requests: list read - `box.sign_requests_cancel.create` Sign Requests Cancel: create destructive - `box.sign_requests_resend.create` Sign Requests Resend: create write - `box.sign_templates.get` Sign Templates: get read - `box.sign_templates.list` Sign Templates: list read **Storage policy 7** - `box.storage_policies.get` Storage Policies: get read - `box.storage_policies.list` Storage Policies: list read - `box.storage_policy_assignments.create` Storage Policy Assignments: create write - `box.storage_policy_assignments.delete` Storage Policy Assignments: delete destructive - `box.storage_policy_assignments.get` Storage Policy Assignments: get read - `box.storage_policy_assignments.list` Storage Policy Assignments: list read - `box.storage_policy_assignments.update` Storage Policy Assignments: update write **Terms 7** - `box.terms_of_service_user_statuses.create` Terms Of Service User Statuses: create write - `box.terms_of_service_user_statuses.list` Terms Of Service User Statuses: list read - `box.terms_of_service_user_statuses.update` Terms Of Service User Statuses: update write - `box.terms_of_services.create` Terms Of Services: create write - `box.terms_of_services.get` Terms Of Services: get read - `box.terms_of_services.list` Terms Of Services: list read - `box.terms_of_services.update` Terms Of Services: update write **Webhook 5** - `box.webhooks.create` Webhooks: create write - `box.webhooks.delete` Webhooks: delete destructive - `box.webhooks.get` Webhooks: get read - `box.webhooks.list` Webhooks: list read - `box.webhooks.update` Webhooks: update write **Comment 4** - `box.comments.create` Comments: create write - `box.comments.delete` Comments: delete destructive - `box.comments.get` Comments: get read - `box.comments.update` Comments: update write **Collection 3** - `box.collections.get` Collections: get read - `box.collections.list` Collections: list read - `box.collections_items.list` Collections Items: list read **Workflow 2** - `box.workflows.list` Workflows: list read - `box.workflows_start.create` Workflows Start: create write **Device 2** - `box.device_pinners.delete` Device Pinners: delete destructive - `box.device_pinners.get` Device Pinners: get read **Invite 2** - `box.invites.create` Invites: create write - `box.invites.get` Invites: get read **Zip 2** - `box.zip_downloads.create` Zip Downloads: create write - `box.zip_downloads_status.get` Zip Downloads Status: get read **Enterprise 1** - `box.enterprises_device_pinners.list` Enterprises Device Pinners: list read **Recent 1** - `box.recent_items.list` Recent Items: list read **Search 1** - `box.search.list` Search: list read **Event 1** - `box.events.list` Events: list read **Skill 1** - `box.skill_invocations.update` Skill Invocations: update write Questions ## The Box MCP server, answered. **Is there a Box MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 283 Box actions across file, metadata, folder and shield, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Box. **Does Box have its own MCP server?** Box runs a remote MCP server at mcp.box.com, signed in with OAuth once a Box admin turns MCP on. (Box's documentation, checked 22 October 2026.) Use Box's server when one person wants to work in Box from their own AI client. Use actionlake when you also want Box behind the same endpoint as your other systems: a key per agent with allowed actions and a spending cap, a named person's approval before destructive actions, a sealed record of every call, and one ask across Box and another system. **What do I need to connect Box?** Your own Box OAuth app, registered with Box (its client id and client secret), and the access and refresh tokens from one admin sign-in. actionlake has no Box app of its own, so this is not a one-step consent. actionlake renews the access token as it expires. The free call account { op: "connections.requirements", service: "box" } lists exactly what to paste. **Can an AI agent delete or change things in Box?** Only if its key allows it, and only with an explicit confirmation. 48 Box actions are destructive, including files: delete, users: delete and folders: delete. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Box API limit?** actionlake paces every call to the limits in the Box service file: 1,000 calls a minute, at most 8 at a time per connection. Repeated reads are answered from cache (129 Box actions can be), which never reaches Box. **What does a Box action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (283 Box actions page). Cache hits, searches, dry runs and calls Box refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Box API does it cover?** The Box API 2.0 at api.box.com/2.0. It is built from Box's documentation as read on 19 September 2026. 283 actions in 29 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Box data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to an hour, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Box credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Box Shares the most action names with - [DocuSign 54](https://actionlake.com/connectors/docusign) - [Confluence 52](https://actionlake.com/connectors/confluence) - [Dropbox 49](https://actionlake.com/connectors/dropbox) - [Microsoft SharePoint 41](https://actionlake.com/connectors/microsoft-sharepoint) - [Zoho WorkDrive 32](https://actionlake.com/connectors/zoho-workdrive) - [Microsoft OneDrive 26](https://actionlake.com/connectors/microsoft-onedrive) Joins with, on shared entities - [Adobe Frame.io (V4) 5](https://actionlake.com/connectors/adobe-frame-io-v4) - [Canvas LMS 4](https://actionlake.com/connectors/canvas-lms) - [Lark Suite 4](https://actionlake.com/connectors/lark-suite) - [Mitti 4](https://actionlake.com/connectors/mitti) - [Bynder 4](https://actionlake.com/connectors/bynder) - [Slack 3](https://actionlake.com/connectors/slack) Browse - [All Files & documents connectors](https://actionlake.com/connectors/category/files-and-documents) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Box; the name is the vendor's own. Counts are from the Box service file, version 1.0.0. ## Give your agent Box today. [Connect Box free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/box More: https://actionlake.com/llms.txt