
Box MCP Server (Remote)
OfficialBox's official hosted MCP server for secure, OAuth-gated access to enterprise content in Box.
Add to your client
Copy the config for your MCP client and paste it into its config file.
Add remote URL https://mcp.box.com to your MCP client and complete the OAuth flowPaste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"box-mcp-server-remote": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://mcp.box.com",
"--header",
"Authorization: Bearer <oauth-token>"
]
}
}
}Claude Desktop connects to remote servers through the `mcp-remote` proxy (installed on first run via npx). Restart Claude Desktop after saving.
Before you start
- A Box account (free, Business, or Enterprise) with access to the content you want the agent to use
- A Box OAuth 2.0 app configured in the Box Developer Console (or Admin Console) with a Client ID, Client Secret, and redirect URI — used to authorize the MCP connection
- An MCP client that supports remote MCP servers with OAuth (e.g. Claude, Copilot Studio, Mistral Le Chat), or the mcp-remote proxy (Node.js 18+) for clients without native remote/OAuth support
About Box MCP Server (Remote)
Box MCP Server (Remote) is Box's official, hosted MCP server that lets AI agents securely read, search, manage, and reason over enterprise content stored in Box. It runs in Box's own infrastructure at https://mcp.box.com, so content stays inside Box's security and governance boundary while agents call it over the Model Context Protocol.
Beyond basic file and folder operations, it exposes Box AI capabilities — asking questions across one or many files (and Hubs), and structured/freeform metadata extraction — plus metadata templates, collaboration, shared links, Box Hubs, and Doc Gen tooling. This makes it suitable for agentic document workflows like contract Q&A, invoice field extraction, and content organization.
Access is gated by OAuth 2.0: the server is an OAuth-protected resource backed by Box's authorization server, and every call runs as the authenticated user, so the agent inherits that user's existing Box permissions. The server reached general availability with prebuilt connectors for Anthropic's Claude, Microsoft Copilot Studio, and Mistral's Le Chat.
Tools & capabilities (12)
who_am_iReturn the authenticated Box user (verify identity and connection).
search_files_keywordFull-text keyword search across files the user can access.
search_folders_by_nameFind folders by name.
list_folder_content_by_folder_idList the contents of a folder by its ID.
get_file_contentRetrieve the text/content of a file for use as context.
ai_qa_single_fileAsk Box AI a question about a single file.
ai_qa_multi_fileAsk Box AI a question across multiple files.
ai_qa_hubAsk Box AI a question grounded in a Box Hub.
ai_extract_freeformExtract information from documents using a freeform prompt.
ai_extract_structuredExtract structured fields/metadata from documents.
upload_fileUpload a new file to Box.
set_file_metadataApply metadata (e.g. from a template) to a file.
When to use it
- Use it when you want an AI agent to answer questions grounded in your actual Box documents (contracts, reports, policies) instead of uploaded copies
- Use it when extracting structured fields (invoice totals, dates, parties) from documents into metadata templates at scale
- Use it when an agent needs to search, organize, move, or share Box content as part of a workflow
- Use it when enterprise governance requires content to stay inside Box's security boundary rather than being copied to a third party
- Use it when building agents in Claude, Copilot Studio, or Mistral Le Chat that need permission-aware access to company content
- Use it when generating documents from templates via Box Doc Gen or querying across a curated Box Hub
Quick setup
- 1Create or identify an OAuth 2.0 app in the Box Developer Console and note the Client ID, Client Secret, and redirect URI
- 2In your MCP client, add a remote MCP server pointing at https://mcp.box.com (or use the platform's prebuilt Box connector)
- 3For clients without native remote/OAuth support, proxy with `npx mcp-remote https://mcp.box.com`
- 4Trigger the OAuth flow — a Box login/consent screen opens in the browser — and approve access
- 5Restart the client and confirm Box tools (e.g. who_am_i) are listed
- 6Call who_am_i to verify the connection runs as the expected Box user
Security notes
Access is brokered through Box's OAuth so the agent only sees content the authorizing user can access, but that can still be a large corpus of enterprise files; scope the connecting app's permissions carefully. Tokens granted via OAuth should be treated as sensitive.
Box MCP Server (Remote) FAQ
Is the Box remote MCP server official?
Yes. It is built and hosted by Box at mcp.box.com and published under the box organization on GitHub.
How does authentication work?
Via OAuth 2.0. The server is an OAuth-protected resource backed by Box's authorization server; you authorize through a Box app's Client ID/Secret and the agent acts as the authenticated user with that user's permissions.
Does the AI ever see content I can't access?
No. Every call runs as the authenticated user, so the agent only sees content that user is already permitted to access in Box.
Which MCP clients are supported?
Any client that supports remote MCP servers with OAuth; Box ships prebuilt connectors for Anthropic Claude, Microsoft Copilot Studio, and Mistral Le Chat, and other clients can connect via mcp-remote.
Do I need a paid Box plan?
You need a Box account with access to the content; some Box AI features (ai_qa_*, ai_extract_*) depend on Box AI being enabled for your account/plan.
Alternatives to Box MCP Server (Remote)
Official MCP reference server for secure local filesystem read/write within allowed directories.
Official MCP server for reading, searching, and manipulating a local Git repository's files and history.
Official AWS Labs MCP server to manage and query S3 Tables (table buckets, namespaces, tables).
Compare Box MCP Server (Remote) with: