com.mcparmory/box
PYPI · MCPARMORY-BOX · 2 COMPONENTS · SCANNED SEP 20
Manage files, folders, and team collaboration with access controls
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security87
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- Install-script risk not yet assessed.Unverified
- 2 of 46 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency32
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- License check failed: the license (MIT License) isn't a recognized OSI-approved license. See how to fix → Fail
- Actively maintained (last published 131 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability74
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 34690 tokens (~141/item across 246 items; 246 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management87
- Stability observed for 26 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety98
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 41 of 44 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "transfer_user_folders" implies "transfer" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Partial
- An AI judge read all 246 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the com.mcparmory/box MCP server?
com.mcparmory/box runs locally as a PyPI package, launched with uvx mcparmory-box. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · mcparmory-box
claude mcp add com-mcparmory-box -- uvx mcparmory-box
{
"mcpServers": {
"com-mcparmory-box": {
"command": "uvx",
"args": [
"mcparmory-box"
]
}
}
} {
"servers": {
"com-mcparmory-box": {
"command": "uvx",
"args": [
"mcparmory-box"
]
}
}
} codex mcp add com-mcparmory-box -- uvx mcparmory-box
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-mcparmory-box": {
"type": "local",
"command": [
"uvx",
"mcparmory-box"
],
"enabled": true
}
}
} openclaw mcp add com-mcparmory-box --command uvx --arg mcparmory-box
mcp_servers:
com-mcparmory-box:
command: "uvx"
args: ["mcparmory-box"] {
"McpServers": {
"com-mcparmory-box": {
"Transport": "stdio",
"Command": "uvx",
"Arguments": [
"mcparmory-box"
]
}
}
} assistant mcp add com-mcparmory-box -t stdio -c uvx -a mcparmory-box
{
"mcpServers": {
"com-mcparmory-box": {
"command": "uvx",
"args": [
"mcparmory-box"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +16
- Malware scan: unverified → pass ▲ security
- 18 Sept 26 −3
- Stability: pass → 0.80 functional
- 17 Sept 26 −14
- Malware scan: pass → unverified ▼ security
- Stability: 0.97 → pass security
- 15 Sept 26 +16
- Malware scan: unverified → pass ▲ security
- 14 Sept 26 −15
- Malware scan: pass → unverified ▼ security
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +15
- Malware scan: unverified → pass ▲ security
- 11 Sept 26 −18
- Malware scan: pass → unverified ▼ security
- Stability: pass → 0.80 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed pypi/mcparmory-box@1.0.5
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | pypi |
Background: How many MCP packages publish verified provenance →
Dependencies 46 packages
| Packages resolved | 46 |
|---|---|
| Stale | 1 |
| No linked repository | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
get_group Get Group ~49
Retrieves detailed information about a specific group by its ID. Only group members or users with admin-level permissions can access this endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| group_id | string | yes | The unique identifier of the group to retrieve. |
No output schema declared.
No examples provided.
get_group_membership Get Group Membership ~56
Retrieves details of a specific group membership by its unique ID. Only group admins or users with admin-level permissions can access this endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| group_membership_id | string | yes | The unique identifier of the group membership record to retrieve. |
No output schema declared.
No examples provided.
get_information_barrier Get Information Barrier ~59
Retrieves details of a specific shield information barrier by its unique ID. Useful for inspecting the configuration and status of an existing barrier between user groups.
| Name | Type | Req | Description |
|---|---|---|---|
| shield_information_barrier_id | string | yes | The unique identifier of the shield information barrier to retrieve. |
No output schema declared.
No examples provided.
get_invite Get Invite ~56
Retrieves the current status of a specific user invite. Useful for checking whether an invite has been accepted, is pending, or has expired.
| Name | Type | Req | Description |
|---|---|---|---|
| invite_id | string | yes | The unique identifier of the invite whose status you want to retrieve. |
No output schema declared.
No examples provided.
get_legal_hold_policy Get Legal Hold Policy ~58
Retrieves the details of a specific legal hold policy by its unique identifier. Use this to inspect policy configuration, status, and associated metadata.
| Name | Type | Req | Description |
|---|---|---|---|
| legal_hold_policy_id | string | yes | The unique identifier of the legal hold policy to retrieve. |
No output schema declared.
No examples provided.
get_legal_hold_policy_assignment Get Legal Hold Policy Assignment ~69
Retrieves the details of a specific legal hold policy assignment by its unique ID. Use this to inspect which users, folders, or files are bound to a particular legal hold policy.
| Name | Type | Req | Description |
|---|---|---|---|
| legal_hold_policy_assignment_id | string | yes | The unique identifier of the legal hold policy assignment to retrieve. |
No output schema declared.
No examples provided.
get_metadata_cascade_policy Get Metadata Cascade Policy ~63
Retrieves the details of a specific metadata cascade policy assigned to a folder. Use this to inspect how metadata templates are being propagated from a folder to its contents.
| Name | Type | Req | Description |
|---|---|---|---|
| metadata_cascade_policy_id | string | yes | The unique identifier of the metadata cascade policy to retrieve. |
No output schema declared.
No examples provided.
get_metadata_taxonomy Get Metadata Taxonomy ~85
Retrieves a specific metadata taxonomy by its unique key within a given namespace. Use this to inspect the structure and configuration of a taxonomy for organizing and classifying metadata.
| Name | Type | Req | Description |
|---|---|---|---|
| namespace | string | yes | The namespace that scopes the metadata taxonomy, typically representing an enterprise or organizational unit. |
| taxonomy_key | string | yes | The unique key identifying the metadata taxonomy to retrieve within the specified namespace. |
No output schema declared.
No examples provided.
get_metadata_template Get Metadata Template Schema ~109
Retrieves a specific metadata template by its scope and template key. Use this to fetch full template details including its fields and configuration.
| Name | Type | Req | Description |
|---|---|---|---|
| scope | string | yes | The scope of the metadata template, either 'global' for Box-wide templates or 'enterprise' for templates specific to your organization. |
| template_key | string | yes | The unique key identifying the metadata template within its scope. To discover available template keys, list all templates for an enterprise or globally, or list templates applied to a file or folder. |
No output schema declared.
No examples provided.
get_metadata_template_by_id Get Metadata Template by ID ~54
Retrieves a specific metadata template by its unique ID. Use this to inspect template structure, fields, and configuration for a known template.
| Name | Type | Req | Description |
|---|---|---|---|
| template_id | string | yes | The unique identifier of the metadata template to retrieve. |
No output schema declared.
No examples provided.
get_retention_policy Get Retention Policy ~59
Retrieves the details of a specific retention policy by its unique identifier. Use this to inspect policy settings such as retention duration, disposition action, and assignment scope.
| Name | Type | Req | Description |
|---|---|---|---|
| retention_policy_id | string | yes | The unique identifier of the retention policy to retrieve. |
No output schema declared.
No examples provided.
get_retention_policy_assignment Get Retention Policy Assignment ~62
Retrieves the details of a specific retention policy assignment by its unique ID. Use this to inspect how a retention policy has been applied to a particular content target.
| Name | Type | Req | Description |
|---|---|---|---|
| retention_policy_assignment_id | string | yes | The unique identifier of the retention policy assignment to retrieve. |
No output schema declared.
No examples provided.
get_shared_link_file Get Shared Link File ~82
Retrieves file information for a given shared link, supporting links originating from within or outside the current enterprise. Optionally returns shared link permission options when requested via the fields query parameter.
| Name | Type | Req | Description |
|---|---|---|---|
| boxapi | string | yes | Authorization header value containing the shared link URL and an optional password, formatted as a key-value pair string using the shared_link and shared_link_password keys. |
No output schema declared.
No examples provided.
get_sign_request Get Sign Request ~60
Retrieves the details of a specific Box Sign request by its unique ID. Use this to check the status, signers, and configuration of an existing signature request.
| Name | Type | Req | Description |
|---|---|---|---|
| sign_request_id | string | yes | The unique identifier of the Box Sign request to retrieve. |
No output schema declared.
No examples provided.
get_sign_template Get Sign Template ~60
Retrieves the full details of a specific Box Sign template by its unique ID. Use this to inspect template configuration, fields, and signers before initiating a signing request.
| Name | Type | Req | Description |
|---|---|---|---|
| template_id | string | yes | The unique identifier of the Box Sign template to retrieve. |
No output schema declared.
No examples provided.
get_storage_policy_assignment Get Storage Policy Assignment ~59
Retrieves the details of a specific storage policy assignment by its unique identifier. Useful for inspecting which storage policy is applied to a particular user or enterprise.
| Name | Type | Req | Description |
|---|---|---|---|
| storage_policy_assignment_id | string | yes | The unique identifier of the storage policy assignment to retrieve. |
No output schema declared.
No examples provided.
get_task Get Task ~53
Retrieves detailed information about a specific task by its unique identifier. Use this to fetch the current state, metadata, and attributes of a single task.
| Name | Type | Req | Description |
|---|---|---|---|
| task_id | string | yes | The unique identifier of the task to retrieve. |
No output schema declared.
No examples provided.
get_task_assignment Get Task Assignment ~64
Retrieves detailed information about a specific task assignment, including its status, assignee, and associated task. Use this to inspect the current state of a single task assignment by its unique identifier.
| Name | Type | Req | Description |
|---|---|---|---|
| task_assignment_id | string | yes | The unique identifier of the task assignment to retrieve. |
No output schema declared.
No examples provided.
get_taxonomy_node Get Taxonomy Node ~115
Retrieves a single metadata taxonomy node by its unique identifier within a specified namespace and taxonomy. Useful for inspecting the details of a specific classification node in a hierarchical metadata structure.
| Name | Type | Req | Description |
|---|---|---|---|
| namespace | string | yes | The namespace that scopes the metadata taxonomy, typically representing an enterprise or organizational unit. |
| node_id | string | yes | The unique identifier of the taxonomy node to retrieve, formatted as a UUID. |
| taxonomy_key | string | yes | The unique key identifying the metadata taxonomy within the namespace, representing a classification domain such as geography or department. |
No output schema declared.
No examples provided.
get_trashed_file Get Trashed File ~79
Retrieves metadata for a file that was directly moved to the trash. Note: if a parent folder was trashed instead, use the trashed folder endpoint to inspect it.
| Name | Type | Req | Description |
|---|---|---|---|
| file_id | string | yes | The unique identifier of the file to retrieve from the trash. The file ID appears in the Box web app URL when viewing the file. |
No output schema declared.
No examples provided.
get_trashed_folder Get Trashed Folder ~91
Retrieves metadata for a specific folder that has been directly moved to the trash. Note: if a parent folder was trashed instead, only that parent folder can be retrieved via this endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| folder_id | string | yes | The unique identifier of the trashed folder to retrieve. Only folders directly moved to the trash are accessible; folders implicitly trashed via a parent cannot be retrieved by their own ID. |
No output schema declared.
No examples provided.
get_trashed_web_link Get Trashed Web Link ~62
Retrieves the details of a web link that has been moved to the trash. Useful for inspecting or restoring a trashed web link before permanent deletion.
| Name | Type | Req | Description |
|---|---|---|---|
| web_link_id | string | yes | The unique identifier of the web link to retrieve from the trash. |
No output schema declared.
No examples provided.
get_upload_session Get Upload Session ~63
Retrieve the current status and details of an active chunked file upload session. The upload session ID is obtained from the Create upload session endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| upload_session_id | string | yes | The unique identifier of the upload session to retrieve, obtained when the upload session was created. |
No output schema declared.
No examples provided.
get_user Get User ~58
Retrieves profile and account information for a specific user within the enterprise. Also returns a limited set of fields for external collaborators, with restricted fields returning null.
| Name | Type | Req | Description |
|---|---|---|---|
| user_id | string | yes | The unique identifier of the user whose information you want to retrieve. |
No output schema declared.
No examples provided.
get_user_avatar Get User Avatar ~48
Retrieves the avatar image for a specified user. Returns the user's profile picture as an image resource.
| Name | Type | Req | Description |
|---|---|---|---|
| user_id | string | yes | The unique identifier of the user whose avatar image should be retrieved. |
No output schema declared.
No examples provided.
get_web_link Get Web Link ~60
Retrieves detailed information about a specific web link, including its URL, name, and associated metadata. Useful for inspecting or displaying a saved web link by its unique identifier.
| Name | Type | Req | Description |
|---|---|---|---|
| web_link_id | string | yes | The unique identifier of the web link to retrieve. |
No output schema declared.
No examples provided.
get_web_link_from_shared_link Get Web Link from Shared Link ~90
Retrieves web link details using only a shared link URL, supporting links originating from within or outside the current enterprise. Useful when the web link ID is unknown and only the shared link is available.
| Name | Type | Req | Description |
|---|---|---|---|
| boxapi | string | yes | Authorization header containing the shared link URL and an optional password, formatted as a key-value string. Both the shared link and password fields must follow the prescribed header format. |
No output schema declared.
No examples provided.
get_web_link_shared_link Get Web Link Shared Link ~95
Retrieves the shared link details for a specific web link item. Use this to inspect sharing settings, permissions, and access information for a web link.
| Name | Type | Req | Description |
|---|---|---|---|
| fields | string | yes | Specifies which fields to include in the response; must be set to request shared link data to be returned for the web link. |
| web_link_id | string | yes | The unique identifier of the web link whose shared link information you want to retrieve. |
No output schema declared.
No examples provided.
get_webhook Get Webhook ~52
Retrieves the configuration and details of a specific webhook by its unique identifier. Useful for inspecting webhook settings, target URLs, and event subscriptions.
| Name | Type | Req | Description |
|---|---|---|---|
| webhook_id | string | yes | The unique identifier of the webhook to retrieve. |
No output schema declared.
No examples provided.
get_zip_download_status Get Zip Download Status ~81
Retrieves the current download progress and status of a zip archive, including any items that were skipped. This endpoint is accessible only after the download has started and remains valid for 12 hours from initiation.
| Name | Type | Req | Description |
|---|---|---|---|
| zip_download_id | string | yes | The unique identifier for the zip archive whose status is being checked, obtained from the response of the Create zip download API. |
No output schema declared.
No examples provided.
initialize_classifications Initialize Classifications ~167
Initializes the classification metadata template for an enterprise with an initial set of classifications. Use this only when no classification template exists yet; if one already exists, use the add classifications endpoint instead.
| Name | Type | Req | Description |
|---|---|---|---|
| copyInstanceOnItemCopy | boolean | – | Controls whether the assigned classification is automatically copied to a new item when a file or folder is copied. Set to true to propagate classifications on copy, or false to leave the copy unclas… |
| fields | array | – | Defines the classification values available in the template. Exactly one field object must be provided, containing all valid classification options as enumerated values within that field. |
| hidden | boolean | – | Controls whether the classification template is hidden from users on web and mobile devices. Set to true to restrict visibility, or false to make classifications available for selection. |
No output schema declared.
No examples provided.
invite_enterprise_user Invite Enterprise User ~94
Invites an existing Box user to join an enterprise by sending them an email prompt to accept within the Box web application. The user must already have a Box account and must not currently belong to another enterprise.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | – | The unique identifier of the enterprise to which the user is being invited. |
| login | string | – | The email address (login) of the existing Box user to invite to the enterprise. |
No output schema declared.
No examples provided.
list_ai_agents List AI Agents ~183
Retrieves a list of AI agents configured in the account, with optional filtering by mode, state, and whether to include Box default agents.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_state | array | – | Filters results to only return agents in the specified states. Accepts one or more of the following values: `enabled`, `disabled`, or `enabled_for_selected_users`. Order is not significant. |
| include_box_default | boolean | – | When set to true, includes Box-provided default agents in the response alongside any custom agents. |
| limit | string | – | The maximum number of agents to return in a single response. Accepts a value between 1 and 1000. |
| mode | array | – | Filters results to only return agents configured for the specified modes. Accepts one or more of the following values: `ask`, `text_gen`, or `extract`. Order is not significant. |
No output schema declared.
No examples provided.
list_barrier_reports List Barrier Reports ~97
Retrieves a paginated list of shield information barrier reports associated with a specific barrier. Use this to audit or review compliance reports generated for a given information barrier.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | The maximum number of reports to return per page. Accepts values up to 1000; omit to use the server default. |
| shield_information_barrier_id | string | yes | The unique identifier of the shield information barrier whose reports should be listed. |
No output schema declared.
No examples provided.
list_barrier_segment_members List Barrier Segment Members ~100
Retrieves a paginated list of members belonging to a specific shield information barrier segment. Use this to audit or review which users are assigned to a given segment.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | The maximum number of segment members to return in a single page of results. Must be between 1 and 1000. |
| shield_information_barrier_segment_id | string | yes | The unique identifier of the shield information barrier segment whose members you want to retrieve. |
No output schema declared.
No examples provided.
list_barrier_segment_restrictions List Barrier Segment Restrictions ~99
Retrieves all shield information barrier segment restrictions associated with a specific segment. Use this to audit or review access restrictions applied to a given barrier segment.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | The maximum number of restriction records to return in a single page of results. Must be between 1 and 1000. |
| shield_information_barrier_segment_id | string | yes | The unique identifier of the shield information barrier segment whose restrictions you want to list. |
No output schema declared.
No examples provided.
list_barrier_segments List Barrier Segments ~91
Retrieves all shield information barrier segments associated with a specified information barrier. Segments define the groups or users separated by the barrier.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | The maximum number of barrier segment objects to return in a single page of results. Accepts values up to 1000. |
| shield_information_barrier_id | string | yes | The unique identifier of the shield information barrier whose segments you want to retrieve. |
No output schema declared.
No examples provided.
list_classifications List Classifications ~40
Retrieves the enterprise security classification metadata template and returns all classification labels available to the enterprise. Can also be accessed by specifying the enterprise ID explicitly in the URL.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_collection_items List Collection Items ~118
Retrieves the files and folders contained within a specified collection. Supports pagination to navigate large result sets.
| Name | Type | Req | Description |
|---|---|---|---|
| collection_id | string | yes | The unique identifier of the collection whose items you want to retrieve. |
| limit | string | – | The maximum number of items to return in a single response page. Accepts values up to 1000. |
| offset | string | – | The zero-based index of the first item to return, enabling pagination through results. Must not exceed 10000; requests beyond this limit will be rejected with a 400 error. |
No output schema declared.
No examples provided.
list_collections List Collections ~98
Retrieves all collections belonging to the authenticated user. Currently, only the favorites collection is supported.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | The maximum number of collections to return in a single response page. Accepts values up to 1,000. |
| offset | string | – | The zero-based index of the first item to include in the response, enabling pagination through large result sets. Offset values exceeding 10,000 will result in a 400 error. |
No output schema declared.
No examples provided.
list_enterprise_device_pins List Enterprise Device Pins ~108
Retrieves all device pins registered within a specified enterprise. Requires admin privileges and the 'manage enterprise' application scope.
| Name | Type | Req | Description |
|---|---|---|---|
| direction | string | – | The sort order for the returned results, either ascending (ASC) or descending (DESC) alphabetical order. |
| enterprise_id | string | yes | The unique identifier of the enterprise whose device pins you want to retrieve. |
| limit | string | – | The maximum number of device pins to return per page, up to a maximum of 1000. |
No output schema declared.
No examples provided.
list_enterprise_metadata_templates List Enterprise Metadata Templates ~67
Retrieves all metadata templates created for use within the authenticated user's enterprise. Returns a paginated list of enterprise-scoped templates available for applying structured metadata to content.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Maximum number of metadata templates to return per page. Accepts values up to 1000. |
No output schema declared.
No examples provided.
list_events List Events ~397
Retrieves up to one year of past events for the authenticated user or, with admin privileges, for the entire enterprise. Supports both real-time polling and historical querying via configurable stream types.
| Name | Type | Req | Description |
|---|---|---|---|
| created_after | string | – | The earliest date and time (inclusive) for which to return events, specified in ISO 8601 format. Only applicable when 'stream_type' is 'admin_logs'; ignored for all other stream types. |
| created_before | string | – | The latest date and time (inclusive) for which to return events, specified in ISO 8601 format. Only applicable when 'stream_type' is 'admin_logs'; ignored for all other stream types. |
| event_type | array | – | A list of specific event type strings to filter results by. Only applicable when 'stream_type' is 'admin_logs' or 'admin_logs_streaming'; ignored for all other stream types. Each item should be a val… |
| limit | string | – | Maximum number of events to return per request, up to 500. Fewer events than requested may be returned even when more exist, as the API may return already-retrieved events rather than waiting for add… |
| stream_position | string | – | The cursor position in the event stream from which to begin returning events. Use 'now' to initialize a stream and receive only the latest position with no events, or '0' / null to retrieve all avail… |
| stream_type | string | – | Controls the scope and type of events returned. Use 'all' for the authenticated user's full event history, 'changes' or 'sync' for file-tree-affecting events, 'admin_logs' for paginated historical en… |
No output schema declared.
No examples provided.
list_file_app_item_associations List File App Item Associations ~143
Retrieves all app items associated with a file, including associations inherited from ancestor folders. Association type and ID are returned even if the requesting user lacks View permission on the app item.
| Name | Type | Req | Description |
|---|---|---|---|
| application_type | string | – | Filters results to only include app items belonging to the specified application type. When omitted, associations for all application types are returned. |
| file_id | string | yes | The unique identifier of the file whose app item associations should be retrieved. The file ID appears in the Box web app URL when viewing the file. |
| limit | string | – | The maximum number of app item associations to return per page. Must be between 1 and 1000. |
No output schema declared.
No examples provided.
list_file_collaborations List File Collaborations ~97
Retrieves all pending and active collaborations for a specific file, including users who currently have access or have been invited to collaborate.
| Name | Type | Req | Description |
|---|---|---|---|
| file_id | string | yes | The unique identifier of the file whose collaborations you want to retrieve. You can find this ID in the file's URL in the Box web application. |
| limit | string | – | The maximum number of collaboration records to return per page. Accepts values up to 1000. |
No output schema declared.
No examples provided.
list_file_comments List File Comments ~132
Retrieves a paginated list of comments posted on a specific file. Useful for reviewing user feedback or discussion threads associated with a file.
| Name | Type | Req | Description |
|---|---|---|---|
| file_id | string | yes | The unique identifier of the file whose comments you want to retrieve. Find this ID in the file's URL on the Box web application. |
| limit | string | – | The maximum number of comments to return per page. Must be between 1 and 1000. |
| offset | string | – | The zero-based index of the first item to include in the response, used for paginating through results. Offset values exceeding 10000 are not supported. |
No output schema declared.
No examples provided.
list_file_metadata List File Metadata ~107
Retrieves all metadata instances attached to a specific file. Optionally returns full taxonomy node details instead of node identifiers.
| Name | Type | Req | Description |
|---|---|---|---|
| file_id | string | yes | The unique identifier of the file whose metadata instances will be retrieved. The file ID can be found in the URL when viewing the file in the Box web application. |
| view | string | – | Controls how taxonomy field values are represented in the response. When set to 'hydrated', taxonomy values include full taxonomy node details rather than just node identifiers. |
No output schema declared.
No examples provided.
list_file_skills_cards List File Skills Cards ~76
Retrieves all Box Skills metadata cards attached to a specific file. Useful for inspecting AI-generated insights such as transcripts, topics, or keywords extracted by Box Skills.
| Name | Type | Req | Description |
|---|---|---|---|
| file_id | string | yes | The unique identifier of the file whose Box Skills cards you want to retrieve. Visible in the file's URL on the Box web application. |
No output schema declared.
No examples provided.
list_file_tasks List File Tasks ~72
Retrieves all tasks associated with a specific file, returning the complete list in a single response. Note that this endpoint does not support pagination.
| Name | Type | Req | Description |
|---|---|---|---|
| file_id | string | yes | The unique identifier of the file whose tasks you want to retrieve. You can find this ID in the file's URL in the Box web application. |
No output schema declared.
No examples provided.
list_file_version_legal_holds List File Version Legal Holds ~106
Retrieves file versions currently held under a specific legal hold policy, covering legacy-architecture holds only. For holds in the new architecture, use the legal hold policy assignment endpoints instead.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | The maximum number of file version legal hold records to return in a single page of results; must be between 1 and 1000. |
| policy_id | string | yes | The unique identifier of the legal hold policy whose file version holds you want to retrieve. |
No output schema declared.
No examples provided.
What is the com.mcparmory/box MCP server?
com.mcparmory/box is an MCP server listed in the public MCP registry as com.mcparmory/box. Manage files, folders, and team collaboration with access controls. This page covers its PyPI package (mcparmory-box).
Is the com.mcparmory/box MCP server safe to use?
com.mcparmory/box scores 76 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the com.mcparmory/box MCP server expose?
com.mcparmory/box exposes 246 tools: get_file, restore_file, update_file, delete_file, list_file_app_item_associations, and 241 more. Their descriptions and schemas cost roughly 34,690 tokens of context every time the server is loaded.
Is the com.mcparmory/box MCP server still maintained?
com.mcparmory/box is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.