{
  "entry": {
    "kind": "mcp",
    "slug": "box-mcp-server",
    "name": "Box MCP Server",
    "vendor": "Box",
    "description": "Box's official server exposes enterprise content — files, folders, metadata, and search — so an agent can find and read documents held in a managed content platform.\n\nDeclared capabilities are outbound network access and credential access. Box is typically the system of record for contracts, board material, and regulated documents, which makes scope the entire security question: an integration authorised at the enterprise level can read the most sensitive corpus the company has. Use folder-scoped access and app users rather than a broad service account, and confirm that content classification and retention policies survive the trip into a model context.",
    "website": "https://developer.box.com/guides/box-mcp/",
    "repository": null,
    "documentationUrl": "https://developer.box.com/guides/box-mcp/",
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [
      "network:outbound",
      "credentials:access"
    ],
    "packaging": null,
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 20,
      "band": "low",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "1 high-risk capability: credentials:access",
          "contribution": 10
        }
      ],
      "dangerousCombos": []
    },
    "dangerousCombos": []
  }
}