box / skills

Box Agent Skills

Agent Skills to help developers using AI agents work with Box. Whether you’re building Box integrations in code, working with Box content via MCP tools, configuring webhooks, or using Box AI retrieval — this plugin gives your assistant the context it needs to do it right.

The skills in this repo follow the Agent Skills (opens in a new tab) format and can also be installed as a plugin for platforms like Codex, Cursor (opens in a new tab), Claude (opens in a new tab), including Claude Code and Cowork, and Kiro (opens in a new tab).

Installation

As an Agent Skill

npx skills add box/skills

Check out the latest and full list of skills here (opens in a new tab).

As a Platform Plugin

This repo can also be installed as a plugin for supported platforms. MCP connection and OAuth setup vary by platform — see the setup guide for your platform below.

The root plugin.json and mcp.json follow the Agent Plugins v1.0.0 specification (opens in a new tab). The portable MCP configuration declares the Box MCP endpoint; authentication remains managed by each client. Do not add credentials to this repository’s root mcp.json; configure them only in your client’s settings.

Kiro Power

In Kiro, open the Powers panel and install the Box Power. If it is not shown in the catalog, select Add Custom Power → Import power from GitHub and enter https://github.com/box/skills. The bundled skills work in both Kiro IDE and CLI.

Note that the Box MCP Server currently does not support Dynamic Client Registration, so credential-free Power authentication is not yet available in Kiro IDE. Kiro CLI users can configure Box OAuth client credentials in their user MCP settings; future managed OAuth integration or confidential-client OAuth support in the IDE can enable the bundled MCP connection there.

Try it with: Use the Box Power to add Box file upload to this app.

Usage

Skills are automatically available once installed. The agent will use them when relevant tasks are detected. Here are some example prompts:

Implement Box content workflows

Add Box file upload to my app

Create a shared link for this folder

Set up Box webhooks for new file events

Build document-driven flows

Search my Box account for invoices

Use Box AI to classify documents

Wire webhooks to process new uploads

Troubleshoot integrations

Debug 401 errors with my Box JWT auth

Fix webhook signature verification

Skill Structure

The Box skill follows the Agent Skills Open Standard (opens in a new tab):

• SKILL.md - Skill manifest with frontmatter, routing table, workflow steps, and guardrails
• references/ - Individual reference files (auth, content workflows, MCP tool patterns, AI/retrieval, etc.)

Prerequisites

• Box CLI (optional) — Install from developer.box.com/guides/cli (opens in a new tab) for CLI-first verification.
• BOX_ACCESS_TOKEN (optional) — For direct REST verification when Box CLI is unavailable.

Quick Verification

Preferred order for agent tooling is MCP first, Box CLI second, and direct REST only as a last-resort fallback.

# With Box CLI installed and authenticated:
box users:get me --json
box folders:items 0 --json --max-items 5

# Last-resort fallback (for sessions where MCP/CLI are unavailable):
export BOX_ACCESS_TOKEN="your-token"
curl -sS -H "Authorization: Bearer $BOX_ACCESS_TOKEN" -H "Accept: application/json" "https://api.box.com/2.0/folders/0"

Contributing

Skills follow the Agent Skills specification (opens in a new tab). The Box skill is a directory with a SKILL.md file containing YAML frontmatter and markdown instructions, plus a references/ directory for feature-specific deep dives.

License

MIT

Privacy and Support

• Box Privacy Policy (opens in a new tab)
• Box Support (opens in a new tab)