Box CLISAFE
A command line interface for interacting with the Box API.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](http://opensource.box.com/badges) [](https://coveralls.io/github/box/boxcli?branch=main)
The Box CLI is a user-friendly command line tool which allows both technical and non-technical users to leverage the Box API to perform routine or bulk actions. There is no need to write any code, as these actions are executed through a set of commands.
Among other features, Box CLI includes the following functionality:
- Bulk actions - A csv file can be used to execute commands in bulk, and each row of the spreadsheet is treated as an individual API call.
- As-User header - Act on behalf of another user.
- Search API - Search for files and folders in your Box Enterprise account.
Working with an AI agent? Install the official Box skills (npx skills add box/box-for-ai) to help your assistant use the Box CLI and Box APIs correctly.Table of contents
- Getting Started
- CLI Installation
- Windows & macOS Installers
- Linux & Node install
- Quick Login with the Official Box CLI App
- CLI and Server Authentication with JWT
- Logout
- Secure Storage
- What is Stored Securely
- [Platform Support](#platfor
9bb593128625OBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add cli --env GH_TOKEN=${GH_TOKEN} --env GITHUB_TOKEN=${GITHUB_TOKEN} -- npx -y @box/[email protected]{
"mcpServers": {
"cli": {
"command": "npx",
"args": [
"-y",
"@box/[email protected]"
],
"env": {
"GH_TOKEN": "${GH_TOKEN}",
"GITHUB_TOKEN": "${GITHUB_TOKEN}"
}
}
}
}Exposed tools (4)
3 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
dat.dat | read | Still here! |
doc.docx | read | |
templateKey | write | The key of the template to update |
test | read | test description |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (6 observation(s))
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (19)
const secret = 'abcdefghijklmnopqrstuvwxyz123456';
.glf
.mocharc.yml
.nycrc
.prettierignore
.prettierrc.js
const BoxCommand = require('../../box-command');const utilities = require('../../util');const BoxCommand = require('../../box-command');const utilities = require('../../util');const BoxCommand = require('../../box-command');@discoveryjs/json-ext, @github/keytar, @oclif/core, @oclif/plugin-autocomplete, @oclif/plugin-help, @oclif/plugin-not-found, @oclif/plugin-version, @oclif/table
examples/User Creation & Provisioning/PersonalLocalUpload/Market Research/Statistics/Computed/California Sample.jpeg
examples/User Creation & Provisioning/PersonalLocalUpload/Sales Plays/Big Pharma/IMG_5170.JPG
* Fix `keychain` access by bumping `keychain` library to `1.4.0` ([#459](https://github.com/box/boxcli/issues/459)) ([56919ce](https://github.com/box/boxcli/commit/56919cefabef6de4d96a1f69f7c80740a680
1. In the [Developer Console][dev-console], create or open an application that uses **Client Credentials Grant** authentication.
<value>] [--fields <value>] [--bulk-file-path <value>] [-h] [-v] [-y] [-q] [--access <value>] [--password <value>]
<value>] [--fields <value>] [--bulk-file-path <value>] [-h] [-v] [-y] [-q] [--access <value>] [--password <value>]
<value>] [--fields <value>] [--bulk-file-path <value>] [-h] [-v] [-y] [-q] [--access <value>] [--password <value>]
Gates applied: no_behavioural_pass.
9bb593128625full audit observations/trust-audit/mcp-server/box__boxcli.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 9bb593128625 | SAFE | B | 89 | first audit |
Questions
What is the @box/cli MCP server?
A command line interface for interacting with the Box API.
What tools does @box/cli expose?
4 in total: 3 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is @box/cli safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does @box/cli need?
It reads GH_TOKEN and GITHUB_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How current is this page?
The grade is for one exact copy of the source (9bb593128625), read on 2026-10-12. The repository is watched and re-audited when it changes.