# Box — how to use (mcp.ai)

Box is a cloud content management platform for secure file storage, sharing, collaboration, and governance.

## Option A — via MCP (recommended)
Remote MCP endpoint (HTTP, streamable): `https://api.mcp.ai/p_box?ms=1781684340000`
Add it as a custom/remote MCP connector in your client (Claude, Cursor, VS Code…), then authenticate when prompted. Once connected, ask the agent to use the server's tools (e.g. `box_add_classification_to_file`).

## Option B — via direct REST API
Base URL: `https://api.mcp.ai/api/box`
Auth: `Authorization: Bearer sk_live_…` — create a workspace API key at https://mcp.ai/settings/api-keys
Discover endpoints: `GET https://api.mcp.ai/api/box/_endpoints`

### Endpoints
- `POST https://api.mcp.ai/api/box/add/classification/to/file` — Adds a classification to a file by specifying the label of the classification to add. this api can also be called by including the enterprise id in the url explicitly, for example `/files/:id//enterpr
  - body: { file_id: string, Box__Security__Classification__Key?: string }
- `POST https://api.mcp.ai/api/box/add/classification/to/folder` — Adds a classification to a folder by specifying the label of the classification to add. this api can also be called by including the enterprise id in the url explicitly, for example `/folders/:id/ente
  - body: { folder_id: string, Box__Security__Classification__Key?: string }
- `POST https://api.mcp.ai/api/box/add/domain/to/list/of/allowed/collaboration/domains` — Creates a new entry in the list of allowed domains to allow collaboration for.
  - body: { domain: string, direction: string }
- `POST https://api.mcp.ai/api/box/add/initial/classifications` — When an enterprise does not yet have any classifications, this api call initializes the classification template with an initial set of classifications. if an enterprise already has a classification, t
  - body: { scope: string, fields: object[], hidden?: boolean, displayName: string, templateKey: string, copyInstanceOnItemCopy?: boolean }
- `POST https://api.mcp.ai/api/box/add/or/update/user/avatar` — Adds or updates a user avatar.
  - body: { pic?: object, user_id: string }
- `POST https://api.mcp.ai/api/box/add/shared/link/to/file` — Adds a shared link to a file.
  - body: { fields: string, file_id: string, shared__link__access?: string, shared__link__password?: string, shared__link__unshared__at?: string, shared__link__vanity__name?: string, shared__link__permissions__can__edit?: boolean, shared__link__permissions__can__preview?: boolean, shared__link__permissions__can__download?: boolean }
- `POST https://api.mcp.ai/api/box/add/shared/link/to/folder` — Adds a shared link to a folder.
  - body: { fields: string, folder_id: string, shared__link__access?: string, shared__link__password?: string, shared__link__unshared__at?: string, shared__link__vanity__name?: string, shared__link__permissions__can__edit?: boolean, shared__link__permissions__can__preview?: boolean, shared__link__permissions__can__download?: boolean }
- `POST https://api.mcp.ai/api/box/add/shared/link/to/web/link` — Adds a shared link to a web link.
  - body: { fields: string, web_link_id: string, shared__link__access?: string, shared__link__password?: string, shared__link__unshared__at?: string, shared__link__vanity__name?: string, shared__link__permissions__can__edit?: boolean, shared__link__permissions__can__preview?: boolean, shared__link__permissions__can__download?: boolean }
- `POST https://api.mcp.ai/api/box/add/user/to/group` — Creates a group membership. only users with admin-level permissions will be able to use this api.
  - body: { role?: string, fields?: string[], user__id?: string, group__id?: string, configurable_permissions?: object }
- `POST https://api.mcp.ai/api/box/apply/watermark/to/file` — Applies or update a watermark on a file.
  - body: { file_id: string, watermark__imprint?: string }
- `POST https://api.mcp.ai/api/box/apply/watermark/to/folder` — Applies or update a watermark on a folder.
  - body: { folder_id: string, watermark__imprint?: string }
- `POST https://api.mcp.ai/api/box/ask/question` — Sends an ai request to supported llms and returns an answer specifically focused on the user's question given the provided context.
  - body: { mode: string, items: object[], prompt: string, dialogue_history?: object[], include_citations?: boolean }
- `POST https://api.mcp.ai/api/box/assign/legal/hold/policy` — Assign a legal hold to a file, file version, folder, or user.
  - body: { policy_id: string, assign__to__id?: string, assign__to__type?: string }
- `POST https://api.mcp.ai/api/box/assign/retention/policy` — Assigns a retention policy to an item.
  - body: { policy_id: string, filter_fields?: object[], assign__to__id?: string, assign__to__type?: string, start_date_field?: string }
- `POST https://api.mcp.ai/api/box/assign/storage/policy` — Creates a storage policy assignment for an enterprise or user.
  - body: { assigned__to__id?: string, assigned__to__type?: string, storage__policy__id?: string, storage__policy__type?: string }
- `POST https://api.mcp.ai/api/box/assign/task` — Assigns a task to a user. a task can be assigned to more than one user by creating multiple assignments.
  - body: { task__id?: string, task__type?: string, assign__to__id?: string, assign__to__login?: string }
- `POST https://api.mcp.ai/api/box/authorize/user` — Authorize a user by sending them through the [box](https://box.com) website and request their permission to act on their behalf. this is the first step when authenticating a user using oauth 2.0. to r
  - body: { scope?: string, state?: string, client_id: string, redirect_uri?: string, response_type: string }
- `POST https://api.mcp.ai/api/box/cancel/box/sign/request` — Cancels a sign request.
  - body: { sign_request_id: string }
- `POST https://api.mcp.ai/api/box/change/shield/information/barrier/status` — Change status of shield information barrier with the specified id.
  - body: { id: string, status: string }
- `POST https://api.mcp.ai/api/box/commit/upload/session` — Close an upload session and create a file from the uploaded chunks. the actual endpoint url is returned by the [`create upload session`](e://post-files-upload-sessions) and [`get upload session`](e://
  - body: { parts: string[], upload_session_id: string }
- `POST https://api.mcp.ai/api/box/copy/file` — Creates a copy of a file.
  - body: { name?: string, fields?: string[], file_id: string, version?: string, parent__id?: string }
- `POST https://api.mcp.ai/api/box/copy/file/request` — Copies an existing file request that is already present on one folder, and applies it to another folder.
  - body: { file_request_id: string }
- `POST https://api.mcp.ai/api/box/copy/folder` — Creates a copy of a folder within a destination folder. the original folder will not be changed.
  - body: { name?: string, fields?: string[], folder_id: string, parent__id?: string }
- `POST https://api.mcp.ai/api/box/create/ai/agent` — Creates an ai agent. at least one of the following capabilities must be provided: `ask`, `text gen`, `extract`.
  - body: { name: string, type: string, ask__type?: string, access_state: string, extract__type?: string, icon_reference?: string, text__gen__type?: string, allowed_entities?: object[], ask__description?: string, ask__access__state?: string, extract__description?: string, extract__access__state?: string, text__gen__description?: string, text__gen__access__state?: string, ask__custom__instructions?: string, extract__custom__instructions?: string, text__gen__custom__instructions?: string }
- `POST https://api.mcp.ai/api/box/create/box/sign/request` — Creates a signature request. this involves preparing a document for signing and sending the signature request to signers.
- `POST https://api.mcp.ai/api/box/create/box/skill/cards/on/file` — Applies one or more box skills metadata cards to a file.
  - body: { cards: object[], file_id: string }
- `POST https://api.mcp.ai/api/box/create/collaboration` — Adds a collaboration for a single user or a single group to a file or folder. collaborations can be created using email address, user ids, or a group ids. if a collaboration is being created with a gr
  - body: { role: string, fields?: string[], notify?: boolean, item__id?: string, expires_at?: string, item__type?: string, can_view_path?: boolean, is_access_only?: boolean, accessible__by__id?: string, accessible__by__type?: string, accessible__by__login?: string }
- `POST https://api.mcp.ai/api/box/create/comment` — Adds a comment by the user to a specific file, or as a reply to an other comment.
  - body: { fields?: string[], message: string, item__id?: string, item__type?: string, tagged_message?: string }
- `POST https://api.mcp.ai/api/box/create/email/alias` — Adds a new email alias to a user account..
  - body: { email: string, user_id: string }
- `POST https://api.mcp.ai/api/box/create/folder` — Creates a new empty folder within the specified parent folder.
  - body: { name: string, fields?: string[], parent__id?: string, sync_state?: string }
- `POST https://api.mcp.ai/api/box/create/folder/lock` — Creates a folder lock on a folder, preventing it from being moved and/or deleted. you must be authenticated as the owner or co-owner of the folder to use this endpoint.
  - body: { folder__id?: string, folder__type?: string, locked__operations__move?: boolean, locked__operations__delete?: boolean }
- `POST https://api.mcp.ai/api/box/create/group` — Creates a new group of users in an enterprise. only users with admin permissions can create new groups.
  - body: { name: string, fields?: string[], provenance?: string, description?: string, invitability_level?: string, external_sync_identifier?: string, member_viewability_level?: string }
- `POST https://api.mcp.ai/api/box/create/jobs/to/terminate/user/group/session` — Validates the roles and permissions of the group, and creates asynchronous jobs to terminate the group's sessions. returns the status for the post request.
  - body: { group_ids: string[] }
- `POST https://api.mcp.ai/api/box/create/jobs/to/terminate/users/session` — Validates the roles and permissions of the user, and creates asynchronous jobs to terminate the user's sessions. returns the status for the post request.
  - body: { user_ids: string[], user_logins: string[] }
- `POST https://api.mcp.ai/api/box/create/legal/hold/policy` — Create a new legal hold policy.
  - body: { is_ongoing?: boolean, description?: string, policy_name: string, filter_ended_at?: string, filter_started_at?: string }
- `POST https://api.mcp.ai/api/box/create/metadata/cascade/policy` — Creates a new metadata cascade policy that applies a given metadata template to a given folder and automatically cascades it down to any files within that folder. in order for the policy to be applied
  - body: { scope: string, folder_id: string, templateKey: string }
- `POST https://api.mcp.ai/api/box/create/metadata/instance/on/file` — Applies an instance of a metadata template to a file. in most cases only values that are present in the metadata template will be accepted, except for the `global.properties` template which accepts an
  - body: { scope: string, file_id: string, template_key: string }
- `POST https://api.mcp.ai/api/box/create/metadata/instance/on/folder` — Applies an instance of a metadata template to a folder. in most cases only values that are present in the metadata template will be accepted, except for the `global.properties` template which accepts 
  - body: { scope: string, folder_id: string, template_key: string }
- `POST https://api.mcp.ai/api/box/create/metadata/template` — Creates a new metadata template that can be applied to files and folders.
  - body: { scope: string, fields?: object[], hidden?: boolean, displayName: string, templateKey?: string, copyInstanceOnItemCopy?: boolean }
- `POST https://api.mcp.ai/api/box/create/retention/policy` — Creates a retention policy.
  - body: { description?: string, policy_name: string, policy_type: string, retention_type?: string, retention_length?: string, disposition_action: string, are_owners_notified?: boolean, can_owner_extend_retention?: boolean, custom_notification_recipients?: string[] }
- `POST https://api.mcp.ai/api/box/create/shield/information/barrier` — Creates a shield information barrier to separate individuals/groups within the same firm and prevents confidential information passing between them.
- `POST https://api.mcp.ai/api/box/create/shield/information/barrier/report` — Creates a shield information barrier report for a given barrier.
  - body: { shield__information__barrier__id?: string, shield__information__barrier__type?: string }
- `POST https://api.mcp.ai/api/box/create/shield/information/barrier/segment` — Creates a shield information barrier segment.
  - body: { name: string, description?: string, shield__information__barrier__id?: string, shield__information__barrier__type?: string }
- `POST https://api.mcp.ai/api/box/create/shield/information/barrier/segment/member` — Creates a new shield information barrier segment member.
  - body: { type?: string, shield__information__barrier__id?: string, shield__information__barrier__type?: string, shield__information__barrier__segment__id?: string, shield__information__barrier__segment__type?: string }
- `POST https://api.mcp.ai/api/box/create/shield/information/barrier/segment/restriction` — Creates a shield information barrier segment restriction object.
  - body: { type: string, restricted__segment__id?: string, restricted__segment__type?: string, shield__information__barrier__id?: string, shield__information__barrier__type?: string, shield__information__barrier__segment__id?: string, shield__information__barrier__segment__type?: string }
- `POST https://api.mcp.ai/api/box/create/slack/integration/mapping` — Creates a [slack integration mapping](https://support.box.com/hc/en-us/articles/4415585987859-box-as-the-content-layer-for-slack) by mapping a slack channel to a box item. you need admin or co-admin r
- `POST https://api.mcp.ai/api/box/create/task` — Creates a single task on a file. this task is not assigned to any user and will need to be assigned separately.
  - body: { action?: string, due_at?: string, message?: string, item__id?: string, item__type?: string, completion_rule?: string }
- `POST https://api.mcp.ai/api/box/create/teams/integration/mapping` — Creates a [teams integration mapping](https://support.box.com/hc/en-us/articles/360044681474-using-box-for-teams) by mapping a teams channel to a box item. you need admin or co-admin role to use this 
- `POST https://api.mcp.ai/api/box/create/terms/of/service` — Creates a terms of service for a given enterprise and type of user.
  - body: { text: string, status: string, tos_type?: string }
- `POST https://api.mcp.ai/api/box/create/terms/of/service/status/for/new/user` — Sets the status for a terms of service for a user.
  - body: { tos__id?: string, user__id?: string, tos__type?: string, user__type?: string, is_accepted: boolean }
- `POST https://api.mcp.ai/api/box/create/upload/session` — Creates an upload session for a new file.
  - body: { file_name: string, file_size: integer, folder_id: string }
- `POST https://api.mcp.ai/api/box/create/upload/session/for/existing/file` — Creates an upload session for an existing file.
  - body: { file_id: string, file_name?: string, file_size: integer }
- `POST https://api.mcp.ai/api/box/create/user` — Creates a new managed user in an enterprise. this endpoint is only available to users and applications with the right admin permissions.
  - body: { name: string, role?: string, login?: string, phone?: string, fields?: string[], status?: string, address?: string, language?: string, timezone?: string, job_title?: string, space_amount?: integer, tracking_codes?: object[], is_sync_enabled?: boolean, external_app_user_id?: string, can_see_managed_users?: boolean, is_platform_access_only?: boolean, is_exempt_from_device_limits?: boolean, is_external_collab_restricted?: boolean, is_exempt_from_login_verification?: boolean }
- `POST https://api.mcp.ai/api/box/create/user/exemption/from/collaboration/domain/restrictions` — Create user exemption from collaboration domain restrictions.
  - body: { user__id?: string }
- `POST https://api.mcp.ai/api/box/create/user/invite` — Invites an existing external user to join an enterprise. the existing user can not be part of another enterprise and must already have a box account. once invited, the user will receive an email and a
  - body: { fields?: string[], enterprise__id?: string, actionable__by__login?: string }
- `POST https://api.mcp.ai/api/box/create/web/link` — Creates a web link object within a folder.
  - body: { url: string, name?: string, parent__id?: string, description?: string }
- `POST https://api.mcp.ai/api/box/create/webhook` — Creates a webhook.
  - body: { address: string, triggers: string[], target__id?: string, target__type?: string }
- `POST https://api.mcp.ai/api/box/create/zip/download` — Creates a request to download multiple files and folders as a single `zip` archive file. this api does not return the archive but instead performs all the checks to ensure that the user has access to 
  - body: { items: object[], download_file_name?: string }
- `POST https://api.mcp.ai/api/box/delete/ai/agent` — Deletes an ai agent using the provided parameters.
  - body: { agent_id: string }
- `POST https://api.mcp.ai/api/box/delete/file` — Deletes a file, either permanently or by moving it to the trash. the the enterprise settings determine whether the item will be permanently deleted from box or moved to the trash.
  - body: { file_id: string }
- `POST https://api.mcp.ai/api/box/delete/file/request` — Deletes a file request permanently.
  - body: { file_request_id: string }
- `POST https://api.mcp.ai/api/box/delete/folder` — Deletes a folder, either permanently or by moving it to the trash.
  - body: { folder_id: string, recursive?: boolean }
- `POST https://api.mcp.ai/api/box/delete/folder/lock` — Deletes a folder lock on a given folder. you must be authenticated as the owner or co-owner of the folder to use this endpoint.
  - body: { folder_lock_id: string }
- `POST https://api.mcp.ai/api/box/delete/retention/policy` — Permanently deletes a retention policy.
  - body: { retention_policy_id: string }
- `POST https://api.mcp.ai/api/box/delete/shield/information/barrier/segment` — Deletes the shield information barrier segment based on provided id.
  - body: { shield_information_barrier_segment_id: string }
- `POST https://api.mcp.ai/api/box/delete/shield/information/barrier/segment/member/by/id` — Deletes a shield information barrier segment member based on provided id.
  - body: { shield_information_barrier_segment_member_id: string }
- `POST https://api.mcp.ai/api/box/delete/shield/information/barrier/segment/restriction/by/id` — Delete shield information barrier segment restriction by id.
  - body: { shield_information_barrier_segment_restriction_id: string }
- `POST https://api.mcp.ai/api/box/delete/slack/integration/mapping` — Deletes a [slack integration mapping](https://support.box.com/hc/en-us/articles/4415585987859-box-as-the-content-layer-for-slack). you need admin or co-admin role to use this endpoint.
  - body: { integration_mapping_id: string }
- `POST https://api.mcp.ai/api/box/delete/teams/integration/mapping` — Deletes a [teams integration mapping](https://support.box.com/hc/en-us/articles/360044681474-using-box-for-teams). you need admin or co-admin role to use this endpoint.
  - body: { integration_mapping_id: string }
- `POST https://api.mcp.ai/api/box/delete/user` — Deletes a user. by default this will fail if the user still owns any content. move their owned content first before proceeding, or use the `force` field to delete the user and their files.
  - body: { force?: boolean, notify?: boolean, user_id: string }
- `POST https://api.mcp.ai/api/box/delete/user/avatar` — Removes an existing user avatar. you cannot reverse this operation.
  - body: { user_id: string }
- `POST https://api.mcp.ai/api/box/download/file` — Returns the contents of a file in binary format.
  - body: { file_id: string, version?: string, access_token?: string }
- `POST https://api.mcp.ai/api/box/download/zip/archive` — Returns the contents of a `zip` archive in binary format. this url does not require any form of authentication and could be used in a user's browser to download the archive to a user's device. by defa
  - body: { zip_download_id: string }
- `POST https://api.mcp.ai/api/box/extract/metadata/freeform` — Sends an ai request to supported large language models (llms) and extracts metadata in form of key-value pairs. in this request, both the prompt and the output can be freeform. metadata template setup
  - body: { items: object[], prompt: string }
- `POST https://api.mcp.ai/api/box/extract/metadata/structured` — Sends an ai request to supported large language models (llms) and returns extracted metadata as a set of key-value pairs. for this request, you either need a metadata template or a list of fields you 
  - body: { items: object[], fields?: object[], metadata__template__type?: string, metadata__template__scope?: string, metadata__template__template__key?: string }
- `POST https://api.mcp.ai/api/box/find/app/item/for/shared/link` — Returns the app item represented by a shared link. the link can originate from the current enterprise or another.
- `POST https://api.mcp.ai/api/box/find/file/for/shared/link` — Returns the file represented by a shared link. a shared file can be represented by a shared link, which can originate within the current enterprise or within another. this endpoint allows an applicati
  - body: { fields?: string[] }
- `POST https://api.mcp.ai/api/box/find/folder/for/shared/link` — Return the folder represented by a shared link. a shared folder can be represented by a shared link, which can originate within the current enterprise or within another. this endpoint allows an applic
  - body: { fields?: string[] }
- `POST https://api.mcp.ai/api/box/find/metadata/template/by/instance/id` — Finds a metadata template by searching for the id of an instance of the template.
  - body: { limit?: integer, marker?: string, metadata_instance_id: string }
- `POST https://api.mcp.ai/api/box/find/web/link/for/shared/link` — Returns the web link represented by a shared link. a shared web link can be represented by a shared link, which can originate within the current enterprise or within another. this endpoint allows an a
  - body: { fields?: string[] }
- `POST https://api.mcp.ai/api/box/force/apply/metadata/cascade/policy/to/folder` — Force the metadata on a folder with a metadata cascade policy to be applied to all of its children. this can be used after creating a new cascade policy to enforce the metadata to be cascaded down to 
  - body: { conflict_resolution: string, metadata_cascade_policy_id: string }
- `POST https://api.mcp.ai/api/box/generate/text` — Sends an ai request to supported large language models (llms) and returns generated text based on the provided prompt.
  - body: { items: object[], prompt: string, dialogue_history?: object[] }
- `POST https://api.mcp.ai/api/box/get/ai/agent/by/agent/id` — Gets an ai agent using the `agent id` parameter.
  - body: { fields?: string[], agent_id: string }
- `POST https://api.mcp.ai/api/box/get/ai/agent/default/configuration` — Get the ai agent default config
  - body: { mode: string, model?: string, language?: string }
- `POST https://api.mcp.ai/api/box/get/allowed/collaboration/domain` — Returns a domain that has been deemed safe to create collaborations for within the current enterprise.
  - body: { collaboration_whitelist_entry_id: string }
- `POST https://api.mcp.ai/api/box/get/box/sign/request/by/id` — Gets a sign request by id.
  - body: { sign_request_id: string }
- `POST https://api.mcp.ai/api/box/get/box/sign/template/by/id` — Fetches details of a specific box sign template.
  - body: { template_id: string }
- `POST https://api.mcp.ai/api/box/get/classification/on/file` — Retrieves the classification metadata instance that has been applied to a file. this api can also be called by including the enterprise id in the url explicitly, for example `/files/:id//enterprise 12
  - body: { file_id: string }
- `POST https://api.mcp.ai/api/box/get/classification/on/folder` — Retrieves the classification metadata instance that has been applied to a folder. this api can also be called by including the enterprise id in the url explicitly, for example `/folders/:id/enterprise
  - body: { folder_id: string }
- `POST https://api.mcp.ai/api/box/get/collaboration` — Retrieves a single collaboration.
  - body: { fields?: string[], collaboration_id: string }
- `POST https://api.mcp.ai/api/box/get/collection/by/id` — Retrieves a collection by its id.
  - body: { collection_id: string }
- `POST https://api.mcp.ai/api/box/get/comment` — Retrieves the message and metadata for a specific comment, as well as information on the user who created the comment.
  - body: { fields?: string[], comment_id: string }
- `POST https://api.mcp.ai/api/box/get/current/user` — Retrieves information about the user who is currently authenticated. in the case of a client-side authenticated oauth 2.0 application this will be the user who authorized the app. in the case of a jwt
  - body: { fields?: string[] }
- `POST https://api.mcp.ai/api/box/get/device/pin` — Retrieves information about an individual device pin.
  - body: { device_pinner_id: string }
- `POST https://api.mcp.ai/api/box/get/events/long/poll/endpoint` — The listevents endpoint provides information about the events available in the box system. this options method allows developers to discover the capabilities and requirements for interacting with the 
- `POST https://api.mcp.ai/api/box/get/file/information` — Retrieves the details about a file.
  - body: { fields?: string[], file_id: string }
- `POST https://api.mcp.ai/api/box/get/file/request` — Retrieves the information about a file request.
  - body: { file_request_id: string }
- `POST https://api.mcp.ai/api/box/get/file/thumbnail` — Retrieves a thumbnail, or smaller image representation, of a file. sizes of `32x32`,`64x64`, `128x128`, and `256x256` can be returned in the `.png` format and sizes of `32x32`, `160x160`, and `320x320
  - body: { file_id: string, extension: string, max_width?: integer, min_width?: integer, max_height?: integer, min_height?: integer }
- `POST https://api.mcp.ai/api/box/get/file/version` — Retrieve a specific version of a file. versions are only tracked for box users with premium accounts.
  - body: { fields?: string[], file_id: string, file_version_id: string }
- `POST https://api.mcp.ai/api/box/get/file/version/legal/hold` — Retrieves information about the legal hold policies assigned to a file version.
  - body: { file_version_legal_hold_id: string }
- `POST https://api.mcp.ai/api/box/get/file/versions/under/retention` — Returns a list of file versions under retention for a retention policy assignment.
  - body: { limit?: integer, marker?: string, retention_policy_assignment_id: string }
- `POST https://api.mcp.ai/api/box/get/files/under/retention` — Returns a list of files under retention for a retention policy assignment.
  - body: { limit?: integer, marker?: string, retention_policy_assignment_id: string }
- `POST https://api.mcp.ai/api/box/get/folder/information` — Retrieves details for a folder, including the first 100 entries in the folder. passing `sort`, `direction`, `offset`, and `limit` parameters in query allows you to manage the list of returned [folder 
  - body: { sort?: string, limit?: integer, fields?: string[], offset?: integer, direction?: string, folder_id: string }
- `POST https://api.mcp.ai/api/box/get/group` — Retrieves information about a group. only members of this group or users with admin-level permissions will be able to use this api.
  - body: { fields?: string[], group_id: string }
- `POST https://api.mcp.ai/api/box/get/group/membership` — Retrieves a specific group membership. only admins of this group or users with admin-level permissions will be able to use this api.
  - body: { fields?: string[], group_membership_id: string }
- `POST https://api.mcp.ai/api/box/get/legal/hold/policy` — Retrieve a legal hold policy.
  - body: { legal_hold_policy_id: string }
- `POST https://api.mcp.ai/api/box/get/legal/hold/policy/assignment` — Retrieve a legal hold policy assignment.
  - body: { legal_hold_policy_assignment_id: string }
- `POST https://api.mcp.ai/api/box/get/metadata/cascade/policy` — Retrieve a specific metadata cascade policy assigned to a folder.
  - body: { metadata_cascade_policy_id: string }
- `POST https://api.mcp.ai/api/box/get/metadata/instance/on/file` — Retrieves the instance of a metadata template that has been applied to a file.
  - body: { scope: string, file_id: string, template_key: string }
- `POST https://api.mcp.ai/api/box/get/metadata/instance/on/folder` — Retrieves the instance of a metadata template that has been applied to a folder. this can not be used on the root folder with id `0`.
  - body: { scope: string, folder_id: string, template_key: string }
- `POST https://api.mcp.ai/api/box/get/metadata/template/by/id` — Retrieves a metadata template by its id.
  - body: { template_id: string }
- `POST https://api.mcp.ai/api/box/get/metadata/template/by/name` — Retrieves a metadata template by its `scope` and `templatekey` values. to find the `scope` and `templatekey` for a template, list all templates for an enterprise or globally, or list all templates app
  - body: { scope: string, template_key: string }
- `POST https://api.mcp.ai/api/box/get/retention/on/file` — Returns information about a file version retention. **note**: file retention api is now **deprecated**. to get information about files and file versions under retention, see [files under retention](e:
  - body: { file_version_retention_id: string }
- `POST https://api.mcp.ai/api/box/get/retention/policy` — Retrieves a retention policy.
  - body: { fields?: string[], retention_policy_id: string }
- `POST https://api.mcp.ai/api/box/get/retention/policy/assignment` — Retrieves a retention policy assignment
  - body: { fields?: string[], retention_policy_assignment_id: string }
- `POST https://api.mcp.ai/api/box/get/shared/link/for/file` — Gets the information for a shared link on a file.
  - body: { fields: string, file_id: string }
- `POST https://api.mcp.ai/api/box/get/shared/link/for/folder` — Gets the information for a shared link on a folder.
  - body: { fields: string, folder_id: string }
- `POST https://api.mcp.ai/api/box/get/shared/link/for/web/link` — Gets the information for a shared link on a web link.
  - body: { fields: string, web_link_id: string }
- `POST https://api.mcp.ai/api/box/get/shield/information/barrier/report/by/id` — Retrieves a shield information barrier report by its id.
  - body: { shield_information_barrier_report_id: string }
- `POST https://api.mcp.ai/api/box/get/shield/information/barrier/segment/member/by/id` — Retrieves a shield information barrier segment member by its id.
  - body: { shield_information_barrier_segment_member_id: string }
- `POST https://api.mcp.ai/api/box/get/shield/information/barrier/segment/restriction/by/id` — Retrieves a shield information barrier segment restriction based on provided id.
  - body: { shield_information_barrier_segment_restriction_id: string }
- `POST https://api.mcp.ai/api/box/get/shield/information/barrier/segment/with/specified/id` — Retrieves shield information barrier segment based on provided id..
  - body: { shield_information_barrier_segment_id: string }
- `POST https://api.mcp.ai/api/box/get/shield/information/barrier/with/specified/id` — Get shield information barrier based on provided id.
  - body: { shield_information_barrier_id: string }
- `POST https://api.mcp.ai/api/box/get/storage/policy` — Fetches a specific storage policy.
  - body: { storage_policy_id: string }
- `POST https://api.mcp.ai/api/box/get/storage/policy/assignment` — Fetches a specific storage policy assignment.
  - body: { storage_policy_assignment_id: string }
- `POST https://api.mcp.ai/api/box/get/task` — Retrieves information about a specific task.
  - body: { task_id: string }
- `POST https://api.mcp.ai/api/box/get/task/assignment` — Retrieves information about a task assignment.
  - body: { task_assignment_id: string }
- `POST https://api.mcp.ai/api/box/get/terms/of/service` — Fetches a specific terms of service.
  - body: { terms_of_service_id: string }
- `POST https://api.mcp.ai/api/box/get/trashed/file` — Retrieves a file that has been moved to the trash. please note that only if the file itself has been moved to the trash can it be retrieved with this api call. if instead one of its parent folders was
  - body: { fields?: string[], file_id: string }
- `POST https://api.mcp.ai/api/box/get/trashed/folder` — Retrieves a folder that has been moved to the trash. please note that only if the folder itself has been moved to the trash can it be retrieved with this api call. if instead one of its parent folders
  - body: { fields?: string[], folder_id: string }
- `POST https://api.mcp.ai/api/box/get/trashed/web/link` — Retrieves a web link that has been moved to the trash.
  - body: { fields?: string[], web_link_id: string }
- `POST https://api.mcp.ai/api/box/get/upload/session` — Return information about an upload session. the actual endpoint url is returned by the [`create upload session`](e://post-files-upload-sessions) endpoint.
  - body: { upload_session_id: string }
- `POST https://api.mcp.ai/api/box/get/user` — Retrieves information about a user in the enterprise. the application and the authenticated user need to have the permission to look up users in the entire enterprise. this endpoint also returns a lim
  - body: { fields?: string[], user_id: string }
- `POST https://api.mcp.ai/api/box/get/user/avatar` — Retrieves an image of a the user's avatar.
  - body: { user_id: string }
- `POST https://api.mcp.ai/api/box/get/user/exempt/from/collaboration/domain/restrictions` — Returns a users who has been exempt from the collaboration domain restrictions.
  - body: { collaboration_whitelist_exempt_target_id: string }
- `POST https://api.mcp.ai/api/box/get/user/invite/status` — Returns the status of a user invite.
  - body: { fields?: string[], invite_id: string }
- `POST https://api.mcp.ai/api/box/get/watermark/for/folder` — Retrieve the watermark for a folder.
  - body: { folder_id: string }
- `POST https://api.mcp.ai/api/box/get/watermark/on/file` — Retrieve the watermark for a file.
  - body: { file_id: string }
- `POST https://api.mcp.ai/api/box/get/web/link` — Retrieve information about a web link.
  - body: { web_link_id: string }
- `POST https://api.mcp.ai/api/box/get/webhook` — Retrieves a specific webhook
  - body: { webhook_id: string }
- `POST https://api.mcp.ai/api/box/get/zip/download/status` — Returns the download status of a `zip` archive, allowing an application to inspect the progress of the download as well as the number of items that might have been skipped. this endpoint can only be a
  - body: { zip_download_id: string }
- `POST https://api.mcp.ai/api/box/list/ai/agents` — Lists ai agents based on the provided parameters.
  - body: { mode?: string[], limit?: integer, fields?: string[], marker?: string, agent_state?: string[], include_box_default?: boolean }
- `POST https://api.mcp.ai/api/box/list/all/classifications` — Retrieves the classification metadata template and lists all the classifications available to this enterprise. this api can also be called by including the enterprise id in the url explicitly, for exa
- `POST https://api.mcp.ai/api/box/list/all/collections` — Retrieves all collections for a given user. currently, only the `favorites` collection is supported.
  - body: { limit?: integer, fields?: string[], offset?: integer }
- `POST https://api.mcp.ai/api/box/list/all/file/versions` — Retrieve a list of the past versions for a file. versions are only tracked by box users with premium accounts. to fetch the id of the current version of a file, use the `get /file/:id` api.
  - body: { limit?: integer, fields?: string[], offset?: integer, file_id: string }
- `POST https://api.mcp.ai/api/box/list/all/global/metadata/templates` — Used to retrieve all generic, global metadata templates available to all enterprises using box.
  - body: { limit?: integer, marker?: string }
- `POST https://api.mcp.ai/api/box/list/all/legal/hold/policies` — Retrieves a list of legal hold policies that belong to an enterprise.
  - body: { limit?: integer, fields?: string[], marker?: string, policy_name?: string }
- `POST https://api.mcp.ai/api/box/list/all/metadata/templates/for/enterprise` — Used to retrieve all metadata templates created to be used specifically within the user's enterprise
  - body: { limit?: integer, marker?: string }
- `POST https://api.mcp.ai/api/box/list/all/webhooks` — Returns all defined webhooks for the requesting application. this api only returns webhooks that are applied to files or folders that are owned by the authenticated user. this means that an admin can 
  - body: { limit?: integer, marker?: string }
- `POST https://api.mcp.ai/api/box/list/allowed/collaboration/domains` — Returns the list domains that have been deemed safe to create collaborations for within the current enterprise.
  - body: { limit?: integer, marker?: string }
- `POST https://api.mcp.ai/api/box/list/box/sign/requests` — Gets signature requests created by a user. if the `sign files` and/or `parent folder` are deleted, the signature request will not return in the list.
  - body: { limit?: integer, marker?: string, senders?: string[], shared_requests?: boolean }
- `POST https://api.mcp.ai/api/box/list/box/sign/templates` — Gets box sign templates created by a user.
  - body: { limit?: integer, marker?: string }
- `POST https://api.mcp.ai/api/box/list/box/skill/cards/on/file` — List the box skills metadata cards that are attached to a file.
  - body: { file_id: string }
- `POST https://api.mcp.ai/api/box/list/collection/items` — Retrieves the files and/or folders contained within this collection.
  - body: { limit?: integer, fields?: string[], offset?: integer, collection_id: string }
- `POST https://api.mcp.ai/api/box/list/enterprise/device/pins` — Retrieves all the device pins within an enterprise. the user must have admin privileges, and the application needs the "manage enterprise" scope to make this call.
  - body: { limit?: integer, marker?: string, direction?: string, enterprise_id: string }
- `POST https://api.mcp.ai/api/box/list/enterprise/users` — Returns a list of all users for the enterprise along with their `user id`, `public name`, and `login`. the application and the authenticated user need to have the permission to look up users in the en
  - body: { limit?: integer, fields?: string[], marker?: string, offset?: integer, usemarker?: boolean, user_type?: string, filter_term?: string, external_app_user_id?: string }
- `POST https://api.mcp.ai/api/box/list/file/app/item/associations` — **this is a beta feature, which means that its availability might be limited.** returns all app items the file is associated with. this includes app items associated with ancestors of the file. assumi
  - body: { limit?: integer, marker?: string, file_id: string, application_type?: string }
- `POST https://api.mcp.ai/api/box/list/file/collaborations` — Retrieves a list of pending and active collaborations for a file. this returns all the users that have access to the file or have been invited to the file.
  - body: { limit?: integer, fields?: string[], marker?: string, file_id: string }
- `POST https://api.mcp.ai/api/box/list/file/comments` — Retrieves a list of comments for a file.
  - body: { limit?: integer, fields?: string[], offset?: integer, file_id: string }
- `POST https://api.mcp.ai/api/box/list/file/version/legal/holds` — Get a list of file versions on legal hold for a legal hold assignment. due to ongoing re-architecture efforts this api might not return all file versions for this policy id. instead, this api will onl
  - body: { limit?: integer, marker?: string, policy_id: string }
- `POST https://api.mcp.ai/api/box/list/file/version/retentions` — Retrieves all file version retentions for the given enterprise. **note**: file retention api is now **deprecated**. to get information about files and file versions under retention, see [files under r
  - body: { limit?: integer, marker?: string, file_id?: string, policy_id?: string, file_version_id?: string, disposition_after?: string, disposition_action?: string, disposition_before?: string }
- `POST https://api.mcp.ai/api/box/list/folder/app/item/associations` — **this is a beta feature, which means that its availability might be limited.** returns all app items the folder is associated with. this includes app items associated with ancestors of the folder. as
  - body: { limit?: integer, marker?: string, folder_id: string, application_type?: string }
- `POST https://api.mcp.ai/api/box/list/folder/collaborations` — Retrieves a list of pending and active collaborations for a folder. this returns all the users that have access to the folder or have been invited to the folder.
  - body: { limit?: integer, fields?: string[], marker?: string, folder_id: string }
- `POST https://api.mcp.ai/api/box/list/folder/locks` — Retrieves folder lock details for a given folder. you must be authenticated as the owner or co-owner of the folder to use this endpoint.
  - body: { folder_id: string }
- `POST https://api.mcp.ai/api/box/list/group/collaborations` — Retrieves all the collaborations for a group. the user must have admin permissions to inspect enterprise's groups. each collaboration object has details on which files or folders the group has access 
  - body: { limit?: integer, offset?: integer, group_id: string }
- `POST https://api.mcp.ai/api/box/list/groups/for/enterprise` — Retrieves all of the groups for a given enterprise. the user must have admin permissions to inspect enterprise's groups.
  - body: { limit?: integer, fields?: string[], offset?: integer, filter_term?: string }
- `POST https://api.mcp.ai/api/box/list/items/in/folder` — Retrieves a page of items in a folder. these items can be files, folders, and web links. to request more information about the folder itself, like its size, use the [get a folder](#get-folders-id) end
  - body: { sort?: string, limit?: integer, fields?: string[], marker?: string, offset?: integer, direction?: string, folder_id: string, usemarker?: boolean }
- `POST https://api.mcp.ai/api/box/list/legal/hold/policy/assignments` — Retrieves a list of items a legal hold policy has been assigned to.
  - body: { limit?: integer, fields?: string[], marker?: string, policy_id: string, assign_to_id?: string, assign_to_type?: string }
- `POST https://api.mcp.ai/api/box/list/members/of/group` — Retrieves all the members for a group. only members of this group or users with admin-level permissions will be able to use this api.
  - body: { limit?: integer, offset?: integer, group_id: string }
- `POST https://api.mcp.ai/api/box/list/metadata/cascade/policies` — Retrieves a list of all the metadata cascade policies that are applied to a given folder. this can not be used on the root folder with id `0`.
  - body: { marker?: string, offset?: integer, folder_id: string, owner_enterprise_id?: string }
- `POST https://api.mcp.ai/api/box/list/metadata/instances/on/file` — Retrieves all metadata for a given file.
  - body: { file_id: string }
- `POST https://api.mcp.ai/api/box/list/metadata/instances/on/folder` — Retrieves all metadata for a given folder. this can not be used on the root folder with id `0`.
  - body: { folder_id: string }
- `POST https://api.mcp.ai/api/box/list/parts` — Return a list of the chunks uploaded to the upload session so far. the actual endpoint url is returned by the [`create upload session`](e://post-files-upload-sessions) and [`get upload session`](e://g
  - body: { limit?: integer, offset?: integer, upload_session_id: string }
- `POST https://api.mcp.ai/api/box/list/pending/collaborations` — Retrieves all pending collaboration invites for this user.
  - body: { limit?: integer, fields?: string[], offset?: integer, status: string }
- `POST https://api.mcp.ai/api/box/list/previous/file/versions/for/legal/hold/policy/assignment` — List previous file versions for legal hold policy assignment
  - body: { limit?: integer, fields?: string[], marker?: string, legal_hold_policy_assignment_id: string }
- `POST https://api.mcp.ai/api/box/list/recently/accessed/items` — Returns information about the recent items accessed by a user, either in the last 90 days or up to the last 1000 items accessed.
  - body: { limit?: integer, fields?: string[], marker?: string }
- `POST https://api.mcp.ai/api/box/list/retention/policies` — Retrieves all of the retention policies for an enterprise.
  - body: { limit?: integer, fields?: string[], marker?: string, policy_name?: string, policy_type?: string, created_by_user_id?: string }
- `POST https://api.mcp.ai/api/box/list/retention/policy/assignments` — Returns a list of all retention policy assignments associated with a specified retention policy.
  - body: { type?: string, limit?: integer, fields?: string[], marker?: string, retention_policy_id: string }
- `POST https://api.mcp.ai/api/box/list/shield/information/barrier/reports` — Lists shield information barrier reports.
  - body: { limit?: integer, marker?: string, shield_information_barrier_id: string }
- `POST https://api.mcp.ai/api/box/list/shield/information/barrier/segment/members` — Lists shield information barrier segment members based on provided segment ids.
  - body: { limit?: integer, marker?: string, shield_information_barrier_segment_id: string }
- `POST https://api.mcp.ai/api/box/list/shield/information/barrier/segment/restrictions` — Lists shield information barrier segment restrictions based on provided segment id.
  - body: { limit?: integer, marker?: string, shield_information_barrier_segment_id: string }
- `POST https://api.mcp.ai/api/box/list/shield/information/barrier/segments` — Retrieves a list of shield information barrier segment objects for the specified information barrier id.
  - body: { limit?: integer, marker?: string, shield_information_barrier_id: string }
- `POST https://api.mcp.ai/api/box/list/shield/information/barriers` — Retrieves a list of shield information barrier objects for the enterprise of jwt.
  - body: { limit?: integer, marker?: string }
- `POST https://api.mcp.ai/api/box/list/slack/integration/mappings` — Lists [slack integration mappings](https://support.box.com/hc/en-us/articles/4415585987859-box-as-the-content-layer-for-slack) in a users' enterprise. you need admin or co-admin role to use this endpo
  - body: { limit?: integer, marker?: string, box_item_id?: string, box_item_type?: string, partner_item_id?: string, partner_item_type?: string, is_manually_created?: boolean }
- `POST https://api.mcp.ai/api/box/list/storage/policies` — Fetches all the storage policies in the enterprise.
  - body: { limit?: integer, fields?: string[], marker?: string }
- `POST https://api.mcp.ai/api/box/list/storage/policy/assignments` — Fetches all the storage policy assignment for an enterprise or user.
  - body: { marker?: string, resolved_for_id: string, resolved_for_type: string }
- `POST https://api.mcp.ai/api/box/list/task/assignments` — Lists all of the assignments for a given task.
  - body: { task_id: string }
- `POST https://api.mcp.ai/api/box/list/tasks/on/file` — Retrieves a list of all the tasks for a file. this endpoint does not support pagination.
  - body: { file_id: string }
- `POST https://api.mcp.ai/api/box/list/teams/integration/mappings` — Lists [teams integration mappings](https://support.box.com/hc/en-us/articles/360044681474-using-box-for-teams) in a users' enterprise. you need admin or co-admin role to use this endpoint.
  - body: { box_item_id?: string, box_item_type?: string, partner_item_id?: string, partner_item_type?: string }
- `POST https://api.mcp.ai/api/box/list/terms/of/service/user/statuses` — Retrieves an overview of users and their status for a terms of service, including whether they have accepted the terms and when.
  - body: { tos_id: string, user_id?: string }
- `POST https://api.mcp.ai/api/box/list/terms/of/services` — Returns the current terms of service text and settings for the enterprise.
  - body: { tos_type?: string }
- `POST https://api.mcp.ai/api/box/list/trashed/items` — Retrieves the files and folders that have been moved to the trash. any attribute in the full files or folders objects can be passed in with the `fields` parameter to retrieve those specific attributes
  - body: { sort?: string, limit?: integer, fields?: string[], marker?: string, offset?: integer, direction?: string, usemarker?: boolean }
- `POST https://api.mcp.ai/api/box/list/user/and/enterprise/events` — Returns up to a year of past events for a given user or for the entire enterprise. by default this returns events for the authenticated user. to retrieve events for the entire enterprise, set the `str
  - body: { limit?: integer, event_type?: string[], stream_type?: string, created_after?: string, created_before?: string, stream_position?: string }
- `POST https://api.mcp.ai/api/box/list/user/s/email/aliases` — Retrieves all email aliases for a user. the collection does not include the primary login for the user.
  - body: { user_id: string }
- `POST https://api.mcp.ai/api/box/list/user/s/groups` — Retrieves all the groups for a user. only members of this group or users with admin-level permissions will be able to use this api.
  - body: { limit?: integer, offset?: integer, user_id: string }
- `POST https://api.mcp.ai/api/box/list/users/exempt/from/collaboration/domain/restrictions` — Returns a list of users who have been exempt from the collaboration domain restrictions.
  - body: { limit?: integer, marker?: string }
- `POST https://api.mcp.ai/api/box/list/workflows` — Returns list of workflows that act on a given `folder id`, and have a flow with a trigger type of `workflow manual start`. you application must be authorized to use the `manage box relay` application 
  - body: { limit?: integer, marker?: string, folder_id: string, trigger_type?: string }
- `POST https://api.mcp.ai/api/box/permanently/remove/file` — Permanently deletes a file that is in the trash. this action cannot be undone.
  - body: { file_id: string }
- `POST https://api.mcp.ai/api/box/permanently/remove/folder` — Permanently deletes a folder that is in the trash. this action cannot be undone.
  - body: { folder_id: string }
- `POST https://api.mcp.ai/api/box/permanently/remove/web/link` — Permanently deletes a web link that is in the trash. this action cannot be undone.
  - body: { web_link_id: string }
- `POST https://api.mcp.ai/api/box/preflight/check/before/upload` — Performs a check to verify that a file will be accepted by box before you upload the entire file.
  - body: { name?: string, size?: integer }
- `POST https://api.mcp.ai/api/box/promote/file/version` — Promote a specific version of a file. if previous versions exist, this method can be used to promote one of the older versions to the top of the version history. this creates a new copy of the old ver
  - body: { id?: string, type?: string, fields?: string[], file_id: string }
- `POST https://api.mcp.ai/api/box/query/files/folders/by/metadata` — Create a search using sql-like syntax to return items that match specific metadata. by default, this endpoint returns only the most basic info about the items for which the query matches. to get addit
  - body: { from: string, limit?: integer, query?: string, fields?: string[], marker?: string, order_by?: object[], query_params?: object, ancestor_folder_id: string }
- `POST https://api.mcp.ai/api/box/refresh/access/token` — Refresh an access token using its client id, secret, and refresh token.
  - body: { client_id: string, grant_type: string, client_secret: string, refresh_token: string }
- `POST https://api.mcp.ai/api/box/remove/box/skill/cards/from/file` — Removes any box skills cards metadata from a file.
  - body: { file_id: string }
- `POST https://api.mcp.ai/api/box/remove/classification/from/file` — Removes any classifications from a file. this api can also be called by including the enterprise id in the url explicitly, for example `/files/:id//enterprise 12345/securityclassification-6vmvochwuwo`
  - body: { file_id: string }
- `POST https://api.mcp.ai/api/box/remove/classification/from/folder` — Removes any classifications from a folder. this api can also be called by including the enterprise id in the url explicitly, for example `/folders/:id/enterprise 12345/securityclassification-6vmvochwu
  - body: { folder_id: string }
- `POST https://api.mcp.ai/api/box/remove/collaboration` — Deletes a single collaboration.
  - body: { collaboration_id: string }
- `POST https://api.mcp.ai/api/box/remove/comment` — Permanently deletes a comment.
  - body: { comment_id: string }
- `POST https://api.mcp.ai/api/box/remove/device/pin` — Deletes an individual device pin.
  - body: { device_pinner_id: string }
- `POST https://api.mcp.ai/api/box/remove/domain/from/list/of/allowed/collaboration/domains` — Removes a domain from the list of domains that have been deemed safe to create collaborations for within the current enterprise.
  - body: { collaboration_whitelist_entry_id: string }
- `POST https://api.mcp.ai/api/box/remove/email/alias` — Removes an email alias from a user.
  - body: { user_id: string, email_alias_id: string }
- `POST https://api.mcp.ai/api/box/remove/file/version` — Move a file version to the trash. versions are only tracked for box users with premium accounts.
  - body: { file_id: string, file_version_id: string }
- `POST https://api.mcp.ai/api/box/remove/group` — Permanently deletes a group. only users with admin-level permissions will be able to use this api.
  - body: { group_id: string }
- `POST https://api.mcp.ai/api/box/remove/legal/hold/policy` — Delete an existing legal hold policy. this is an asynchronous process. the policy will not be fully deleted yet when the response returns.
  - body: { legal_hold_policy_id: string }
- `POST https://api.mcp.ai/api/box/remove/metadata/cascade/policy` — Deletes a metadata cascade policy.
  - body: { metadata_cascade_policy_id: string }
- `POST https://api.mcp.ai/api/box/remove/metadata/instance/from/file` — Deletes a piece of file metadata.
  - body: { scope: string, file_id: string, template_key: string }
- `POST https://api.mcp.ai/api/box/remove/metadata/instance/from/folder` — Deletes a piece of folder metadata.
  - body: { scope: string, folder_id: string, template_key: string }
- `POST https://api.mcp.ai/api/box/remove/metadata/template` — Delete a metadata template and its instances. this deletion is permanent and can not be reversed.
  - body: { scope: string, template_key: string }
- `POST https://api.mcp.ai/api/box/remove/retention/policy/assignment` — Removes a retention policy assignment applied to content.
  - body: { retention_policy_assignment_id: string }
- `POST https://api.mcp.ai/api/box/remove/shared/link/from/file` — Removes a shared link from a file.
  - body: { fields: string, file_id: string }
- `POST https://api.mcp.ai/api/box/remove/shared/link/from/folder` — Removes a shared link from a folder.
  - body: { fields: string, folder_id: string }
- `POST https://api.mcp.ai/api/box/remove/shared/link/from/web/link` — Removes a shared link from a web link.
  - body: { fields: string, web_link_id: string }
- `POST https://api.mcp.ai/api/box/remove/task` — Removes a task from a file.
  - body: { task_id: string }
- `POST https://api.mcp.ai/api/box/remove/upload/session` — Abort an upload session and discard all data uploaded. this cannot be reversed. the actual endpoint url is returned by the [`create upload session`](e://post-files-upload-sessions) and [`get upload se
  - body: { upload_session_id: string }
- `POST https://api.mcp.ai/api/box/remove/user/domain/exemption` — Removes a user's exemption from the restrictions set out by the allowed list of domains for collaborations.
  - body: { collaboration_whitelist_exempt_target_id: string }
- `POST https://api.mcp.ai/api/box/remove/user/from/group` — Deletes a specific group membership. only admins of this group or users with admin-level permissions will be able to use this api.
  - body: { group_membership_id: string }
- `POST https://api.mcp.ai/api/box/remove/watermark/from/file` — Removes the watermark from a file.
  - body: { file_id: string }
- `POST https://api.mcp.ai/api/box/remove/watermark/from/folder` — Removes the watermark from a folder.
  - body: { folder_id: string }
- `POST https://api.mcp.ai/api/box/remove/web/link` — Deletes a web link.
  - body: { web_link_id: string }
- `POST https://api.mcp.ai/api/box/remove/webhook` — Deletes a webhook.
  - body: { webhook_id: string }
- `POST https://api.mcp.ai/api/box/request/access/token` — Request an access token using either a client-side obtained oauth 2.0 authorization code or a server-side jwt assertion. an access token is a string that enables box to verify that a request belongs t
  - body: { code?: string, scope?: string, resource?: string, assertion?: string, client_id?: string, grant_type: string, actor_token?: string, client_secret?: string, refresh_token?: string, subject_token?: string, box_subject_id?: string, box_shared_link?: string, actor_token_type?: string, box_subject_type?: string, subject_token_type?: string }
- `POST https://api.mcp.ai/api/box/resend/box/sign/request` — Resends a signature request email to all outstanding signers.
  - body: { sign_request_id: string }
- `POST https://api.mcp.ai/api/box/restore/file` — Restores a file that has been moved to the trash. an optional new parent id can be provided to restore the file to in case the original folder has been deleted.
  - body: { name?: string, fields?: string[], file_id: string }
- `POST https://api.mcp.ai/api/box/restore/file/version` — Restores a specific version of a file after it was deleted. don't use this endpoint to restore box notes, as it works with file formats such as pdf, doc, pptx or similar.
  - body: { file_id: string, trashed_at?: string, file_version_id: string }
- `POST https://api.mcp.ai/api/box/restore/folder` — Restores a folder that has been moved to the trash. an optional new parent id can be provided to restore the folder to in case the original folder has been deleted. during this operation, part of the 
  - body: { name?: string, fields?: string[], folder_id: string }
- `POST https://api.mcp.ai/api/box/restore/web/link` — Restores a web link that has been moved to the trash. an optional new parent id can be provided to restore the web link to in case the original folder has been deleted.
  - body: { name?: string, fields?: string[], web_link_id: string }
- `POST https://api.mcp.ai/api/box/review/files/on/legal/hold/policy/assignment` — Get a list of files with current file versions for a legal hold assignment. in some cases you may want to get previous file versions instead. in these cases, use the `get /legal hold policy assignment
  - body: { limit?: integer, fields?: string[], marker?: string, legal_hold_policy_assignment_id: string }
- `POST https://api.mcp.ai/api/box/revoke/access/token` — Revoke an active access token, effectively logging a user out that has been previously authenticated.
  - body: { token?: string, client_id?: string, client_secret?: string }
- `POST https://api.mcp.ai/api/box/search/for/content` — Searches for files, folders, web links, and shared files across the users content or across the entire enterprise.
  - body: { sort?: string, type?: string, limit?: integer, query?: string, scope?: string, fields?: string[], offset?: integer, direction?: string, mdfilters?: object[], size_range?: integer[], content_types?: string[], trash_content?: string, owner_user_ids?: string[], file_extensions?: string[], created_at_range?: string[], deleted_at_range?: string[], deleted_user_ids?: string[], updated_at_range?: string[], ancestor_folder_ids?: string[], recent_updater_user_ids?: string[], include_recent_shared_links?: boolean }
- `POST https://api.mcp.ai/api/box/starts/workflow/based/on/request/body` — Initiates a flow with a trigger type of `workflow manual start`. you application must be authorized to use the `manage box relay` application scope within the developer console.
  - body: { type?: string, files: object[], flow__id?: string, outcomes?: object[], flow__type?: string, folder__id?: string, workflow_id: string, folder__type?: string }
- `POST https://api.mcp.ai/api/box/transfer/owned/folders` — Transfers ownership of a specific folder (with id 0) from one user to another in the box cloud storage system. this endpoint should be used when you need to change the owner of a user's root folder, e
  - body: { fields?: string[], notify?: boolean, user_id: string, owned__by__id?: string }
- `POST https://api.mcp.ai/api/box/unassign/legal/hold/policy` — Remove a legal hold from an item. this is an asynchronous process. the policy will not be fully removed yet when the response returns.
  - body: { legal_hold_policy_assignment_id: string }
- `POST https://api.mcp.ai/api/box/unassign/storage/policy` — Delete a storage policy assignment. deleting a storage policy assignment on a user will have the user inherit the enterprise's default storage policy. there is a rate limit for calling this endpoint o
  - body: { storage_policy_assignment_id: string }
- `POST https://api.mcp.ai/api/box/unassign/task` — Deletes a specific task assignment.
  - body: { task_assignment_id: string }
- `POST https://api.mcp.ai/api/box/update/ai/agent` — Updates an ai agent.
  - body: { name: string, type: string, agent_id: string, ask__type?: string, access_state: string, extract__type?: string, icon_reference?: string, text__gen__type?: string, allowed_entities?: object[], ask__description?: string, ask__access__state?: string, extract__description?: string, extract__access__state?: string, text__gen__description?: string, text__gen__access__state?: string, ask__custom__instructions?: string, extract__custom__instructions?: string, text__gen__custom__instructions?: string }
- `POST https://api.mcp.ai/api/box/update/all/box/skill/cards/on/file` — An alternative method that can be used to overwrite and update all box skill metadata cards on a file.
  - body: { status: string, file__id?: string, skill_id: string, file__type?: string, usage__unit?: string, usage__value?: integer, metadata__cards?: object[], file__version__id?: string, file__version__type?: string }
- `POST https://api.mcp.ai/api/box/update/collaboration` — Updates a collaboration. can be used to change the owner of an item, or to accept collaboration invites.
  - body: { role: string, status?: string, expires_at?: string, can_view_path?: boolean, collaboration_id: string }
- `POST https://api.mcp.ai/api/box/update/comment` — Update the message of a comment.
  - body: { fields?: string[], message?: string, comment_id: string }
- `POST https://api.mcp.ai/api/box/update/file` — Updates a file. this can be used to rename or move a file, create a shared link, or lock a file.
  - body: { name?: string, tags?: string[], fields?: string[], file_id: string, collections?: object[], description?: string, lock__access?: string, disposition_at?: string, lock__expires__at?: string, permissions__can__download?: string, lock__is__download__prevented?: boolean }
- `POST https://api.mcp.ai/api/box/update/file/request` — Updates a file request. this can be used to activate or deactivate a file request.
  - body: { title?: string, status?: string, expires_at?: string, description?: string, file_request_id: string, is_email_required?: boolean, is_description_required?: boolean }
- `POST https://api.mcp.ai/api/box/update/folder` — Updates a folder. this can be also be used to move the folder, create shared links, update collaborations, and more.
  - body: { name?: string, tags?: string[], fields?: string[], folder_id: string, sync_state?: string, collections?: object[], description?: string, can_non_owners_invite?: boolean, can_non_owners_view_collaborators?: boolean, is_collaboration_restricted_to_enterprise?: boolean }
- `POST https://api.mcp.ai/api/box/update/group` — Updates a specific group. only admins of this group or users with admin-level permissions will be able to use this api.
  - body: { name?: string, fields?: string[], group_id: string, provenance?: string, description?: string, invitability_level?: string, external_sync_identifier?: string, member_viewability_level?: string }
- `POST https://api.mcp.ai/api/box/update/group/membership` — Updates a user's group membership. only admins of this group or users with admin-level permissions will be able to use this api.
  - body: { role?: string, fields?: string[], group_membership_id: string, configurable_permissions?: object }
- `POST https://api.mcp.ai/api/box/update/legal/hold/policy` — Update legal hold policy.
  - body: { description?: string, policy_name?: string, release_notes?: string, legal_hold_policy_id: string }
- `POST https://api.mcp.ai/api/box/update/retention/policy` — Updates a retention policy.
  - body: { status?: string, description?: string, policy_name?: string, retention_type?: string, retention_length?: string, disposition_action?: string, are_owners_notified?: boolean, retention_policy_id: string, can_owner_extend_retention?: boolean, custom_notification_recipients?: object[] }
- `POST https://api.mcp.ai/api/box/update/shared/link/on/file` — Updates a shared link on a file.
  - body: { fields: string, file_id: string, shared__link__access?: string, shared__link__password?: string, shared__link__unshared__at?: string, shared__link__vanity__name?: string, shared__link__permissions__can__edit?: boolean, shared__link__permissions__can__preview?: boolean, shared__link__permissions__can__download?: boolean }
- `POST https://api.mcp.ai/api/box/update/shared/link/on/folder` — Updates a shared link on a folder.
  - body: { fields: string, folder_id: string, shared__link__access?: string, shared__link__password?: string, shared__link__unshared__at?: string, shared__link__vanity__name?: string, shared__link__permissions__can__edit?: boolean, shared__link__permissions__can__preview?: boolean, shared__link__permissions__can__download?: boolean }
- `POST https://api.mcp.ai/api/box/update/shared/link/on/web/link` — Updates a shared link on a web link.
  - body: { fields: string, web_link_id: string, shared__link__access?: string, shared__link__password?: string, shared__link__unshared__at?: string, shared__link__vanity__name?: string, shared__link__permissions__can__edit?: boolean, shared__link__permissions__can__preview?: boolean, shared__link__permissions__can__download?: boolean }
- `POST https://api.mcp.ai/api/box/update/shield/information/barrier/segment/with/specified/id` — Update shield information barrier segment with specified id
  - body: { name?: string, description?: string, shield_information_barrier_segment_id: string }
- `POST https://api.mcp.ai/api/box/update/slack/integration/mapping` — Updates a [slack integration mapping](https://support.box.com/hc/en-us/articles/4415585987859-box-as-the-content-layer-for-slack). supports updating the box folder id and options. you need admin or co
  - body: { integration_mapping_id: string }
- `POST https://api.mcp.ai/api/box/update/storage/policy/assignment` — Updates a specific storage policy assignment.
  - body: { storage__policy__id?: string, storage__policy__type?: string, storage_policy_assignment_id: string }
- `POST https://api.mcp.ai/api/box/update/task` — Updates a task. this can be used to update a task's configuration, or to update its completion state.
  - body: { action?: string, due_at?: string, message?: string, task_id: string, completion_rule?: string }
- `POST https://api.mcp.ai/api/box/update/task/assignment` — Updates a task assignment. this endpoint can be used to update the state of a task assigned to a user.
  - body: { message?: string, resolution_state?: string, task_assignment_id: string }
- `POST https://api.mcp.ai/api/box/update/teams/integration/mapping` — Updates a [teams integration mapping](https://support.box.com/hc/en-us/articles/360044681474-using-box-for-teams). supports updating the box folder id and options. you need admin or co-admin role to u
  - body: { integration_mapping_id: string }
- `POST https://api.mcp.ai/api/box/update/terms/of/service` — Updates a specific terms of service.
  - body: { text: string, status: string, terms_of_service_id: string }
- `POST https://api.mcp.ai/api/box/update/terms/of/service/status/for/existing/user` — Updates the status for a terms of service for a user.
  - body: { is_accepted: boolean, terms_of_service_user_status_id: string }
- `POST https://api.mcp.ai/api/box/update/user` — Updates a managed or app user in an enterprise. this endpoint is only available to users and applications with the right admin permissions.
  - body: { name?: string, role?: string, login?: string, phone?: string, fields?: string[], notify?: boolean, status?: string, address?: string, user_id: string, language?: string, timezone?: string, job_title?: string, enterprise?: string, space_amount?: integer, tracking_codes?: object[], is_sync_enabled?: boolean, external_app_user_id?: string, can_see_managed_users?: boolean, is_password_reset_required?: boolean, notification__email__email?: string, is_exempt_from_device_limits?: boolean, is_external_collab_restricted?: boolean, is_exempt_from_login_verification?: boolean }
- `POST https://api.mcp.ai/api/box/update/web/link` — Updates a web link object.
  - body: { url?: string, name?: string, description?: string, web_link_id: string, shared__link__access?: string, shared__link__password?: string, shared__link__unshared__at?: string, shared__link__vanity__name?: string }
- `POST https://api.mcp.ai/api/box/update/webhook` — Updates a webhook.
  - body: { address?: string, triggers?: string[], target__id?: string, webhook_id: string, target__type?: string }
- `POST https://api.mcp.ai/api/box/upload/file` — Uploads a small file to box. for file sizes over 50mb we recommend using the chunk upload apis. the `attributes` part of the body must come **before** the `file` part. requests that do not follow this
  - body: { file?: object, fields?: string[], attributes?: object }
- `POST https://api.mcp.ai/api/box/upload/file/version` — Update a file's content. for file sizes over 50mb we recommend using the chunk upload apis. the `attributes` part of the body must come **before** the `file` part. requests that do not follow this for
  - body: { file?: object, fields?: string[], file_id: string, attributes?: object }
- `POST https://api.mcp.ai/api/box/upload/part/of/file` — Uploads a chunk of a file for an upload session. the actual endpoint url is returned by the [`create upload session`](e://post-files-upload-sessions) and [`get upload session`](e://get-files-upload-se
  - body: { file?: object, upload_session_id: string }

## More
- Page: https://mcp.ai/box
- Agent spec (llms.txt): https://mcp.ai/box/llms.txt
- Postman collection: https://mcp.ai/box/postman.json