com.mcparmory/box
PYPI · MCPARMORY-BOX · 2 COMPONENTS · SCANNED SEP 20
Manage files, folders, and team collaboration with access controls
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security87
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- Install-script risk not yet assessed.Unverified
- 2 of 46 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency32
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- License check failed: the license (MIT License) isn't a recognized OSI-approved license. See how to fix → Fail
- Actively maintained (last published 131 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability74
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 34690 tokens (~141/item across 246 items; 246 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management87
- Stability observed for 26 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety98
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 41 of 44 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "transfer_user_folders" implies "transfer" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Partial
- An AI judge read all 246 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the com.mcparmory/box MCP server?
com.mcparmory/box runs locally as a PyPI package, launched with uvx mcparmory-box. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · mcparmory-box
claude mcp add com-mcparmory-box -- uvx mcparmory-box
{
"mcpServers": {
"com-mcparmory-box": {
"command": "uvx",
"args": [
"mcparmory-box"
]
}
}
} {
"servers": {
"com-mcparmory-box": {
"command": "uvx",
"args": [
"mcparmory-box"
]
}
}
} codex mcp add com-mcparmory-box -- uvx mcparmory-box
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-mcparmory-box": {
"type": "local",
"command": [
"uvx",
"mcparmory-box"
],
"enabled": true
}
}
} openclaw mcp add com-mcparmory-box --command uvx --arg mcparmory-box
mcp_servers:
com-mcparmory-box:
command: "uvx"
args: ["mcparmory-box"] {
"McpServers": {
"com-mcparmory-box": {
"Transport": "stdio",
"Command": "uvx",
"Arguments": [
"mcparmory-box"
]
}
}
} assistant mcp add com-mcparmory-box -t stdio -c uvx -a mcparmory-box
{
"mcpServers": {
"com-mcparmory-box": {
"command": "uvx",
"args": [
"mcparmory-box"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +16
- Malware scan: unverified → pass ▲ security
- 18 Sept 26 −3
- Stability: pass → 0.80 functional
- 17 Sept 26 −14
- Malware scan: pass → unverified ▼ security
- Stability: 0.97 → pass security
- 15 Sept 26 +16
- Malware scan: unverified → pass ▲ security
- 14 Sept 26 −15
- Malware scan: pass → unverified ▼ security
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +15
- Malware scan: unverified → pass ▲ security
- 11 Sept 26 −18
- Malware scan: pass → unverified ▼ security
- Stability: pass → 0.80 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed pypi/mcparmory-box@1.0.5
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | pypi |
Background: How many MCP packages publish verified provenance →
Dependencies 46 packages
| Packages resolved | 46 |
|---|---|
| Stale | 1 |
| No linked repository | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
delete_file_request Delete File Request ~71
Permanently deletes a specified file request from Box. This action is irreversible and removes the file request and its associated upload link.
| Name | Type | Req | Description |
|---|---|---|---|
| file_request_id | string | yes | The unique identifier of the file request to delete. This ID can be found in the URL of the file request builder in the Box web application. |
No output schema declared.
No examples provided.
delete_file_version Delete File Version ~110
Moves a specific version of a file to the trash, effectively removing it from the version history. Version tracking is only available for Box accounts with premium subscriptions.
| Name | Type | Req | Description |
|---|---|---|---|
| file_id | string | yes | The unique identifier of the file whose version will be deleted. The file ID can be found in the URL when viewing the file in the Box web application. |
| file_version_id | string | yes | The unique identifier of the specific file version to delete. This targets a single version entry within the file's version history. |
No output schema declared.
No examples provided.
delete_folder Delete Folder ~124
Deletes a Box folder either permanently or by moving it to the trash. Supports recursive deletion to remove folders that contain content.
| Name | Type | Req | Description |
|---|---|---|---|
| folder_id | string | yes | The unique identifier of the folder to delete. The folder ID can be found in the URL when viewing the folder in the Box web app, and the root folder is always ID `0`. |
| recursive | boolean | – | When set to true, allows deletion of a non-empty folder by recursively deleting all of its contents along with the folder itself. If omitted or false, the request will fail if the folder contains any… |
No output schema declared.
No examples provided.
delete_folder_lock Delete Folder Lock ~60
Deletes a specific folder lock, removing any restrictions it imposed on the folder. You must be authenticated as the owner or co-owner of the folder to perform this action.
| Name | Type | Req | Description |
|---|---|---|---|
| folder_lock_id | string | yes | The unique identifier of the folder lock to delete. |
No output schema declared.
No examples provided.
delete_folder_metadata Delete Folder Metadata ~155
Removes a specific metadata instance from a folder by deleting the metadata template instance identified by its scope and template key. This action permanently detaches the metadata from the folder.
| Name | Type | Req | Description |
|---|---|---|---|
| folder_id | string | yes | The unique identifier of the folder from which metadata will be removed. The root folder of a Box account is always represented by ID '0'; other folder IDs can be found in the URL when viewing the fo… |
| scope | string | yes | The scope of the metadata template, determining whether it is a globally available template or one specific to the enterprise account. |
| template_key | string | yes | The unique key name of the metadata template instance to remove from the folder, identifying which template's data should be deleted. |
No output schema declared.
No examples provided.
delete_group Delete Group ~45
Permanently deletes a group and all associated data. Requires admin-level permissions to perform this action.
| Name | Type | Req | Description |
|---|---|---|---|
| group_id | string | yes | The unique identifier of the group to be permanently deleted. |
No output schema declared.
No examples provided.
delete_legal_hold_policy Delete Legal Hold Policy ~62
Deletes an existing legal hold policy by its ID. This is an asynchronous operation, so the policy may not be fully removed immediately when the response is returned.
| Name | Type | Req | Description |
|---|---|---|---|
| legal_hold_policy_id | string | yes | The unique identifier of the legal hold policy to delete. |
No output schema declared.
No examples provided.
delete_metadata_template Delete Metadata Template Schema ~86
Permanently deletes a metadata template and all of its associated instances. This action is irreversible and removes the template across all content it was applied to.
| Name | Type | Req | Description |
|---|---|---|---|
| scope | string | yes | The scope of the metadata template, determining whether it applies globally across all enterprises or is specific to your enterprise. |
| template_key | string | yes | The unique key name identifying the metadata template within the specified scope. |
No output schema declared.
No examples provided.
delete_retention_policy Delete Retention Policy ~53
Permanently deletes a retention policy by its unique identifier. This action is irreversible and removes the policy and its associated settings.
| Name | Type | Req | Description |
|---|---|---|---|
| retention_policy_id | string | yes | The unique identifier of the retention policy to permanently delete. |
No output schema declared.
No examples provided.
delete_retention_policy_assignment Delete Retention Policy Assignment ~62
Removes a retention policy assignment, detaching the retention policy from the previously assigned content. This action stops the policy from being enforced on that content going forward.
| Name | Type | Req | Description |
|---|---|---|---|
| retention_policy_assignment_id | string | yes | The unique identifier of the retention policy assignment to remove. |
No output schema declared.
No examples provided.
delete_storage_policy_assignment Delete Storage Policy Assignment ~69
Removes a storage policy assignment, causing the affected user to inherit the enterprise's default storage policy. Note: this endpoint is rate-limited to two calls per user within any 24-hour period.
| Name | Type | Req | Description |
|---|---|---|---|
| storage_policy_assignment_id | string | yes | The unique identifier of the storage policy assignment to delete. |
No output schema declared.
No examples provided.
delete_task Delete Task ~41
Permanently removes a task from its associated file. This action cannot be undone.
| Name | Type | Req | Description |
|---|---|---|---|
| task_id | string | yes | The unique identifier of the task to be deleted. |
No output schema declared.
No examples provided.
delete_task_assignment Delete Task Assignment ~51
Removes a specific task assignment, unassigning the user from the associated task. This action permanently deletes the assignment record.
| Name | Type | Req | Description |
|---|---|---|---|
| task_assignment_id | string | yes | The unique identifier of the task assignment to delete. |
No output schema declared.
No examples provided.
delete_taxonomy_node Delete Taxonomy Node ~109
Permanently deletes a specific node from a metadata taxonomy. Only leaf nodes (those without children) can be deleted, and this action cannot be undone.
| Name | Type | Req | Description |
|---|---|---|---|
| namespace | string | yes | The namespace that scopes the metadata taxonomy, typically representing an organization or enterprise account. |
| node_id | string | yes | The unique identifier of the taxonomy node to delete. The node must have no children before it can be removed. |
| taxonomy_key | string | yes | The unique key identifying the metadata taxonomy within the namespace. |
No output schema declared.
No examples provided.
delete_user Delete User ~141
Permanently deletes a user account from the enterprise. By default, deletion is blocked if the user owns content, was recently active, or recently joined from a free account; use the force parameter to override these safeguards or move owned content beforehand.
| Name | Type | Req | Description |
|---|---|---|---|
| force | boolean | – | When set to true, bypasses deletion safeguards and removes the user even if they still own files, were recently active, or recently joined the enterprise from a free account; their owned files will a… |
| notify | boolean | – | Whether to send the user an email notification informing them of their account deletion. |
| user_id | string | yes | The unique identifier of the user to delete. |
No output schema declared.
No examples provided.
delete_user_avatar Delete User Avatar ~49
Permanently removes the avatar image for the specified user. This action is irreversible and cannot be undone.
| Name | Type | Req | Description |
|---|---|---|---|
| user_id | string | yes | The unique identifier of the user whose avatar will be permanently deleted. |
No output schema declared.
No examples provided.
delete_web_link Delete Web Link ~44
Permanently deletes a web link by its unique identifier. This action cannot be undone.
| Name | Type | Req | Description |
|---|---|---|---|
| web_link_id | string | yes | The unique identifier of the web link to delete. |
No output schema declared.
No examples provided.
delete_webhook Delete Webhook ~44
Permanently deletes a webhook by its unique identifier, stopping all future event notifications associated with it.
| Name | Type | Req | Description |
|---|---|---|---|
| webhook_id | string | yes | The unique identifier of the webhook to delete. |
No output schema declared.
No examples provided.
download_file Download File ~182
Downloads the binary content of a file from Box. Supports partial downloads via byte ranges, specific version retrieval, and access to shared link items.
| Name | Type | Req | Description |
|---|---|---|---|
| boxapi | string | – | The shared link URL and optional password for accessing a file that has not been explicitly shared with the authenticated user. Use the format shared_link=[link] or shared_link=[link]&shared_link_pas… |
| file_id | string | yes | The unique identifier of the file to download. Visible in the Box web app URL when viewing the file. |
| range | string | – | Specifies a partial byte range of the file to download, using the format bytes={start_byte}-{end_byte}. Useful for resumable downloads or streaming large files. |
| version | string | – | The specific version ID of the file to download. If omitted, the latest version is returned. |
No output schema declared.
No examples provided.
download_zip_archive Download Zip Archive ~96
Downloads the binary contents of a previously created zip archive using the download URL provided when the archive was requested. This endpoint requires no authentication and is intended for direct browser-based downloads; the URL is time-limited and a new zip download request must be created if the session expires.
| Name | Type | Req | Description |
|---|---|---|---|
| zip_download_id | string | yes | The unique identifier for the zip archive, obtained from the `download_url` field returned by the Create Zip Download API. |
No output schema declared.
No examples provided.
extract_metadata_freeform Extract Metadata Freeform ~161
Sends a freeform prompt to an LLM to extract key-value metadata from one or more files, without requiring a predefined metadata template. Both the prompt structure and the output format are flexible, supporting XML or JSON schema prompts.
| Name | Type | Req | Description |
|---|---|---|---|
| ai_agent | – | – | Optional AI agent configuration to override the default LLM settings used for this extraction request. |
| items | array | – | The list of files the LLM will process for metadata extraction. Order is not significant; each item must reference a valid file. Between 1 and 25 files may be included. |
| prompt | string | – | The freeform prompt instructing the LLM on what metadata to extract and how. Supports XML or JSON schema format and can be up to 10,000 characters long. |
No output schema declared.
No examples provided.
extract_structured_metadata Extract Structured Metadata ~324
Sends files to a Box AI-supported LLM and returns extracted metadata as structured key-value pairs. Define the extraction structure using either a metadata template or a custom list of fields.
| Name | Type | Req | Description |
|---|---|---|---|
| ai_agent | – | – | Optional AI agent configuration to override the default extraction agent settings, such as model selection or prompt behavior. |
| fields | array | – | A custom list of fields to extract from the provided files. Use this instead of a metadata template — exactly one of `fields` or a metadata template must be provided, not both. Requires at least one… |
| include_confidence_score | boolean | – | When set to true, the response will include a confidence score for each extracted field, indicating the LLM's certainty about the extracted value. |
| include_reference | boolean | – | When set to true, the response will include source references for each extracted field, indicating where in the file the value was found. |
| items | array | – | The list of files to be processed by the LLM. Accepts between 1 and 25 file items; order does not affect extraction results. |
| scope | string | – | The scope of the metadata template, either global (available to all Box enterprises) or enterprise-scoped (prefixed with the enterprise ID). Maximum 40 characters. |
| template_key | string | – | The unique key identifying the metadata template to use for extraction. Required when using a metadata template instead of a custom fields list. |
| type | string | – | Specifies the extraction structure type. Must always be set to `metadata_template` when using a template-based extraction. |
No output schema declared.
No examples provided.
find_metadata_template_by_instance Find Metadata Template by Instance ~103
Finds a metadata template by looking up the ID of one of its existing instances. Useful when you have an instance ID and need to retrieve the template definition it was created from.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | The maximum number of metadata templates to return in a single page of results. Must be between 1 and 1000. |
| metadata_instance_id | string | yes | The unique UUID of a metadata template instance used to identify and retrieve the associated template definition. |
No output schema declared.
No examples provided.
get_ai_agent Get AI Agent ~48
Retrieves a specific AI agent by its unique identifier. Returns the full agent configuration and metadata for the specified agent.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | The unique identifier of the AI agent to retrieve. |
No output schema declared.
No examples provided.
get_app_item_from_shared_link Get App Item From Shared Link ~94
Retrieves the app item associated with a given shared link, which may originate from the current enterprise or an external one. Requires the shared link URL and an optional password passed as a formatted header value.
| Name | Type | Req | Description |
|---|---|---|---|
| boxapi | string | yes | A header value containing the shared link URL and an optional password, formatted as a key-value pair string using the pattern `shared_link=[link]&shared_link_password=[password]`. |
No output schema declared.
No examples provided.
get_barrier_report Get Barrier Report ~61
Retrieves a specific shield information barrier report by its unique ID. Use this to fetch the status and details of a previously created compliance barrier report.
| Name | Type | Req | Description |
|---|---|---|---|
| shield_information_barrier_report_id | string | yes | The unique identifier of the shield information barrier report to retrieve. |
No output schema declared.
No examples provided.
get_barrier_segment Get Barrier Segment ~65
Retrieves the details of a specific shield information barrier segment by its unique ID. Shield information barrier segments define the boundaries that restrict information flow between groups within an organization.
| Name | Type | Req | Description |
|---|---|---|---|
| shield_information_barrier_segment_id | string | yes | The unique identifier of the shield information barrier segment to retrieve. |
No output schema declared.
No examples provided.
get_barrier_segment_member Get Barrier Segment Member ~64
Retrieves a specific shield information barrier segment member by its unique ID. Useful for inspecting the details of an individual member assigned to a barrier segment.
| Name | Type | Req | Description |
|---|---|---|---|
| shield_information_barrier_segment_member_id | string | yes | The unique identifier of the shield information barrier segment member to retrieve. |
No output schema declared.
No examples provided.
get_barrier_segment_restriction Get Barrier Segment Restriction ~69
Retrieves a specific shield information barrier segment restriction by its unique ID. Use this to inspect the details of an existing restriction between two information barrier segments.
| Name | Type | Req | Description |
|---|---|---|---|
| shield_information_barrier_segment_restriction_id | string | yes | The unique identifier of the shield information barrier segment restriction to retrieve. |
No output schema declared.
No examples provided.
get_collaboration Get Collaboration ~52
Retrieves the details of a single collaboration by its unique identifier. Use this to inspect collaboration settings, permissions, and associated users or groups.
| Name | Type | Req | Description |
|---|---|---|---|
| collaboration_id | string | yes | The unique identifier of the collaboration to retrieve. |
No output schema declared.
No examples provided.
get_collaboration_whitelist_entry Get Collaboration Whitelist Entry ~67
Retrieves a specific domain that has been approved for external collaborations within the current enterprise. Use this to inspect the details of a single whitelisted domain entry by its unique ID.
| Name | Type | Req | Description |
|---|---|---|---|
| collaboration_whitelist_entry_id | string | yes | The unique identifier of the collaboration whitelist entry to retrieve. |
No output schema declared.
No examples provided.
get_collection Get Collection ~49
Retrieves the details of a specific collection by its unique identifier. Use this to fetch metadata and contents associated with a single collection.
| Name | Type | Req | Description |
|---|---|---|---|
| collection_id | string | yes | The unique identifier of the collection to retrieve. |
No output schema declared.
No examples provided.
get_comment Get Comment ~54
Retrieves the message, metadata, and author information for a specific comment. Use this to fetch the full details of a single comment by its unique identifier.
| Name | Type | Req | Description |
|---|---|---|---|
| comment_id | string | yes | The unique identifier of the comment to retrieve. |
No output schema declared.
No examples provided.
get_current_user Get Current User ~51
Retrieves profile and account information for the currently authenticated user, whether that is an OAuth 2.0 authorizing user, a JWT service account, or an impersonated user specified via the As-User header.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_device_pin Get Device Pin ~56
Retrieves detailed information about a specific device pin by its unique identifier. Useful for inspecting the status and metadata of an individual device pinning record.
| Name | Type | Req | Description |
|---|---|---|---|
| device_pinner_id | string | yes | The unique identifier of the device pin to retrieve. |
No output schema declared.
No examples provided.
get_file Get File ~129
Retrieves metadata and details for a specific file by its unique identifier. Optionally supports accessing files via a shared link, including password-protected ones.
| Name | Type | Req | Description |
|---|---|---|---|
| boxapi | string | – | A shared link URL and optional password used to access files that have not been explicitly shared with the authenticated user. Use the format `shared_link=[link]` or `shared_link=[link]&shared_link_p… |
| file_id | string | yes | The unique identifier of the file to retrieve. The file ID can be found in the Box web app URL when viewing the file. |
No output schema declared.
No examples provided.
get_file_classification Get File Classification ~68
Retrieves the security classification metadata applied to a specific file. Returns the classification instance associated with the file's enterprise security policy.
| Name | Type | Req | Description |
|---|---|---|---|
| file_id | string | yes | The unique identifier of the file whose security classification you want to retrieve. Visible in the file's Box web URL after '/files/'. |
No output schema declared.
No examples provided.
get_file_metadata_instance Get File Metadata Instance ~164
Retrieves a specific metadata template instance applied to a file, identified by its scope and template key. Optionally returns full taxonomy node details instead of raw node identifiers.
| Name | Type | Req | Description |
|---|---|---|---|
| file_id | string | yes | The unique identifier of the file whose metadata instance you want to retrieve. Find this ID in the file's URL in the Box web application. |
| scope | string | yes | The scope of the metadata template to retrieve, either globally available templates or templates specific to your enterprise. |
| template_key | string | yes | The unique key name of the metadata template whose instance you want to retrieve from the file. |
| view | string | – | Controls how taxonomy field values are represented in the response. Set to 'hydrated' to receive full taxonomy node details instead of the default node identifiers. |
No output schema declared.
No examples provided.
get_file_request Get File Request ~76
Retrieves detailed information about a specific file request, including its configuration and status. Use this to inspect an existing file request created via the Box web application.
| Name | Type | Req | Description |
|---|---|---|---|
| file_request_id | string | yes | The unique identifier of the file request to retrieve. This ID can be found in the URL of the file request builder in the Box web application. |
No output schema declared.
No examples provided.
get_file_shared_link Get File Shared Link ~112
Retrieves the shared link details for a specific file, including its URL, access level, and permissions. Use this to inspect or confirm the sharing configuration of a file.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | string | yes | Specifies which fields to include in the response; must be set to request shared link data to be returned for the file. |
| file_id | string | yes | The unique identifier of the file whose shared link information you want to retrieve. The file ID can be found in the file's URL in the Box web application. |
No output schema declared.
No examples provided.
get_file_thumbnail Get File Thumbnail ~264
Retrieves a scaled-down thumbnail image of a file in PNG or JPG format. Supports various sizes for image and video file types.
| Name | Type | Req | Description |
|---|---|---|---|
| extension | string | yes | The image format for the thumbnail. PNG supports sizes up to 256x256; JPG supports sizes up to 320x320. |
| file_id | string | yes | The unique identifier of the file for which to retrieve a thumbnail. The file ID can be found in the URL when viewing the file in the Box web application. |
| max_height | integer | – | The maximum desired height of the thumbnail in pixels. The returned thumbnail will not exceed this height, within the supported size range of 32 to 320 pixels. |
| max_width | integer | – | The maximum desired width of the thumbnail in pixels. The returned thumbnail will not exceed this width, within the supported size range of 32 to 320 pixels. |
| min_height | integer | – | The minimum desired height of the thumbnail in pixels. The returned thumbnail will be at least this tall, within the supported size range of 32 to 320 pixels. |
| min_width | integer | – | The minimum desired width of the thumbnail in pixels. The returned thumbnail will be at least this wide, within the supported size range of 32 to 320 pixels. |
No output schema declared.
No examples provided.
get_file_version Get File Version ~86
Retrieves metadata for a specific version of a file by its version ID. Version history is only available for Box accounts with premium subscriptions.
| Name | Type | Req | Description |
|---|---|---|---|
| file_id | string | yes | The unique identifier of the file whose version you want to retrieve. Visible in the file's URL in the Box web application. |
| file_version_id | string | yes | The unique identifier of the specific file version to retrieve. |
No output schema declared.
No examples provided.
get_file_version_legal_hold Get File Version Legal Hold ~66
Retrieves details about the legal hold policies assigned to a specific file version. Use this to inspect which legal holds are actively applied to a given file version.
| Name | Type | Req | Description |
|---|---|---|---|
| file_version_legal_hold_id | string | yes | The unique identifier of the file version legal hold record to retrieve. |
No output schema declared.
No examples provided.
get_file_watermark Get File Watermark ~68
Retrieves the watermark applied to a specific file. Returns watermark details if one exists, or an error if no watermark has been applied.
| Name | Type | Req | Description |
|---|---|---|---|
| file_id | string | yes | The unique identifier of the file whose watermark you want to retrieve. Visible in the file's URL on the Box web application. |
No output schema declared.
No examples provided.
get_folder Get Folder ~243
Retrieves metadata and the first 100 items for a specified folder. Use the sort, direction, offset, and limit parameters to control item ordering and pagination within the folder.
| Name | Type | Req | Description |
|---|---|---|---|
| direction | string | – | The sort order for returned items, either ascending (ASC) or descending (DESC) alphabetically. |
| folder_id | string | yes | The unique identifier of the folder to retrieve. The root folder of any Box account is always ID '0'; other folder IDs can be found in the URL when viewing the folder in the Box web app. |
| limit | string | – | The maximum number of folder items to return in a single response, up to a maximum of 1000. |
| offset | string | – | The zero-based index of the first item to include in the response, used for offset-based pagination. Note that very high offset values may be unreliable for large folders; consider restructuring larg… |
| sort | string | – | The secondary attribute by which folder items are sorted. Items are always grouped by type first (folders, then files, then web links); this parameter controls ordering within those groups. Not suppo… |
No output schema declared.
No examples provided.
get_folder_classification Get Folder Classification ~87
Retrieves the security classification metadata applied to a specific folder. Returns the classification instance associated with the folder's enterprise security policy.
| Name | Type | Req | Description |
|---|---|---|---|
| folder_id | string | yes | The unique identifier of the folder whose classification metadata you want to retrieve. The root folder of a Box account is always ID '0'; other folder IDs can be found in the URL when viewing the fo… |
No output schema declared.
No examples provided.
get_folder_from_shared_link Get Folder From Shared Link ~84
Retrieves folder metadata using a shared link, supporting links from within the current enterprise or external ones. Useful when only a shared link is available and full folder details are needed.
| Name | Type | Req | Description |
|---|---|---|---|
| boxapi | string | yes | Authorization header containing the shared link URL and an optional password, formatted as a key-value string using the pattern shared_link=[link]&shared_link_password=[password]. |
No output schema declared.
No examples provided.
get_folder_metadata_instance Get Folder Metadata Instance ~153
Retrieves a specific metadata template instance applied to a folder, returning its field values and associated metadata. Cannot be used on the root folder (ID `0`).
| Name | Type | Req | Description |
|---|---|---|---|
| folder_id | string | yes | The unique identifier of the folder whose metadata instance you want to retrieve. Find this ID in the Box web app URL when viewing the folder. The root folder is always ID `0`, but is not supported b… |
| scope | string | yes | The scope of the metadata template to retrieve, either `global` for Box-wide templates or `enterprise` for templates defined within your organization. |
| template_key | string | yes | The unique key name of the metadata template whose instance you want to retrieve from the folder. |
No output schema declared.
No examples provided.
get_folder_shared_link Get Folder Shared Link ~136
Retrieves the shared link details for a specific folder, including its URL, access level, and permissions. Use this to inspect or verify the sharing configuration of a folder.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | string | yes | Must be set to 'shared_link' to explicitly request that shared link fields are included in the response. This field is required by the API to return shared link data. |
| folder_id | string | yes | The unique identifier of the folder whose shared link you want to retrieve. The root folder of a Box account is always ID '0'; other folder IDs can be found in the URL when viewing the folder in the… |
No output schema declared.
No examples provided.
get_folder_watermark Get Folder Watermark ~94
Retrieves the watermark applied to a specific folder in Box. Returns watermark details if one exists, or a 404 if no watermark has been applied.
| Name | Type | Req | Description |
|---|---|---|---|
| folder_id | string | yes | The unique identifier of the folder whose watermark you want to retrieve. The root folder of a Box account is always represented by the ID '0'; other folder IDs can be found in the URL when viewing t… |
No output schema declared.
No examples provided.
What is the com.mcparmory/box MCP server?
com.mcparmory/box is an MCP server listed in the public MCP registry as com.mcparmory/box. Manage files, folders, and team collaboration with access controls. This page covers its PyPI package (mcparmory-box).
Is the com.mcparmory/box MCP server safe to use?
com.mcparmory/box scores 76 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the com.mcparmory/box MCP server expose?
com.mcparmory/box exposes 246 tools: get_file, restore_file, update_file, delete_file, list_file_app_item_associations, and 241 more. Their descriptions and schemas cost roughly 34,690 tokens of context every time the server is loaded.
Is the com.mcparmory/box MCP server still maintained?
com.mcparmory/box is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.