Box
Generally AvailableGive AI agents governed access to search, retrieve and manage enterprise content in Box through a secure remote MCP server.
- Content Management
- File Storage
- Authentication
- OAuth 2.0
- Hosting
- Vendor-hosted endpoint
- Required scopes
- 1
- Data actions
- Read and write
How it works
Every agent request passes through Ferentin policy before it reaches Box.
Box Remote MCP Server is a standardized bridge that enables AI agents to securely access and interact with Box content through the Model Context Protocol using OAuth authorization.
- AI agentAsks for something
- Ferentin policies
- PII detection
- PII masking
- Audit logging
- Content moderation
- Box MCP serverAuthorized connection
- Governed resultMasked, logged, returned
What agents can do
29 tools · you choose which ones agents may callSearch and browse what exists, without opening the content itself.
- List Folder Content
- List Metadata Templates
- List Tasks
- Search Files by Keyword
- Search Files by Metadata
- Search Folders by Name
Common use cases
Enterprise search
Let agents find the right document across approved Box folders using keyword and metadata search, without opening up the whole content estate.
Governed retrieval
Detect and mask sensitive content in Box files before it reaches the model, with every retrieval written to the audit log.
Controlled actions
Allow uploads, moves and metadata changes only where Ferentin policy permits, so agents can act without unsupervised write access.
Permissions requested
The OAuth 2.0 scopes Box asks you to approve when you connect.
| Scope | Access | What it allows |
|---|---|---|
| root_readwrite | Elevated | Read, create and modify content across the enterprise Box account. |
Before you connect
- Box OAuth2 permissions are configured on the Box application, not via OAuth scopes
- Box AI tools require a Box AI entitlement on your account
- Hub and Doc Gen tools require those features to be enabled
- Developer tokens expire after 60 minutes — use Custom App tokens for production
1 more technical note
- Available tools depend on Box account tier and user permissions
See Box in action
Box MCP Server DemoStep-by-step setup
Full setup guide
About Box
Box is a cloud content management and file sharing platform designed primarily for enterprises, offering secure storage, collaboration, and workflow capabilities.
Frequently asked about Box
- What can AI agents do with Box through Ferentin?
- Ferentin exposes 29 Box MCP tools to your AI agents, grouped as Discover (6 tools), Access (7 tools), Manage (13 tools) and Collaborate (3 tools). Every call is checked against your Ferentin policies before it reaches Box.
- How is Box access secured?
- Requests through the Box integration are covered by PII detection, PII masking, audit logging, content moderation, encryption at rest and encryption in transit. These controls are applied by Ferentin, not by Box, so they hold across every connected agent.
- What permissions does the Box integration require?
- The Box integration requests 1 OAuth 2.0 scope: root_readwrite (elevated access) — Read, create and modify content across the enterprise Box account.
- How do I connect Box to Ferentin?
- Open the Ferentin admin console, add Box as a new connection and authenticate with OAuth 2.0. You then choose which permissions and which tools your agents may use, and the connection goes live for everyone covered by your policies.
- Is the Box integration generally available?
- Yes. The Box integration is generally available on Ferentin, including the free tier.
