Box
Connect your company's Box account to Cakewalk so agents can search files, read and share folders, manage uploads and work with metadata through the gateway.
Last updated
Was this helpful?
Connect your company's Box account to Cakewalk so agents can search files, read and share folders, manage uploads and work with metadata through the gateway.
Connect your company's Box account to Cakewalk's MCP Gateway. Every agent tool call against Box passes through the gateway and is evaluated against your Policies.
Box admin or developer with access to the Developer Console at https://app.box.com/developers/console.
Box requires application scopes to be configured on the OAuth app itself, not at consent time. Scopes determine which Box objects the agent can read or modify (Files and Folders, Users, Groups, Webhooks, Enterprise Properties). Configure the scope set that matches the agent actions you want to allow. The scope set the MCP server requires is approved through your app's scope configuration.
Sign in to Box and open the Developer Console.
Select Platform Apps.
Click New App.
Enter an app name.
In the App Type dropdown, select OAuth 2.0.
Create the app.
Once OAuth 2.0 is selected, the app's authentication method cannot be changed. To switch later, create a new app.
Open the app's Configuration page.
Scroll to the OAuth 2.0 Redirect URI section.
Add this URI:
Save.
Redirect URIs must use HTTPS (HTTP is accepted only for localhost) and must match the configured value exactly.
On the same Configuration page, scroll to the Application Scopes section and enable the scopes the agent needs to operate against Box. At minimum, enable read access on the object types the agent will touch.
On the app's Configuration page, find the OAuth 2.0 Credentials section. Copy the Client ID and Client Secret.
Go to All Connections.
Find Box.
Click Edit credentials.
Paste the Client ID and Client Secret.
Save.
The Box Connection card flips to Active on All Connections. From an agent platform connected to Cakewalk, ask the agent to list a folder in Box. If Box returns the folder contents, the Connection is live.
Invalid redirect URI on consent: the value in OAuth 2.0 Redirect URI must match https://mcp-gateway.getcakewalk.io/api/v1/Auth/Callback exactly. Box requires exact matches with no trailing slash.
Missing scope errors after authentication: enable the missing scope under Application Scopes on the app's Configuration page, then reconnect.
Cannot change authentication method: Box does not allow switching from OAuth 2.0 to another method on an existing app. Create a new app if a different auth method is needed.
Last updated
Was this helpful?
Was this helpful?
https://mcp-gateway.getcakewalk.io/api/v1/Auth/Callback