Box MCP Server
Box MCP server
Connect the Box MCP server
Connect the Box MCP server to Atomicwork to automate file management and document workflows.
Integrate the Box MCP (Model Context Protocol) server with Atomicwork to give your AI Coworkers and automated workflows access to a comprehensive suite of cloud content management and collaboration tools. By connecting this server, your AI Workforce can securely interact with your Box environment to manage files, automate document workflows, and execute administrative tasks directly within your workspace.
Understand the prerequisites
Before you begin the setup, ensure that you have the following access:
- Atomicwork admin access: You need organization admin access in Atomicwork to configure integrations in the MCP Store.
- Box admin access: You need administrator access in Box to authorize the OAuth connection.
Please note that Box is unique compared to other integrations. You can control tool access in two places: within Atomicwork and directly inside your Box account by navigating to Box account → Integrations → Box MCP Server.
Connect the Box MCP server
The Box MCP integration uses a secure OAuth flow to establish a connection. Follow these steps to set up the integration:
- Navigate to Settings > MCP Store > Box in your Atomicwork account.
- Click on the Box tile and select Connect.
- Complete the OAuth authorization flow in the window that appears by logging in with your Box administrator credentials and authorizing the connection.
Once the setup is complete, Atomicwork displays the list of all available Box tools on your screen. The available tools list depends on your software platform configuration and can be updated as needed.
| Category | Scope | Usecase |
|---|---|---|
| Content actions | Read all files and folders | View, download, and read metadata for files/folders the token's user can access. Underlying scope: root_readonly. |
| Write all files and folders | Create, upload, edit, move, rename, copy, delete, and share files/folders. Read is auto-required because most write operations also read. Underlying scope: root_readwrite. | |
| Manage signature requests | Create and manage Box Sign signature requests via the Box Sign endpoints. | |
| Manage AI | Call the Box AI endpoints (ask/Q&A, text generation, and extract against your content). | |
| Administrative actions | Manage users | Create, update, and delete managed users — change primary login, reset passwords, change roles. The "manage users" scope in the Developer Console maps to two OAuth scopes (managed users + app users). Requires an Admin/Co-Admin token for managed users; JWT apps need App + Enterprise access. |
| Manage groups | Create, update, and delete groups, as well as manage group membership. | |
| Manage retention policies | Create and manage retention policies. This requires the Box Governance add-on and an admin token. | |
| Manage enterprise properties | View the enterprise event stream, view and edit the enterprise's attributes and reports, and edit and delete device pins. | |
| Developer Actions | Manage webhooks | Create, update, list, and delete V2 webhooks for your app. |
| Enable integrations | Lets the app use Box's integration endpoints / integration mappings (e.g., connecting Box content to third-party integrations). | |
| Manage Box Relay | Use the Box Relay endpoints to start and manage automated workflows. Relay is a separate product capability and may require the corresponding add-on/license. | |
Configure AI Coworker and builder access
After completing the setup, you can control which tools your AI Coworkers can use. This allows you to practice the principle of least privilege by granting only the necessary capabilities to each agent. To configure tool access, follow these steps:
- Go to AI Workforce > AI Coworkers > Tools in your Atomicwork dashboard.
- Select the specific AI Coworker you want to configure. If you need to create a new agent first, see our guide on setting up an AI Coworker.
- Grant granular or complete access to the available Box tools based on your operational requirements.
In addition to standard AI Coworkers, the Admin Assist workflow builder and the coding agent automatically have access to the Box MCP server while building workflows and writing custom code scripts respectively.
Explore broad tool categories
Once connected, the Box MCP server exposes a wide range of capabilities. These tools are grouped into four main categories:
- Content & Collaboration — the core file/folder/sharing surface (the largest bucket)
- AI, Metadata & Skills — Box AI, metadata templates/taxonomies, skill cards
- Administration & Platform — users, groups, enterprise settings, integrations, webhooks, workflows, auth
- Security, Governance & Compliance — retention, legal holds, Shield barriers, classifications, domain restrictions
Next steps
Now that you have connected Box, you can explore other file-storage integrations. See our guide on connecting the Google Drive MCP server to compare features, or learn how to connect the DocuSign MCP server for advanced e-signature workflows.