Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Box (BYOK) — connector documentation

  • MCP endpoint: https://byok-box.connectorbay.com/mcp
  • REST API: POST https://byok-box.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-box.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Box developer token or OAuth access token (developer tokens expire quickly), sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-box.connectorbay.com/health · Tool schemas: https://byok-box.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-box · agent@connectorbay.com

What Box (BYOK) is for

Box (BYOK) lets an AI assistant read your own Box data through the Box API with a key you supply (developer token or OAuth access token (developer tokens expire quickly)). Read-only: 9 tools (get_current_user, list_folder_items, get_folder, search_content, get_file, list_folder_collaborations, list_file_versions, list_file_comments, list_recent_items). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.box.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Box. Box and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which Box account is my token connected to and how much space have I used?"
  • "What is in the root folder of my Box?"
  • "Tell me about the Box folder with id 123456"
  • "Find Box files about the Q3 contract"
  • "Show details of the Box file with id 123456789"
  • "Who has access to my Box folder 123456?"

What it does

  • get_current_user: Show the Box user the token belongs to: id, name, login email, status, language, timezone and storage used and available.
  • list_folder_items: List the files, folders and web links directly inside a Box folder, with size and dates. Page with limit and offset.
  • get_folder: Get one Box folder: name, description, size, owner, parent, status, sharing link and the number of items it holds.
  • search_content: Search Box files, folders and web links by keywords (use quotes for a phrase; AND, OR, NOT in capitals). Can limit to a type, extensions or folders.
  • get_file: Get one Box file's details: name, size, description, dates, owner, parent folder, hash, version number, comment count and sharing link.
  • list_folder_collaborations: List who has access to a Box folder: each collaborator or group, their role, status and invite details.
  • list_file_versions: List the previous versions of a Box file with version number, size, who changed it and when (versions are tracked on some plans only).
  • list_file_comments: List the comments on a Box file with the message, author and time.
  • list_recent_items: List the files and folders you opened, edited or uploaded recently (last 90 days or 1000 items) with the kind of interaction and time.

BYOK key

You bring your own Box developer token or OAuth access token (developer tokens expire quickly) (https://app.box.com/developers/console). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.box.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Box API (api.box.com) with a BYOK key; documentation: https://developer.box.com/reference/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Box. Box and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Box account.

Built for: Worldwide. Languages: English.