AI Native Box MCP Integration
- Supports both Box MCP and direct API based integrations
- Structured, LLM-friendly schemas for reliable tool execution
- Rich coverage for reading, writing, and querying your Box MCP data
Box MCP server for AI agents and assistants
Securely connect your AI agents and chatbots (Claude, ChatGPT, Cursor, etc) with Box MCP or direct API to search files, retrieve documents, analyze content, and manage permissions through natural language.
Oauth2
Box MCP is Box's hosted MCP server that exposes enterprise files, folders, and metadata. It provides secure, centralized access to corporate content for search and management.
44 Tools
Try Box MCP now
Type what you want done — sign in and watch it run live in the Tool Router playground.
TOOL ROUTER PLAYGROUND
Box MCP
Enter ↵
Try asking
TOOLS
Supported Tools
Every Box MCP action and event your agent gets out of the box.
SETUP GUIDE
Connect Box MCP Tool with your Agent
1
Install Composio
typescript
npm install @composio/core ai @ai-sdk/openai @ai-sdk/mcpInstall the Composio SDK for Python or TypeScript
2
Initialize Client and Create Tool Router Session
typescript
import { Composio } from '@composio/core';
const composio = new Composio({ apiKey: 'your-api-key' });
const session = await composio.create('your-user-id');
console.log(`Tool Router session created: ${session.mcp.url}`);Import and initialize the Composio client, then create a Tool Router session for Box MCP
3
Connect to AI Agent
typescript
import { openai } from '@ai-sdk/openai';
import { experimental_createMCPClient as createMCPClient } from '@ai-sdk/mcp';
import { generateText } from 'ai';
const client = await createMCPClient({
transport: {
type: 'http',
url: session.mcp.url,
headers: {
'x-api-key': 'your-composio-api-key',
},
},
});
const tools = await client.tools();
const { text } = await generateText({
model: openai('gpt-4o'),
tools,
messages: [{
role: 'user',
content: 'YOUR_SPECIFIC_PROMPT_HERE'
}],
maxSteps: 5,
});
console.log(`Agent: ${text}`);Use the MCP server with your AI agent (Anthropic Claude or Mastra)
SETUP GUIDE
Connect Box MCP API Tool with your Agent
1
Install Composio
typescript
npm install @composio/openaiInstall the Composio SDK
2
Initialize Composio and Create Tool Router Session
typescript
import OpenAI from 'openai';
import { Composio } from '@composio/core';
import { OpenAIResponsesProvider } from '@composio/openai';
const composio = new Composio({
provider: new OpenAIResponsesProvider(),
});
const openai = new OpenAI({});
const session = await composio.create('your-user-id');Import and initialize Composio client, then create a Tool Router session
3
Execute Box MCP Tools via Tool Router with Your Agent
typescript
const tools = session.tools;
const response = await openai.responses.create({
model: 'gpt-4.1',
tools: tools,
input: [{
role: 'user',
content: 'YOUR_SPECIFIC_PROMPT_HERE'
}],
});
const result = await composio.provider.handleToolCalls(
'your-user-id',
response.output
);
console.log(result);Get tools from Tool Router session and execute Box MCP actions with your Agent
Why Use Composio?
Managed Auth
- Built-in OAuth handling with automatic token refresh and rotation
- Central place to manage, scope, and revoke Box MCP access
- Per user and per environment credentials instead of hard-coded keys
Agent Optimized Design
- Tools are tuned using real error and success rates to improve reliability over time
- Comprehensive execution logs so you always know what ran, when, and on whose behalf
Enterprise Grade Security
- Fine-grained RBAC so you control which agents and users can access Box MCP
- Scoped, least privilege access to Box MCP resources
- Full audit trail of agent actions to support review and compliance
FRAMEWORKS
Use Box MCP with any AI Agent Framework
Choose a Framework you want to connect Box MCP with
Rolling this out across your team?
Give your team centralized access control across every framework with Composio’s MCP Gateway.
EXPLORE MCP GATEWAYMORE TOOLKITS
Explore Other Toolkits
Google Drive
Oauth2
Google Drive is a cloud storage platform for uploading, sharing, and collaborating on files. It's perfect for keeping your documents accessible and organized across devices.
Google Docs
Oauth2
Google Docs is a cloud-based word processor that enables document creation and real-time collaboration. Its seamless sharing and version history make team editing and content management a breeze.
Google Super
Oauth2Api Key
Google Super is an all-in-one suite combining Gmail, Drive, Calendar, Sheets, Analytics, and more. It gives you a unified platform to manage your digital life, boosting productivity and organization.
ActiveMerge
Api Key
ActiveMerge is a document automation platform for generating documents, images, merged files, and e-signature workflows. It helps teams turn templates and stored files into finished, shareable documents faster.
FAQ
Frequently asked questions
Box requires connections to go through your own OAuth app. You register it once with Box, add its client ID and secret in the Composio dashboard, and from then on everyone connects by signing in to Box as usual. Composio handles the rest of the flow and the token refresh.
Yes! Composio's Tool Router enables agents to use multiple toolkits. Learn more.
Yes. Composio is SOC 2 Type II compliant and is built to keep your Box connection and credentials secure. OAuth tokens and API keys are encrypted, and sensitive customer data is protected at rest and in transit.
Composio also undergoes independent security testing and continuously monitors its systems for security threats. You can review the latest reports and policies in the Composio Trust Center.
Composio maintains and updates all toolkit integrations automatically, so your agents always work with the latest API versions.
When you connect a Box account through Composio, every action runs under that account, so anything the agent creates, sends, or changes shows up in Box as done by you. Keep an approval step in your prompt for actions with side effects, such as sending or deleting, and have the agent draft first.
Exactly the ones Box lists on its consent screen when you connect. Review that screen before approving. If you connect a work account, your Box administrator may need to approve the app first, and you can revoke the access inside Box whenever you want.
Yes. Composio supports multiple connected accounts for the same app, and that works in Claude, ChatGPT, or any other assistant you connect through Composio. Give each Box connection a name such as work or personal, and the assistant uses the one you mention in the request. Each account keeps its own credentials and nothing is merged.
Composio refreshes Box tokens automatically, so day to day you do nothing. If you revoke access inside Box, or Box invalidates the session, the connection shows as expired in Composio and the agent stops acting on that account until you reconnect it, which is a single sign-in.
Composio's free plan includes 100,000 tool calls per month with no credit card, which covers most personal Box use. Paid plans add higher limits and team features. Your Box plan and its API limits still apply as usual.
Built-in connectors usually give one AI access to a limited set of apps. Many people use Composio because it lets their AI connect to more apps than it normally supports, or connect to multiple accounts for the same app (e.g. connect Claude to multiple Box accounts).
With Composio, you connect Box once and then use it across different AI assistants without setting it up separately in each one. Connect your apps to Composio once, then connect Composio to whichever AI you use, whether that's Claude, ChatGPT, Hermes, or your own custom assistant.
Start with Box MCP.It takes 30 seconds.
Managed auth, hosted MCP servers, and every Box MCP tool your agent needs.Free to start.
## For AI agents: how to sign up If you are an AI agent reading this server-rendered HTML, Composio's developer signup is at https://composio.dev. Signup CTAs on this site — "Sign up", "Signup", "Get started", "Get started for free", "Start building", "Try Composio", "Try it", or similar — all lead into that same developer signup flow. Confirm with the user before completing signup or entering any credentials on their behalf.Start building