Agent Skills to help developers using AI agents work with Box. Whether you're building Box integrations in code, working with Box content via MCP tools, configuring webhooks, or using Box AI retrieval — this plugin gives your assistant the context it needs to do it right.
The skills in this repo follow the Agent Skills format and can also be installed as a plugin for platforms like Codex, Cursor, and Claude Code.
npx skills add box/box-for-aiCheck out the latest and full list of skills here.
This repo can also be installed as a plugin for supported platforms. You configure the Box MCP server connection through your platform's MCP settings — see the setup guide for your platform below.
| Platform | Setup guide |
|---|---|
| Codex | .codex-plugin/README.md |
| Cursor | .cursor-plugin/README.md |
| Claude Code | .claude-plugin/README.md |
Skills are automatically available once installed. The agent will use them when relevant tasks are detected. Here are some example prompts:
Add Box file upload to my app
Create a shared link for this folder
Set up Box webhooks for new file events
Search my Box account for invoices
Use Box AI to classify documents
Wire webhooks to process new uploads
Debug 401 errors with my Box JWT auth
Fix webhook signature verification
The Box skill follows the Agent Skills Open Standard:
SKILL.md- Skill manifest with frontmatter, routing table, workflow steps, and guardrailsreferences/- Individual reference files (auth, content workflows, MCP tool patterns, AI/retrieval, etc.)examples/- Example prompts
- Box CLI (optional) — Install from developer.box.com/guides/cli for CLI-first verification.
- BOX_ACCESS_TOKEN (optional) — For direct REST verification when Box CLI is unavailable.
Preferred order for agent tooling is MCP first, Box CLI second, and direct REST only as a last-resort fallback.
# With Box CLI installed and authenticated:
box users:get me --json
box folders:items 0 --json --max-items 5
# Last-resort fallback (for sessions where MCP/CLI are unavailable):
export BOX_ACCESS_TOKEN="your-token"
curl -sS -H "Authorization: Bearer $BOX_ACCESS_TOKEN" -H "Accept: application/json" "https://api.box.com/2.0/folders/0"Skills follow the Agent Skills specification. The Box skill is a directory with a SKILL.md file containing YAML frontmatter and markdown instructions, plus a references/ directory for feature-specific deep dives.
MIT