Box

Box Agent Skills

Agent Skills to help developers using AI agents work with Box. Whether you're building Box integrations in code, working with Box content via MCP tools, configuring webhooks, or using Box AI retrieval — this plugin gives your assistant the context it needs to do it right.

The skills in this repo follow the Agent Skills format and can also be installed as a plugin for platforms like Codex, Cursor, and Claude Code.

Installation

As an Agent Skill

npx skills add box/box-for-ai

Check out the latest and full list of skills here.

As a Platform Plugin

This repo can also be installed as a plugin for supported platforms. You configure the Box MCP server connection through your platform's MCP settings — see the setup guide for your platform below.

Usage

Skills are automatically available once installed. The agent will use them when relevant tasks are detected. Here are some example prompts:

Implement Box content workflows

Add Box file upload to my app

Create a shared link for this folder

Set up Box webhooks for new file events

Build document-driven flows

Search my Box account for invoices

Use Box AI to classify documents

Wire webhooks to process new uploads

Troubleshoot integrations

Debug 401 errors with my Box JWT auth

Fix webhook signature verification

Skill Structure

The Box skill follows the Agent Skills Open Standard:

• SKILL.md - Skill manifest with frontmatter, routing table, workflow steps, and guardrails
• references/ - Individual reference files (auth, content workflows, MCP tool patterns, AI/retrieval, etc.)
• examples/ - Example prompts

Prerequisites

• Box CLI (optional) — Install from developer.box.com/guides/cli for CLI-first verification.
• BOX_ACCESS_TOKEN (optional) — For direct REST verification when Box CLI is unavailable.

Quick Verification

Preferred order for agent tooling is MCP first, Box CLI second, and direct REST only as a last-resort fallback.

# With Box CLI installed and authenticated:
box users:get me --json
box folders:items 0 --json --max-items 5

# Last-resort fallback (for sessions where MCP/CLI are unavailable):
export BOX_ACCESS_TOKEN="your-token"
curl -sS -H "Authorization: Bearer $BOX_ACCESS_TOKEN" -H "Accept: application/json" "https://api.box.com/2.0/folders/0"

Contributing

Skills follow the Agent Skills specification. The Box skill is a directory with a SKILL.md file containing YAML frontmatter and markdown instructions, plus a references/ directory for feature-specific deep dives.

License

MIT