Box API
Box publishes a mature REST API with 150 plus endpoints spanning files, users, collaborations, metadata, Box Sign, and Box AI. Access is fully self-serve at developer.box.com with OAuth 2.0, JWT, and client credentials auth. Official SDKs cover six languages and rate limits are published.
Frequently asked questions
Box scores A on Supergood's API Report Card. Box publishes a mature REST API with 150 plus endpoints spanning files, users, collaborations, metadata, Box Sign, and Box AI. Access is fully self-serve at developer.box.com with OAuth 2.0, JWT, and client credentials auth. Official SDKs cover six languages and rate limits are published.
Box has a workable official integration path. Most engineering teams can build against it directly. Open API: self-serve, documented, with SDKs
Box, Inc. is an enterprise content cloud headquartered in Redwood City, California, founded in 2005 by Aaron Levie and Dylan Smith and publicly traded on the NYSE under the ticker BOX.
Primary vertical: misc (horizontal enterprise content cloud sold across every regulated and non-regulated industry). A Fortune 1000 financial services firm uses Box as the system of record for client documents, deal rooms, compliance evidence, and internal collaboration, with Box Shield enforcing classification-driven access controls, Box Governance enforcing retention and legal hold, Box KeySafe holding customer-managed encryption keys, and Box Sign handling internal and external e-signature flows.
High. ~62,000 paid business customers and 59% of the Fortune 500 put Box firmly in the top tier of enterprise content platforms alongside Microsoft SharePoint/OneDrive and Google Drive.
Box sits on the content-critical path for the enterprises that adopt it, by name, it is the system of record for client documents and deal evidence in Financial Services, controlled SOPs and regulatory submissions in Life Sciences, case files and citizen records in Government, contracts and engagement files in Legal and Professional Services, and high-value media assets in M&E.
Founded in 2005, IPO'd in 2015 on the NYSE under ticker BOX.
Supergood's grades measure one thing: can a customer's engineering team get their own data out programmatically? Supergood checks six things (whether a real API exists, how access is gated, data coverage, auth quality, docs and developer experience, and stability) and rolls them into a letter grade. Supergood re-verifies grades, and they only move on evidence.
Box scores GOOD on MCP availability. Box operates an official hosted MCP server at mcp.box.com with a supporting repo under the Box GitHub org and setup guides in the Box developer docs. It connects AI agents to Box content, search, and Box AI features.
Yes. Box publishes an official MCP server, so MCP clients like Claude, Cursor, and Codex can connect to it directly. Setup instructions are in the vendor's documentation.