Box

§1What it does

The box-community MCP server connects agents to Box for file search, reading content, Box AI queries and folder management.

§2Setup

# Clone and run with uv; see README:
# https://github.com/box-community/mcp-server-box

Snippets adapted from the official documentation. Check the official page for current options and auth requirements.

§2bWhen you disconnect

1. Removed locallyClear the sign-in or remove the server in your MCP client (for example claude mcp logout or claude mcp remove in Claude Code, or log out of the server in Cursor). This only deletes the client's copy of the tokens.
2. Authorization revokedFind Box (community)'s connected-apps / authorized applications page and revoke the grant there. We haven't found an official page for it yet. This is what stops the refresh token; clearing the client alone is not enough.

Why both steps: OAuth token refresh in the security checklist.

§3Prompts to try

1. “Find the latest signed contract with Acme in Box and summarize it.”Copy