Box Platform API MCP Server
The Box Platform API, provided by Box (box.
Quick Start Summary
The Box Platform API MCP server is a Model Context Protocol bridge that connects AI assistants — including Claude Desktop, Cursor, Windsurf, and VS Code Copilot — to the Box Platform API API through natural language. It exposes 10 API endpoints as callable tools, such as Authorize user, List allowed collaboration domains, Add domain to list of allowed collaboration domains, and more. No authentication is required — setup takes approximately 30 seconds. The server uses STDIO transport and can be installed by running npx -y @mcp/box-com. This integration is sourced from the auto Box Platform API OpenAPI specification (v2.0.0) and has a quality score of 46/99 (fair documentation coverage).
Server Details
- Category
- Developer Tools
- Authentication
- None
- Endpoints
- 10 operations
- Transport
- STDIO
- Spec Version
- v2.0.0
- Install Command
npx -y @mcp/box-com
Environment Variables
BOX_PLATFORM_API_API_KEYExample: your_box_platform_api_api_key
Top Endpoints
/authorizeAuthorize user
/collaboration_whitelist_entriesList allowed collaboration domains
/collaboration_whitelist_entriesAdd domain to list of allowed collaboration domains
/collaboration_whitelist_entries/{collaboration_whitelist_entry_id}Get allowed collaboration domain
/collaboration_whitelist_entries/{collaboration_whitelist_entry_id}Remove domain from list of allowed collaboration domains
One-Click Install
Copy the snippet for your MCP client and paste it in — zero editing required.
Claude Desktop
Add to claude_desktop_config.json
{
"mcpServers": {
"box-com": {
"command": "npx",
"args": [
"-y",
"@mcp/box-com"
],
"env": {
"BOX_PLATFORM_API_API_KEY": "your_box_platform_api_api_key"
}
}
}
}Cursor
Settings → MCP Servers → Add
{
"mcpServers": {
"box-com": {
"url": "https://mcpbridge.org/config/box-com.json"
}
}
}Saves as .cursor/mcp.json in the download. Move it to your project root.
VS Code
Use with MCP extension
{
"mcpServers": {
"box-com": {
"url": "https://mcpbridge.org/config/box-com.json"
}
}
}Endpoints Explorer
Search and browse the 10 operations supported by this server.
Multi-Language Code Examples
Executable code snippets for calling Box Platform API endpoints in curl, TypeScript, or Python.
curl -X GET "https://api.apis.guru/v2/specs/box.com/2.0.0/authorize" \ -H "Content-Type: application/json" \ # No auth required
Manual Configuration
Directly add this block to your JSON config file, or use the hosted config registry URL.
{
"mcpServers": {
"box-com": {
"command": "npx",
"args": ["-y","@mcp/box-com"],
"env": {
"BOX_PLATFORM_API_API_KEY": "your_box_platform_api_api_key"
}
}
}
}Authentication Details
No authentication required. This MCP server runs out-of-the-box.
Documentation Links
Error Handling & HTTP Status Code Matrix
Common status codes, error causes, and resolution steps when invoking Box Platform API endpoints.
400 Bad RequestCause: Malformed payload parameters or missing required fields.
Resolution: Verify request schema in Endpoints tab before calling tool.
401 UnauthorizedCause: Missing or invalid API key credentials.
Resolution: Set environment variable in MCP client config under env object.
403 ForbiddenCause: Insufficient scope permissions for requested resource.
Resolution: Verify key permissions in developer dashboard.
404 Not FoundCause: Resource URL path or requested entity ID does not exist.
Resolution: Check path variables and parameters.
429 Rate Limit ExceededCause: API rate limit quota exceeded.
Resolution: Implement exponential backoff retry in tool call.
500 Internal ErrorCause: Upstream server runtime fault.
Resolution: Inspect STDIO stderr output for log trace.
Quality Score
Checked against our protocol-compliance rules.
Specification Version: v2.0.0
Page compiled on: June 13, 2026
Own this API?
Verify ownership of this listing to control the description, configuration details, and documentation links. Choose between free manual verification or instant premium placement.
Option 1: Free Verification
Slow manual review. Requires creating a GitHub issue with verified documentation or domain verification.
- • Verified badge on page
- • Standard search sorting
- • 2-3 business days review
Option 2: Featured Upgrade($9/mo)
Instant verification plus premium styling, featured badges, and directory placement boost.
- • ★ Featured star & amber highlight border
- • Top of directory search placement
- • Instant activation via claim token
📖 Detailed MCP Integration Guide
A technical breakdown of capabilities, agent workflows, and security/configuration best practices.
GET /collaborations endpoint to analyze the permission landscape for a sensitive project folder, or it can generate the necessary configuration to programmatically whitelist a new partner domain using POST /collaboration_whitelist_entries. This drastically accelerates development and operational workflows, reduces the cognitive load on developers, and minimizes the risk of manual errors in scripting repetitive tasks, effectively embedding the Box Platform's capabilities directly into the developer's AI-augmented workflow.GET /collaboration_whitelist_entries, and provide a concise report or even take corrective action by revoking specific collaborations if instructed.GET /authorize step (which is part of the OAuth 2.0 flow initiation), all subsequent data operations require a valid OAuth 2.0 access token. The principle of least privilege is paramount; developers must configure their applications with the narrowest OAuth scopes necessary for their specific use case, avoiding broad read_write_all scopes when read_only or scoped write access suffices. All tokens must be stored securely, and refresh tokens should be handled with care. For enterprise deployments, administrators should enable Box's IP whitelisting for API access and mandate two-factor authentication for associated accounts. Furthermore, developers must implement rigorous error handling and leverage Box's comprehensive webhook system for event-driven architectures, rather than relying solely on polling. Finally, all API interactions should be logged for audit trails, especially when managing compliance-related features like legal holds or retention policies, to ensure accountability and support for regulatory requirements.Similar APIs
Other APIs in the Developer Tools category.
GitHub API
Access GitHub repositories, issues, pull requests, and more. Integrate GitHub workflows directly into your AI agent.
OAuth2GitLab API
Manage repositories, CI/CD pipelines, and merge requests through your AI agent.
OAuth2Asana
This API serves as the programmatic backbone for the Asana work management platform, provided by Asana, Inc. It enables developers to interact programmatically with one of the world's leading enterprise collaboration and productivity suites. The core capabilities of this interface center around the CRUD (Create, Read, Update, Delete) operations for fundamental Asana objects. Specifically, the provided endpoints grant control over project attachments—allowing for the uploading, retrieval, and management of files associated with tasks and projects—and custom fields, which are pivotal for creating structured, data-rich workflows. These custom fields allow organizations to define unique data types (like dropdown menus, text fields, or dates) to standardize information capture across projects, moving beyond basic task lists to true operational tracking. Typical use cases span from enterprise project management offices (PMOs) needing to programmatically generate status reports and audit attachments, to development teams automating the creation of bug-tracking projects with predefined custom fields for severity and status, to operational leaders building dashboards that aggregate and analyze custom field data for resource allocation insights.
clickup20
The clickup20 Polls API is a lightweight, focused web service designed to facilitate the creation and management of simple polling mechanisms. Provided by ClickUp, a platform known for its project management and productivity tools, this API serves as a specialized component for gathering quick, quantitative feedback. Its core capabilities are straightforward: it allows consumers to programmatically retrieve a list of existing poll questions and to submit new poll questions for consideration. Typical use cases span both enterprise and consumer domains. In an enterprise setting, a development team might integrate this API to run quick polls during sprint retrospectives, gauge internal sentiment on a new tool, or gather binary feedback on proposed technical designs within a project management workflow. For consumer applications, it could power simple feedback widgets within a mobile app or website, enabling users to vote on feature priorities or content topics. The API’s simplicity, requiring no authentication, makes it highly accessible for rapid prototyping and integration into internal tools where complex credential management is unnecessary.
Related MCP Server Integrations
GitHub API MCP Setup
Access GitHub repositories, issues, pull requests, and more. Integrate GitHub workflows directly into your AI agent.
GitLab API MCP Setup
Manage repositories, CI/CD pipelines, and merge requests through your AI agent.
Asana MCP Setup
This API serves as the programmatic backbone for the Asana work management platform, provided by Asana, Inc. It enables developers to interact programmatically with one of the world's leading enterprise collaboration and productivity suites. The core capabilities of this interface center around the CRUD (Create, Read, Update, Delete) operations for fundamental Asana objects. Specifically, the provided endpoints grant control over project attachments—allowing for the uploading, retrieval, and management of files associated with tasks and projects—and custom fields, which are pivotal for creating structured, data-rich workflows. These custom fields allow organizations to define unique data types (like dropdown menus, text fields, or dates) to standardize information capture across projects, moving beyond basic task lists to true operational tracking. Typical use cases span from enterprise project management offices (PMOs) needing to programmatically generate status reports and audit attachments, to development teams automating the creation of bug-tracking projects with predefined custom fields for severity and status, to operational leaders building dashboards that aggregate and analyze custom field data for resource allocation insights.
clickup20 MCP Setup
The clickup20 Polls API is a lightweight, focused web service designed to facilitate the creation and management of simple polling mechanisms. Provided by ClickUp, a platform known for its project management and productivity tools, this API serves as a specialized component for gathering quick, quantitative feedback. Its core capabilities are straightforward: it allows consumers to programmatically retrieve a list of existing poll questions and to submit new poll questions for consideration. Typical use cases span both enterprise and consumer domains. In an enterprise setting, a development team might integrate this API to run quick polls during sprint retrospectives, gauge internal sentiment on a new tool, or gather binary feedback on proposed technical designs within a project management workflow. For consumer applications, it could power simple feedback widgets within a mobile app or website, enabling users to vote on feature priorities or content topics. The API’s simplicity, requiring no authentication, makes it highly accessible for rapid prototyping and integration into internal tools where complex credential management is unnecessary.
The Plaid API MCP Setup
The Plaid API, provided by the financial technology company Plaid, serves as a critical infrastructure layer that enables applications to connect with users' bank accounts and financial data in a standardized, secure manner. Its core capabilities center on authentication, identity verification, and data retrieval from over 12,000 financial institutions. The specific endpoints listed, such as `accounts/balance/get` and `accounts/get`, allow applications to fetch detailed account information and real-time balance data. The `asset_report/*` suite of endpoints is particularly powerful for enterprise use cases, enabling the creation of comprehensive, auditable reports of a user's financial assets—a process essential for automated mortgage underwriting, lending decisions, wealth management onboarding, and financial planning. For consumers, this API powers the backend of popular personal finance apps, enabling features like account aggregation, spending analysis, and net worth tracking.