Box MCP
Search, retrieve, analyze, and manage enterprise content stored in Box through Box's hosted MCP server.
Verdict
Common use cases
- Summarize contract terms from Box PDFs
- Find design files by client name
- Pull meeting notes into sprint planning
- Search shared folders for compliance docs
- Preview file metadata before downloading
Integration
- Vendor
- Box MCP
- Category
- other
- Auth
- OAUTH2
- Composio slug
box_mcp
Tools
Setup
Setup guide
- 11. Open your Switchy workspace and navigate to Settings > Integrations. 2. Find Box MCP in the catalog and click Connect. 3. You'll be redirected to Box's OAuth consent screen — sign in with your Box account. 4. Grant read access to files and folders (Box will list the specific scopes requested). 5. After approving, you'll return to Switchy and see a green checkmark next to Box MCP. 6. Open any Project and type '@Box' to confirm the connection — try asking it to list recent files or search for a document by name. 7. If the MCP responds with file metadata or content, setup is complete.
What teammates see: by default, memories from Box MCP are scoped to the Project (PROJECT visibility) - you can mark any memory PRIVATE or share it ORG-wide.
Works well with
Top models
Compatibility data appears once enough Projects have used this MCP together with a given model.
How Switchy teams use it
Starter prompts
Summarize Contract Terms
@Box find the MSA with Acme Corp in the Legal folder and summarize payment terms, termination clauses, and renewal dates.
Locate Client Assets
@Box search for all files in the Acme folder modified in the last 30 days and list their names and last editors.
Pull Meeting Notes
@Box get the content of the Q1 Planning Notes document in the Team Meetings folder and highlight action items.
Audit Shared Folders
@Box show me all files in the HR Policies folder, including who last modified each one and when.
Preview File Metadata
@Box find the latest version of the Product Roadmap deck and tell me its file size, last modified date, and current owner.
Example outputs
Illustrative - representative of the model's voice and quality, not literal recordings.
@Box search for all PDF files in the Legal folder modified in the last 30 days
Found 12 PDF files in Legal/ modified since January 15: • Contract_Amendment_2024.pdf (142 KB, modified Jan 28) • NDA_Template_v3.pdf (89 KB, modified Jan 22) • Compliance_Report_Q1.pdf (1.2 MB, modified Jan 18) • [9 more files] All files are accessible with your current permissions. The largest file is the Q1 compliance report at 1.2 MB. This search covered 847 total items in the Legal folder tree.
This example shows file search and metadata retrieval. Box's search indexes content and filenames, but results depend on your folder permissions — files you can't access won't appear. Search may lag behind very recent uploads by a few minutes.
@Box create a shared link for the Q4_Budget_Final.xlsx file with view-only access that expires in 7 days
Created shared link for Q4_Budget_Final.xlsx: https://app.box.com/s/a8k3m9x2p7q1w5e4r6t8y0u2i4o6p8a0 Settings applied: • Access: View only (no download) • Expires: February 21, 2025 at 11:59 PM PST • Password: None Anyone with this link can view the file until expiration. The file owner will receive email notifications if the link is accessed more than 10 times in 24 hours.
This demonstrates link generation with access controls. The MCP can create links but requires write permissions on the file. Be aware that 'view only' still allows screenshots — true DLP requires Box's enterprise governance features, which the MCP doesn't configure.
@Box list all comments on the Project_Roadmap.docx file and summarize the main concerns raised by reviewers
Retrieved 8 comments on Project_Roadmap.docx from 4 reviewers: Main concerns: • Timeline feasibility: 3 reviewers flagged Q2 milestones as aggressive given current resource allocation • Budget clarity: 2 comments requested line-item breakdown for the $450K infrastructure spend • Stakeholder sign-off: 1 comment noted missing approval from the compliance team before Phase 2 Most recent comment (Sarah Chen, Jan 29): 'Can we push the API launch to July instead of May?' No replies yet.
This pairs Box's comment retrieval with AI synthesis. The summary reflects comment content at query time — Box doesn't version comments, so edits or deletions after this point won't update the analysis. Requires read access to both the file and its comment thread.
Use-case deep-dives
When Box MCP makes sense for legal file handoffs
A 6-person legal ops team shares NDAs and MSAs with outside counsel through Box folders. The MCP lets AI pull the latest redline from a shared folder without switching tabs or asking someone to forward the link. OAuth2 means each team member authenticates once and the AI sees only what they're allowed to see in Box. This works when your contract volume is under 50 files per week and the folder structure is stable. If you're juggling hundreds of active deals or counsel rotates frequently, the overhead of managing Box permissions per engagement starts to outweigh the convenience. For small legal teams with a consistent external roster, Box MCP turns file retrieval into a one-line prompt instead of a Slack thread.
Box MCP for pitch deck updates at deal velocity
A 4-person sales team closes 8-12 deals per quarter and stores pitch decks in Box with version history enabled. The MCP lets AI fetch the current deck, compare it to last quarter's version, and draft a changelog for the VP of Sales. OAuth2 keeps each rep's access scoped to their territory folders. This scenario breaks down when deck count exceeds 30 active files or when reps customize heavily per prospect—Box's flat folder model doesn't capture deal context the way a CRM does. If your team sends the same 3-5 decks with minor tweaks and you need AI to spot what changed between board meetings, Box MCP saves the manual diff work. For high-customization sales motions, a CRM integration handles context better.
When Box MCP streamlines new hire file access
A 10-person remote startup stores onboarding checklists, benefits PDFs, and equipment guides in a Box folder that HR updates monthly. The MCP lets AI answer new hire questions by pulling the latest policy doc without HR manually attaching files to every Slack DM. OAuth2 means the AI respects folder permissions—contractors see the contractor handbook, full-timers see equity docs. This works when onboarding volume is under 5 hires per month and the doc set is under 20 files. If you're scaling past 15 hires per quarter or docs live across Box, Notion, and Google Drive, a dedicated onboarding platform with native search beats stitching MCP calls together. For small teams with a single source of truth in Box, the MCP turns HR file requests into answered prompts.
Frequently asked
What does the Box MCP do in Switchy?
It connects your Box account so AI assistants in Switchy can read, search, and reference files stored in Box. Since no tools are exposed yet in this integration, you're limited to whatever the MCP server implements — typically file retrieval and metadata queries. You won't get full Box API coverage out of the box.
Do I need admin permissions to connect Box via OAuth?
Not necessarily. OAuth scope requirements depend on what the Box MCP requests, but most read-only integrations work with standard user accounts. If the MCP needs to create folders or modify sharing settings, you'll need elevated permissions. Check the consent screen during setup to see exactly what it's asking for.
Can the Box MCP upload files or change folder permissions?
That depends entirely on which tools the MCP server exposes. Right now this integration shows zero tools captured, so we can't confirm write capabilities. If you need uploads or permission changes, verify the MCP's documentation or test it in a sandbox workspace first before rolling it out to your team.
Why use this instead of just attaching Box files manually?
The MCP lets AI assistants query Box autonomously — searching across folders, pulling metadata, or grabbing the latest version of a doc without you copy-pasting links. If your workflow involves referencing dozens of Box files per conversation, the MCP saves time. For one-off attachments, manual uploads are simpler.
Who on my team should connect the Box account?
Whoever owns the Box folders your team needs to reference. If you're sharing a Switchy workspace, one person's OAuth token grants access to their Box view — so pick someone with permissions to the relevant files. You can't mix multiple Box accounts in a single Switchy workspace yet.