Box MCP server

Securely connect AI agents to enterprise content

Ground your agents in business context

Deliver the business context your agents need to be effective without constantly uploading sensitive files to various AI tools. The Box MCP server provides AI tools with secure access to content, connecting third-party agents to your enterprise knowledge in Box. This allows agents to perform advanced search, multi-file analysis, and metadata extraction across your files, delivering richer context for more intelligent and responsive agentic experiences.

Unify your agentic ecosystem with a secure content layer

Seamlessly connect your entire agentic ecosystem with Box as the secure content layer. Integrate with platforms like Claude, Microsoft Copilot Studio, and Salesforce Agentforce so your content is actionable and ready to power critical business decisions and workflows.

Enforce security and granular permission controls

Our secure, governable bridge gives you the confidence to connect your AI ecosystem to your most valuable content, boosting productivity without exposing sensitive IP. OAuth authentication and granular permissions ensure agents respect existing access policies, validating every interaction to give you complete control over how your content is used.

Our latest integration with Box lets Claude customers securely access their Box content via the Box MCP server. This seamless, standardized connection allows users to instantly search, summarize, and interact with their enterprise content, making complex analysis across multiple documents and files possible in real time, all without leaving Claude.

– Dan Rosenthal, Head of GTM Partnerships, Anthropic

A secure content layer for your agentic ecosystem

Connect with the Box MCP server for secure agent access to content. More coming soon.

FAQs

What is the Box MCP server?

The Box MCP server is a secure gateway that connects external AI agents to enterprise content in Box. It enables agent-based document access, search, and analysis while preserving your Box security policies. The remote Box MCP server is hosted by Box and the self-hosted Box MCP server is a Python project that can be used by developers.

How does the Box MCP server enable security?

The Box MCP server acts as a single, governed bridge — enforcing Box’s native permissions and governance rules. An AI agent can only access the specific content to which its user is authorized.

What can I do with the Box MCP server and AI agents?

With the Box MCP server, you can enable AI agents to search across Box, extract insights from multiple files, apply metadata, and power more intelligent user experiences without custom integrations. More tools will be added to the Box MCP server over time. See a full list of tools for the remote Box MCP server here and the self-hosted Box MCP server here.

What AI systems can I connect to Box with MCP?

The Box MCP server supports secure connections to Anthropic Claude, Microsoft Copilot Studio, Microsoft Azure API Center, Mistral Le Chat, and coming soon for Salesforce Agentforce and GitHub Copilot. Additionally, developers can use the self-hosted Box MCP server to build custom agents and use them in their local applications, like Cursor.

What tools are available with the Box MCP server?

The Box MCP server has a growing set of tools that enable things like authentication, search, asking questions from files and Hubs, and data extraction. See a full list of tools for the remote Box MCP server here and the self-hosted Box MCP server here.