API

Hi there 👋, At Box, our goal is to develop new features to make your work easier, and we’d love your input on new ideas we’re cooking up. As part of that effort, we want to invite you to join 20-min online research study! We’d like to learn about your journey with Box Developer Platform and building automation solutions powered by Box APIs. Your experience and feedback is highly appreciated and will help enhance Developer Platform and shape the product roadmap. Please sign up for a time slot that works best for you here: https://calendly.com/mgrytsai-box/20min. It’s just a short conversation, but your contribution will make a big difference.

When opening Box storage using Android SAF, content will not load until the Box app is opened in the background. Is this a Box app specification? Where should I see the full specifications of the Box app regarding SAF android? Any suggestion? Thank You

Hi there, I would like to know is it possible to limit the OAuth authorization to specific folder much like how the scopes parameter works: https://account.box.com/api/oauth2/authorize?response_type=code&client_id=ly1nj6n11vionaie65emwzk575hnnmrk&redirect_uri=http://example.com/auth/callback&folder_id=somefolderid

I am a ServiceNow Developer looking to build a Box Integration. Currently, I have ServiceNow configured to make API calls utilizing OAuth with JWT (Server Authentication). The steps I followed to accomplish that can be found here. This does work. For testing and development purposes I would like to configure Postman to emulate exactly what I have configured in the provided link. By that I mean I was to use the same client id, secret id, and point to the same custom app that was created in those steps. I feel like I want to use the developer token generated from the custom app to accomplish this, similar to what Alex responded within this post, however, I don’t see how to point to my custom app. Admittedly, when searching for documentation on how to accomplish this I probably don’t know enough about this process to find the correct steps. Any guidance on how to accomplish this would be appreciated. Thank you

I’m trying to specify a Dropdown item of a template ( in prefill_tags ) in a signing request. I tried using text_value but it didn’t seem to work. Do I have to specify the Dropdown item index somehow instead? I hope this is possible, as it seems this would be barebones functionality. Thanks.

Hello, I’m using the Box API with Python and the boxsdk module. I have developed a system that does the following: when a user uploads a file to a specific folder, a “FILE.UPLOADED” webhook is sent to my server. Then, my server sends a request to rename the file using the file.update_info(data={'name': 'some name'}) instruction. This works. In this case, I need to rename my files with the same name but with a suffix indicating the file number. For example: “file_1.png”, “file_2.png”, “file_3.png”… However, when a user uploads multiple files at once, these requests happen very quickly. My system checks if a file with the same name already exists before attempting to rename the file. If it does, it tries with a higher index suffix: 1, then 2, then 3, and so on. It’s possible that my script doesn’t find a file with the same name, and then, in the time interval between the test and the request to rename the file, another file is renamed with that name. This results in a 409 status error (“

My company does not allow us to share a box folder with any other users or service account. How can I give access to box folder with service account created by my company and not by Box(automation user svc account). Basically, I don’t want to use svc user auto generated by Box upon authorisation but I want use box apis to upload the file. How can I do this? I really need answer to this as soon as possible. Thanks in advance.

Hello, From https://developer.box.com/guides/api-calls/permissions-and-errors/rate-limits/ I can see there are monthly API max limits by customer. Where can I go to see my account’s current API usage towards this monthly cap?

Hello all, Currently, I’m trying to utilize Box to upload/download documents using Nodejs on the backend to do this. From my understanding, I would need to get an access/bearer token (from: https://api.box.com/oauth2/token) - which I’m able to do using Client ID and Client Secret, and once I have the the bearer token I can make API calls as needed. However, I’m trying to test a few of the API calls using postman and receiving an error when doing it this way. As an example, to list the current items in a folder I’m making a GET request in Postman to: https://api.box.com/2.0/folders/:folder_id/items where I’m setting :folder_id to 0. I receive this error that says: { "type": "error", "status": 404, "code": "not_found", "context_info": { "errors": [ { "reason": "invalid_parameter", "name": "folder", "message": "Invalid value 'd_215579098453'. 'folder' with value 'd_215579098453' not found" }

@matt.riley Could you share thoughts and/or tips on how to automatically apply metadata to file uploads done through the “File Request” feature? The use case is wanting file request uploaders to upload specific types of documents in each separate upload field and to automatically apply a metadata label to the upload done in that field. For example, a File Request form with a Diploma field and a Resume field, upon upload / completion of the File Request those uploads would be tagged in metadata as diploma and resume, respectively. Thus later we could search by metadata for diploma and get all diploma uploads but not resumes, and vice-versa. As a side note, I find metadata in Box confusing because of the requirement to create a “template” which is unusual compared to other tools where one can just create and define metadata independently.

I have created an application as the documentation says, but I always get this error. https://developer.box.com/guides/authentication/client-credentials/ This is your documentation, can you help me? This is my app client id: alhd08bt4pv1gt6n9i4ipi8andjscofb curl -i -X POST "https://api.box.com/oauth2/token" \ -H"Content-Type: application/x-www-form-urlencoded"\ -d"client_id=alhd08bt4pv1gt6n9i4ipi8andjscofb"\ -d"client_secret=*****"\ -d"grant_type=client_credentials"\ -d"box_subject_type=user"\ -d"box_subject_id=2629647****" Response { "error": "invalid_grant", "error_description": "Grant credentials are invalid" }

Was trying to create an app user following this guide, developer.box.com App Users - Box Developer Documentation Explore the Box APIs and SDKs to use for app development, API documentation, developer support resources, and access the Box Developer Console and with the following api request: POST - https://api.box.com/2.0/users request: {“is_platform_access_only”: true , “name”:“test”} response: { “type”: “error”, “status”: 403, “code”: “access_denied_insufficient_permissions”, “help_url”: “http://developers.box.com/docs/#errors”, “message”: “Access denied - insufficient permission”, “request_id”: “avrw5xhevqe1xti8” } What is missing? Can you please assist? (I have verified I have sufficient permissions to create a user which is not an app user and it was created successfully) Thanks

I’m trying to build some features using the Folder Lock API: https://developer.box.com/reference/post-folder-locks/. However, when I try to do a simple curl POST command to lock a folder, I always receive a 404 “not_found” regardless of the folder I pass to it. The GET command works fine and obviously returns an empty array since I haven’t successfully locked a folder yet, but I know the endpoint and my access token works fine. Are there other exceptions to this feature that aren’t documented? I have ensured I am the sole owner of the folder (no co-owners), but it has been shared with others a Editors. For added detail, I am using the Oauth 2.0 method for access. Any help/guidance on locking folders via the API would be much appreciated!

Hi Rui, Thank you very much for your answer. This is exactly what I was looking for. Now I think the way to achieve my goal is to create a webhook with ‘COLLABORATION.ACCEPTED’ trigger, that way I can assign the approval task to the user. So I need the user id to assign the task. But is ‘collab.id’ the user id? The API documentation doesn’t say so but I note that you wrote ‘Collaborator:’. Cheers

While sending multipart-form data POST request to BOX from ServiceNow, I am getting this error from the Box API: {“code”:“bad_request”,“help_url”:“http://developers.box.com/docs/#errors",“status”:400,“message”:"API upload did not contain a file part”,“type”:“error”} The payload which is being sent over on this request, looks something like this: –xXxxxxxxxxxxxxxxxxXx" ,Content-Disposition:form-data; name=“attributes”,{“name”:“config.txt”,“parent”:{“id”:“0”}},–xXxxxxxxxxxxxxxxxxXx,Content-Type:text/plain,Content-Disposition:form-data; name=“file”; filename=“config.txt” ,[B@7e8de4,–xXxxxxxxxxxxxxxxxxXx– Any idea of what I am doing wrong here?

I have created an app with a v2 webhook. The webhook triggers a JAVA application when it runs locally everything is good, but when the same application is being run inside a VM, the webhook is not getting triggered. Can anyone help what could be the issue or where can I see the logs to find the problem?

Have general or non-technical questions about Box Platform? Looking to answer questions like, “Can I…” or “How does…?” This is your space.

Whether you are building a custom classification service or monitoring the event stream for SmartAccess events, you’ll find like-minded folx here. For more information on Box Shield APIs, check out these links: Classifications Shield Information Barriers Shield Events

Whether you are logging events or kicking off workflows with webhooks, you’ll find the answers you seek here. For more information, check out these links: Webhooks Events

Let’s face it, authentication is usually the hardest part of any new API. We can help. For more information, check out our documentation.

New to Box Platform? This is where you want to be. For more information, check out our documentation.