1. Conduid
  2. Developer Tools
  3. box-server
MCP server · Developer Tools

box-server

MCP Server for interacting with Box

Unclaimed devtools
39Low

Scored 5 months ago · breakdown

About box-server

box-server is an MCP server published by git+hmk in the Developer Tools category: mCP Server for interacting with Box.

Install

Install
npx box-mcp-server
Claude Code
claude mcp add box-mcp-server-githmk -- npx -y box-mcp-server
npx
npx -y box-mcp-server

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about box-server

Powered by Claude · Grounded in docs

I know everything about box-server. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

4 checks have not been run yet.

README

box-mcp-server

CI

Usage

You will need:

  • BOX_USER_ID

and one of the following:

  • BOX_JWT_BASE64 (recommended)
  • BOX_JWT_CONFIG_PATH
  • BOX_JWT

Auth

JSON Web Token (JWT) Authorization (recommended)

How to get a JWT

Using a JWT Config allows persistent connection to Box.

You will need a paid Box enterprise account, or you can sign up for a free developer account (make sure you are signed out of Box before clicking that link).

Visit the Box Developer Console and create a new application. Make sure the authorization type is JSON Web Token.

Go to Configuration > Add and Manage Public Keys and Generate a Public/Private Keypair. If you have not already, Box prompt you to set up 2 factor authentication and Authorize the application as an administrator in your box account. You will need to:

  1. give the application App + Enterprise Access, and
  2. enable the make API calls using the as-user header option

via the Box Application's Configuration page. Make sure to reauthorize the application if you are modifying these settings.

Base64 encoding JWT

To encode your JWT in Base64, you can use the following command in your terminal:

cat /path/to/your/box-jwt-config.json | base64

Replace /path/to/your/box-jwt-config.json with the actual path to your JWT configuration file. This will output the Base64 encoded JWT which you can then use in your environment variables.

Claude Desktop Configuration

{
  "mcpServers": {
    "box": {
      "command": "npx",
      "args": ["box-mcp-server"],
      "env": {
        "BOX_JWT_BASE64": "YOUR_BASE64_ENCODED_JWT",
        "BOX_USER_ID": "123456"
      }
    }
  }
}

Developer Token Authorization (easiest)

Using a developer token is the easiest way to integrate with Box, but will only last 60 minutes.

To get started, set the BOX_DEV_TOKEN to a Box Developer Token.

Begin by visiting the Box Developer Console and create a new application. The authorization type does not currently matter, as all support Box Developer Token.

Once your application is created, navigate to its configuration setings and click Generate Developer Token.

Claude Desktop Configuration

{
  "mcpServers": {
    "box": {
      "command": "npx",
      "args": ["box-mcp-server"],
      "env": {
        "BOX_DEV_TOKEN": "YOUR_DEV_TOKEN_GOES_HERE"
      }
    }
  }
}

Capabilities

  1. Searching files
  2. Reading files
  • PDF
  • Word
  • Others

Development

Prerequisites

Before you begin, ensure you have the following installed:

  • Node.js (recommended v22 or higher)
  • npm
  • git
  • dotenv

Setting up Development Environment

To set up the development environment, follow these steps:

  1. Fork the repository

    • Click the "Fork" button in the top-right corner of this repository
    • This creates your own copy of the repository under your Github acocunt
  2. Clone Your Fork:

    git clone https://github.com/YOUR_USERNAME/box-mcp-server.git
    cd box-mcp-server
    
  3. Add Upstream Remote

    git remote add upstream https://github.com/hmk/box-mcp-server.git
    
  4. Copy the dotenv file

    cp .env.template .env
    
  5. Install dependencies:

    npm install
    
  6. Run watch to keep index.js updated:

    npm run watch
    
  7. Start the model context protocol development server:

    dotenv npx @modelcontextprotocol/inspector node PATH_TO_YOUR_CLONED_REPO/dist/index.js
    
  8. If the development server did not load the environment variable correctly, set the BOX_DEV_TOKEN on the left-hand side of the mcp inspector.

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About box-server

How do I install box-server?

Run npx box-mcp-server, then add the server to your MCP client's configuration.

Is box-server safe to use with an AI agent?

Its trust score is 39 out of 100 (low). It passes 1 of the 2 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is box-server still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.