The server itself exposes 54 tools, and some of them can write to your Box account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches Box.

How is this different from connecting Box MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the Box MCP API changes?

We track the Box MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different Box tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in Box?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the Box MCP server myself?

No. TrustGate connects to the Box MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to Box directly.

Connect Box MCP to your AI agents, securely.

One secured endpoint for every Box call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try Box MCP now

What your agents can ask once Box MCP is connected.

Select the tools your AI agents can call

54 tools from the Box MCP schema.

Showing 54 tools

list_folder_content_by_folder_idreadLists files, folders and web links contained in a folder, with pagination.
create_folderwriteCreates a new folder in Box.
who_am_ireadReturns detailed information about the currently authenticated Box user.
get_download_urlreadIssues a temporary, single-use URL for downloading a binary file from Box.
get_file_contentreadReturns the content of a file stored in Box.
get_file_detailsreadReturns detailed file information from Box, including metadata, permissions, and version details.
get_file_previewreadReturns the preview widget for a file stored in Box.
get_folder_detailsreadRetrieves detailed folder information, including metadata, permissions, and collaboration settings.
copy_filewriteCopies an existing file to a destination folder in Box.
copy_folderwriteCopies an existing folder to a destination parent folder in Box.
get_upload_urlwriteIssues a temporary, single-use URL for uploading a binary file to Box.
move_filewriteMoves an existing file to a destination folder in Box; the file ID stays the same.
move_folderwriteMoves a folder to a new parent folder in Box; the folder ID stays the same.
update_file_propertieswriteUpdates file properties, including name, description, tags and collections.
update_folder_propertieswriteUpdates folder properties, including name, description, tags and collections.
upload_filewriteUploads a new file to Box.
upload_file_versionwriteUploads a new file version by providing the entire file contents to update an existing file in Box.
search_files_keywordreadSearches for files, folders and web links in Box by keyword, with filtering by type, date and content.
search_files_metadatareadSearches for files using SQL-like metadata template queries.
search_folders_by_namereadSearches for folders in Box by name using keyword matching.
ai_qa_single_filereadAsks a question about a single file using Box AI.
ai_qa_multi_filereadAsks a question about multiple files using Box AI, with citations where available.
ai_qa_hubreadAsks a question about the contents of a Box Hub using Box AI.
ai_extract_freeformreadExtracts metadata from files using Box AI with natural-language prompts, with no fixed template.
ai_extract_structuredreadExtracts structured key-value metadata via the Box AI Enhanced Extract Agent from custom field definitions.
ai_extract_structured_from_fieldsreadExtracts structured metadata from files using Box AI and custom field definitions.
ai_extract_structured_from_fields_enhancedreadExtracts structured metadata using the Enhanced Extract Agent and custom field definitions. Costs more than the standard extract tools.
ai_extract_structured_from_metadata_templatereadExtracts structured metadata from files using an existing Box metadata template.
ai_extract_structured_from_metadata_template_enhancedreadExtracts structured metadata using an existing metadata template and the Enhanced Extract Agent. Costs more than the standard extract tools.
get_hub_itemsreadGets the files and folders associated with a specific Hub.
add_items_to_hubwriteAdds files, folders or web links to a specific Hub.
list_item_collaborationsreadLists all existing collaborations on an item.
add_file_shared_linkhigh riskCreates or updates a shared link for a Box file; can create open links or add collaborators from outside the organization.
add_folder_shared_linkhigh riskCreates or updates a shared link for a Box folder; can create open links or add collaborators from outside the organization.
create_collaborationhigh riskInvites a user or group to a file, folder or hub; can add collaborators from outside the organization.
update_collaborationhigh riskUpdates a file, folder or hub collaboration, such as the collaborator's role.
get_hub_detailsreadRetrieves detailed information about a specific hub.
list_hubsreadLists all hubs that the authenticated user can access.
copy_hubwriteCreates a copy of an existing hub, including its structure and settings, without modifying the original.
create_hubwriteCreates a new Box hub.
update_hubwriteUpdates the title and description of a hub.
create_metadata_templatewriteCreates an enterprise metadata template with its display name and fields.
set_file_metadatawriteCreates or updates custom metadata on a file for a given metadata template.
list_metadata_templatesreadLists available Box metadata templates (enterprise or global).
get_metadata_template_schemareadReturns the schema and field keys for a metadata template.
set_folder_metadatawriteCreates or updates custom metadata on a folder for a given metadata template.
update_metadata_templatewriteUpdates a metadata template using schema operations such as adding, editing and removing fields.
list_file_commentsreadLists all comments on a file.
list_tasksreadLists all tasks for a file, including status, message, and due dates.
create_file_commentwriteCreates a comment on a file.
get_docgen_template_by_idreadRetrieves details about a Doc Gen template.
list_docgen_templatesreadLists all Box Doc Gen templates that the authenticated user can access.
create_docgen_batchwriteGenerates documents from a Doc Gen template by filling placeholder tags with provided data.
create_docgen_templatewriteMarks a Box file (.docx or .pptx) as a Doc Gen template for automated document generation.

What Box MCP exposes

Box MCP groups its 54 tools into 8 categories, each with a suggested starting policy.

All 54 tools as JSON, ready to paste.

Category	Covers	Access	Suggested policy
Files & Folders	Folder contents, file and folder details, creation, moves, copies and deletion	Read / Write	Require approval before deleting; scope the folders in use
Search	Keyword search, metadata queries, folder name search and recent items	Read	Prefer user content scope over enterprise content
Box AI	Question answering over one or many files and over Hubs, plus text generation	Read	Treat AI answers as derived from sensitive content
AI Extraction	Freeform and structured metadata extraction, by fields or metadata template, standard and enhanced	Read	Enhanced extract agents cost more than the standard tools
Hubs & Sharing	Hub items, adding items to a hub, and shared link management	Read / Write	Require approval before creating shared links
Metadata	Metadata templates, template schemas and custom metadata on files and folders	Read / Write	Allow reads; review template changes, which affect the whole enterprise
Comments & Tasks	File comments and tasks	Read / Write	Allow reading; review new comments
Doc Gen	Box Doc Gen templates and batch document generation	Read / Write	Allow listing; review template creation and batch generation

Connect Box MCP to your AI agent

Four steps, under ten minutes.

01
Sign in to NeuralTrust
Open the NeuralTrust platform, sign in and go to Getting started, then Connect your tools.
02
Choose your agent
When asked which agent you use, pick Claude Code, Codex, Cursor, Windsurf, Copilot or your own code.
03
Connect Box
Find Box in the tool list and connect it.
04
Connect your agent
Follow the steps on screen to add the config to your agent, then send the test prompt.

Permissions down to the single tool

You do not allow Box MCP or block it. You allow the exact tools each agent can call, one by one.

Box MCP	54 TOOLS AVAILABLE
Code review agent	4 tools, read only
Issue triage bot	9 tools
Platform team assistant	all 54 tools

Tool by toolConnecting the server is not the unit of access. Each tool is granted on its own.
Default denyA tool you have not enabled is never exposed to the agent.
Approval on writesTools that change or delete things can require a human to confirm.

Is Box MCP secure?

One endpoint instead of raw credentials. Every call is checked against policy and logged.

AI agentsConnect through your MCP client configuration.	NeuralTrustApply controls based on your configuration.	Box MCP54 documented tools.
Coding assistants	Connection & credentialsper user	Files & Folders17 tools
Internal copilots	Tool access policiesdeny by default	Hubs & Sharing12 tools
Workflow automations	Request & response inspectioninline	AI Extraction6 tools
Compatible MCP clients	Activity monitoringalerts and logs	All other tools19 tools