Skip to content

Summary

Box's official remote MCP server at mcp.box.com: governed AI-agent access to enterprise files, folders and Box AI within existing permissions.

Features

  • Hosted remote endpoint at https://mcp.box.com, no self-hosting required
  • Search, folder operations, Box AI and document knowledge tools
  • Operates strictly within the permissions already configured in Box
  • Admin-gated: requires Admin Console enablement and OAuth Integration Credentials
  • Documented support for Claude Code, Cursor, GitHub Copilot, OpenAI AgentKit and more

Installation

Set up this MCP server in your favorite AI agent — copy a ready-made configuration below.

Any MCP-compatible agent

Most agents (Claude, Cursor, Windsurf, VS Code, and more) read a standard mcpServers configuration.

  1. Open your agent's MCP configuration file.
  2. Merge the snippet below into it.
  3. Restart the agent — the "Box MCP Server" tools will be available.
{
  "mcpServers": {
    "box-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://mcp.box.com"
      ]
    }
  }
}

Description

The official Box Model Context Protocol server, a hosted endpoint at https://mcp.box.com that gives AI agents governed access to content stored in Box. You connect a client or agent platform to that URL — for the standard integration you do not run Box's MCP server yourself, and the older self-hosted build is deprecated.

What it exposes

Search across a Box instance, folder operations, Box AI capabilities and document knowledge — enough for an agent to find relevant files, extract insights from several documents at once, and apply metadata without a custom integration being written first. The complete tool index is published as a machine-readable document at https://developer.box.com/llms.txt.

Permissions model

This is the part that makes Box MCP viable in a regulated organisation: the server operates strictly within the permissions already configured in Box. An agent sees what the authenticated user sees, and nothing else, so existing governance keeps applying rather than being reimplemented at the agent layer.

Setup

An administrator must first enable MCP in the Box Admin Console and create Integration Credentials — an OAuth client ID and secret, a redirect URI, and scopes such as Content Actions. Only then can client applications connect. That admin gate is worth planning for: an individual developer cannot switch this on alone.

Client support

Box documents connections from the Anthropic Messages API, Claude Code, Cursor, GitHub Copilot, Groq, LangSmith Agent Builder, Microsoft Foundry Tools and OpenAI AgentKit, plus end-user platforms including ChatGPT, Claude, Copilot Studio and Figma.

Related MCP Servers

MCP: Dropbox MCP

by Dropbox

Dropbox's official remote MCP server — 24 tools to browse, search, read, create, move and share files in a Dropbox account over OAuth.

Box's official remote MCP server — roughly 60 tools over enterprise files, metadata, search, Hubs, Doc Gen and Box AI, inside your existing Box permissions.

MCP: Cloudinary

by Cloudinary

Cloudinary's official MCP server — upload, search, transform, and organise media assets from an AI client.

Browse all MCP servers →