Box MCP server | Atomicwork

Connect the Box MCP server

Connect the Box MCP server to Atomicwork to automate file management and document workflows.

Integrate the Box MCP (Model Context Protocol) server with Atomicwork to give your AI Coworkers and automated workflows access to a comprehensive suite of cloud content management and collaboration tools. By connecting this server, your AI Workforce can securely interact with your Box environment to manage files, automate document workflows, and execute administrative tasks directly within your workspace.

Understand the prerequisites

Before you begin the setup, ensure that you have the following access:

Atomicwork admin access: You need organization admin access in Atomicwork to configure integrations in the MCP store.
Box admin access: You need administrator access in Box to authorize the OAuth connection.

Please note that Box is unique compared to other integrations. You can control tool access in two places: within Atomicwork and directly inside your Box account by going to Box account → Integrations → Box MCP Server.

Connect the Box MCP server

The Box MCP integration uses a secure OAuth flow to establish a connection. Follow these steps to set up the integration:

Go to AI Workforce > AI Registry > MCP store > Box in your Atomicwork account.
Click the Box tile and select Connect.
Complete the OAuth authorization flow in the window that appears by logging in with your Box administrator credentials and authorizing the connection.

Once the setup is complete, Atomicwork displays the list of all available Box tools on your screen. The available tools list depends on your software platform configuration and can be updated as needed.

Category	Scope	Usecase
Content actions	Read all files and folders	View, download, and read metadata for files/folders the token’s user can access. Underlying scope: root_readonly.
	Write all files and folders	Create, upload, edit, move, rename, copy, delete, and share files/folders. Read is auto-required because most write operations also read. Underlying scope: `root_readwrite`.
	Manage signature requests	Create and manage Box Sign signature requests via the Box Sign endpoints.
	Manage AI	Call the Box AI endpoints (ask/Q&A, text generation, and extract against your content).
Administrative actions	Manage users	Create, update, and delete managed users — change primary login, reset passwords, change roles. The “manage users” scope in the Developer Console maps to two OAuth scopes (managed users + app users). Requires an Admin/Co-Admin token for managed users; JWT apps need App + Enterprise access.
	Manage groups	Create, update, and delete groups, as well as manage group membership.
	Manage retention policies	Create and manage retention policies. This requires the Box Governance add-on and an admin token.
	Manage enterprise properties	View the enterprise event stream, view and edit the enterprise’s attributes and reports, and edit and delete device pins.
Developer Actions	Manage webhooks	Create, update, list, and delete V2 webhooks for your app.
	Enable integrations	Lets the app use Box’s integration endpoints / integration mappings (e.g., connecting Box content to third-party integrations).
	Manage Box Relay	Use the Box Relay endpoints to start and manage automated workflows. Relay is a separate product capability and may require the corresponding add-on/license.

Configure AI Coworker and builder access

After completing the setup, you can control which tools your AI Coworkers can use. This allows you to practice the principle of least privilege by granting only the necessary capabilities to each agent. To configure tool access, follow these steps:

Go to AI Workforce > AI Coworkers > Tools in your Atomicwork dashboard.
Select the specific AI Coworker you want to configure. If you need to create a new agent first, see our guide on setting up an AI Coworker.
Grant granular or complete access to the available Box tools based on your operational requirements.

In addition to standard AI Coworkers, the AI Assist workflow builder and the coding agent automatically have access to the Box MCP server while building workflows and writing custom code scripts respectively.

Explore broad tool categories

Once connected, the Box MCP server exposes a wide range of capabilities. These tools are grouped into four main categories:

Content & Collaboration — the core file/folder/sharing surface (the largest bucket)
AI, Metadata & Skills — Box AI, metadata templates/taxonomies, skill cards
Administration & Platform — users, groups, enterprise settings, integrations, webhooks, workflows, auth
Security, Governance & Compliance — retention, legal holds, Shield barriers, classifications, domain restrictions

Next steps

Now that you have connected Box, you can explore other file-storage integrations. See our guide on connecting the Google Drive MCP server to compare features, or learn how to connect the DocuSign MCP server for advanced e-signature workflows.