Box MCP Server logo

Box MCP Server

by hmk

Connects AI agents to Box for file search and reading, including PDF and Word documents.

Install Box MCP Server

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "hmk-box-mcp-server": {
      "command": "npx",
      "args": [
        "box-mcp-server"
      ],
      "env": {
        "BOX_USER_ID": "YOUR_VALUE_HERE",
        "BOX_JWT_BASE64": "YOUR_VALUE_HERE",
        "BOX_JWT_CONFIG_PATH": "YOUR_VALUE_HERE",
        "BOX_JWT": "YOUR_VALUE_HERE",
        "BOX_DEV_TOKEN": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

Install not yet sandbox-tested— we haven't run this command through our automated sandbox yet. Not a red flag; we're working through the catalog.

Overview

hmk/box-mcp-server MCP server connects MCP-compatible clients to Box for searching and reading files. It authenticates with Box using a developer token or JWT-based configuration, then exposes file content to an agent through MCP. PDF and Word files are supported, while other file types are not listed as supported. Use it when an agent needs to locate and inspect documents stored in Box.

Use cases

  • Search Box files for relevant documents
  • Read PDF content from Box
  • Inspect Word documents through an AI client
  • Connect a Claude Desktop workflow to Box

Key features

  • Searches files in Box
  • Reads files from Box
  • Supports PDF documents
  • Supports Word documents
  • Uses Box developer tokens or JWT authentication
  • Runs through the MCP standard input/output process

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 3d ago

Recent health check succeeded.

18/18 checks healthy over the last 79d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 1d ago via OSV.dev · box-mcp-server (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars11Stargazers on the source repository.
npm downloads270Package downloads in the last 30 days.
Last commit1y agoMost recent push to the default branch.
Directory activity5 viewsConfig copies, upvotes, and views on AllMCPs.

How Box MCP Server works

What hmk/box-mcp-server does

hmk/box-mcp-server MCP server gives an MCP client access to selected Box file operations. Its documented capabilities are searching for files and reading files. The repository specifically marks PDF and Word support as available; support for other file formats is not indicated.

This is intended for workflows where an AI agent needs to find documents in a Box account and inspect their contents. It does not document file creation, updates, deletion, folder management, or general Box administration, so those operations should not be assumed.

How it works

The package runs as an MCP process and can be launched with npx box-mcp-server. An MCP client starts the process and supplies authentication values through its environment. The server then uses those credentials to connect to Box and handle file search or read requests.

Authentication can use a Box developer token or JWT authorization. A developer token is described as the simplest option, but it expires after 60 minutes. JWT authorization is recommended for a persistent connection and requires configuration in the Box Developer Console, including application access settings and the ability to make API calls with the as-user header.

Setup and configuration

To run hmk/box-mcp-server MCP server, configure the required Box credentials in the client’s MCP server definition or environment. JWT-based setups require BOX_USER_ID plus one of BOX_JWT_BASE64, BOX_JWT_CONFIG_PATH, or BOX_JWT.

A Claude Desktop configuration starts the package with the npx command and passes credentials under env. For JWT configuration, a local Box JWT configuration file can be Base64-encoded and assigned to BOX_JWT_BASE64. Box application setup requires a paid enterprise account or a free developer account, followed by creation and authorization of an application in the Box Developer Console.

For local development, the repository documents Node.js, npm, git, and dotenv as prerequisites. The development flow includes installing dependencies, running the watch script, and launching the built dist/index.js through the MCP Inspector.

Tools and capabilities

The documented operations are:

  • Search for files in Box.
  • Read files stored in Box.
  • Process PDF documents.
  • Process Word documents.

Confirm those details in the implementation before building a workflow that depends on them.

Limitations and notes

Developer-token authentication is temporary and lasts 60 minutes, making it less suitable for long-lived connections. JWT authentication has more setup requirements, including Box application authorization and public/private key configuration.

PDF and Word files are explicitly marked as supported. Other file types are marked unsupported or unspecified in the capability checklist. Client configuration examples are provided for Claude Desktop; other MCP clients may require their own configuration format.

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Box MCP Server

hmk/box-mcp-server is an MCP server that connects MCP-compatible AI clients to Box. Its main tools let agents search for files and read file contents, with documented support for PDF and Word documents. It authenticates through a Box developer token or JWT configuration and can run from an npx command.

Run it with `npx box-mcp-server` from an MCP client configuration. For repository development, install Node.js, npm, git, and dotenv, clone the repository, run `npm install`, and use the documented watch and MCP Inspector commands.

Use either `BOX_DEV_TOKEN` or JWT credentials. JWT setups require `BOX_USER_ID` and one of `BOX_JWT_BASE64`, `BOX_JWT_CONFIG_PATH`, or `BOX_JWT`. A developer token is easier to configure but expires after 60 minutes.

Related MCP servers

Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewBox MCP Server AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/hmk-box-mcp-server?style=directory)](https://allmcps.com/mcp/hmk-box-mcp-server)
HTML Embed
<a href="https://allmcps.com/mcp/hmk-box-mcp-server"><img src="https://allmcps.com/api/badge/hmk-box-mcp-server?style=directory" alt="Box MCP Server on AllMCPs" /></a>