Box for Developers

Can anyone provide the details of each stream type on how old events we receive.1. stream_type : all : how much back in time the events will be ? there is no documentation stating this2. stream_type: changes : how much back in time the events will be and will I get all the collaboration events without any exception ?3. stream_type: admin_logs : how much back in time the events will be and can we filter a single user events ? As per documentation it will be 1 year and we can give start and end time between which we need events for4. stream_type: admin_logs_stream: how much back in time the events will be and can we filter a single user events ?

Hi Team,I have requirement for generating the  USER_AUTHENTICATE_OAUTH2_ACCESS_TOKEN_CREATE event. I tried with configuring the OAuth 2.0 and getting Client ID, Secret. Tried every bit possibilities but no luck so far. Note : I have this Box Enterprise Trial account.  

I am using Box API v10 via the Node SDK to query for Folders, specifically:client.folders.getFolderItems(parentId) // parentId is a folder name that exists (e.g. ‘QCG Test’) The value I am receiving from Box API does not match the Folder ID found in the URL of the folder when viewing My Account.For Example:My folder name is “QCG Test” with an Id (from Box URL) of: ********5204The value received when I query for this Folder ID from the API returns as: ********0532Note: The values above are edited to censor the full ID. The censored digits do not match as well.

Hey, is it possible to add sha1 to v3 items bulk endpoint?

I would like to change the name that appears as the "updater" when a file is updated via a Box JWT authentication app.I have already tried changing the JWT application name itself, but this did not change the associated Service Account name. Additionally, when I attempted to modify the automatically generated Service Account name using my Box Admin account, I encountered a permission error and was unable to save the changes.Could you please let me know if it is possible for Box Support to change this Service Account name (or its display name) on your end?Thank you for your assistance.Best regards,

With some help from Claude we built a standalone Box Mock service which responds to most APIs (well, most the ones our app uses).   YMMV but it’s here if you find it helpful:  https://github.com/transparency-analytics/box-mock

Im creating Webhook to setup a Automatic trigger that will notify my project application if there is any change in the Box side (Ex: File Uploaded).The setup was fine, but i didnt receive any data delivered to my application. After checking, turnout my application doesnt allow public network traffic, and it would need to setup an IP allow list for Webhook to be able to connect. ( I did check with our testing environment that allowed public traffic. It worked)I had follow this ip address list from this site : https://support.box.com/ips but it is not working yet.Also, I tested with webhook.site and get the data coming from 74.112.186.xx instead of the ip from the list above. So my question is : Do Box’s Webhook data come from a static range of IP addresses. If so, can I get the info anywhere? Best Regards.

Subject: OAuth invalid_client after login — Custom App with valid credentials Authentication Type: OAuth 2.0 (User Authentication) Status in Dev Console: Enabled Status in Admin Console → Platform Apps Manager → User Authentication Apps: Enabled Issue: The OAuth authorize endpoint returns "invalid_client" after the user logs in (logged in as the app owner [removed by moderator] ). The error page shows Error: invalid_client with no Show Details revealed. What I have already verified: 1. Client Secret is correct — confirmed via curl POST to https://api.box.com/oauth2/token with a fake auth code. Response: {"error":"invalid_grant","error_description":"Auth code doesn't exist or is invalid for the client"} This proves client_id + client_secret are accepted by Box's token endpoint. 2. Redirect URI is registered exactly as sent in the consent request: 3. Scopes: Read all files + Write all files (Content Actions) 4. App is enabled in both Dev Console and Admin Console 5. I am the developer w

Hello, we are using the box content previewer as well as cookiebot for our application. Recently, the content previewer stopped working when a user rejected not necessary cookies. Interestingly the file to be previewed is still loaded and we can even see it in the dom structure:The bp-is-invisible class never gets removed though. If we remove it manually, we can see the file preview on the page. After some time we end up in this stateWe are currently using version 2.106.0. With approved cookie consent everything works fine.We also tried different browser and machines - all with the same problem.The file type also does not seem to matter as we have the same problem for pds.

Hello,We are currently using Box Sign to send documents for signature and have encountered two issues.Firstly, we are receiving blank signed documents mixed in with our fully executed documents. Is there a way to prevent this, or a workaround to eliminate blank documents from being included?Secondly, regarding the signing logs: is there a way to automatically move them to a separate folder instead of keeping them in the same folder as the completed documents? I attempted to set up a Relay workflow, but it is not moving the signing logs out of the completed documents folder.Is there a better approach to achieve this, or could I be missing something in my Relay setup?Thank you for your time, and I look forward to your guidance.Best Regrads,Stephanie

We want to apply tags based on the content of the pdfs we store in box. is there a way for Box AI to analyze individual pdf files and apply tags from a pre-created list of tags?

I would like to request for signature scopes. I have the starter plan, but do not see it in my app configuration.  One of the docs mentioned that need to request.  Kinda annoying honestly. 

Hi,I’m trying to find a way to restrict a range of files.Using a down scoped token like this: List<String> scopes = new ArrayList<String>();scopes.add("item_preview");scopes.add("item_download");List<TokenRestriction> restrictions = new ArrayList<>();for (String id : fileIds) { String resourceUrl = "https://api.box.com/2.0/files/" + id; restrictions.add(new TokenRestriction(scopes, resourceUrl));}ScopedToken downscopedToken = api.getDownscopedToken(scopes, null, null, restrictions);boxToken = downscopedToken.getAccessToken();I can’t find the class of the TokenRestriction.import com.box.sdk.TokenRestriction;   is not available.I’m using version 5.9 of the java SDK.Is there a solution use TokenRestriction or other way to restrict a list of files?Kind regards,Marcel​​​​​​​

We need access to the v1 webhooks for our app. This is so that our users can select a folder or root folder to monitor for new media files to auto import and transcribe using our service.I have already tested the webhooks functionality in production using our collaborator accounts.This is urgent because a lot of our box users have been asking for instant sync - currently we are having to poll the api for each connected user - hitting api rate limits.

Hi,I am using BOX python sdk to download files from a shared box drive. I use the code below to download files from the box drive. Recently, i noticed that this doesn’t return/download all of the files that matches the search query. I reported the issue to box sdk here but i was told it was an API issue. Can you please resolve this issue ASAP.

Hello!I need assistance with enabling my account as a free developer account so I can authorize apps and continue developing. However, I keep seeing the message, "Log in or sign up for a Box Developer account to access all of the Developer Console features," even though I am already logged in.If anyone knows what might be happening or how to resolve this, I would really appreciate your help.

How often does Box AI update the default LLM model? How do we get advance notification that this will happen?

  Hi everyone,  We are investigating an intermittent upload failure pattern and would  appreciate any community insights or official clarification.  When uploading files via the Box REST API using direct upload (non-chunked),  we have observed that some transfers are terminated mid-stream by the  server. The termination appears as TCP FIN followed by RST from  upload.box.com, with no HTTP response returned prior to disconnection.  This behavior occurs specifically on clients with lower network throughput,  which suggests the issue may be related to a time-based or throughput-based  threshold on the server side.  What we have ruled out:  - SSL inspection (not deployed in our environment)  - Intermediate proxy interference (packet analysis confirms server-initiated    disconnection from Box IP)  - HTTP-level rate limiting (no HTTP 429 received)  - Client-side timeout (the SDK does not initiate the disconnection)  Questions:  1. Has anyone encountered similar behavior where uploads from s

Installed Box for Salesforce and Box AI for Salesforce add on. Most of the calls work out of the box except a few such as Ask Box which would read a PDF stored in Box. Opened a Support case and the initial responses were incorrect.You can only access Box AI via Box Interface - No I just installed Box AI for Salesforce and it works. This is only available to Enterprise plans and up - Not according to this Oct 25 release from Box. https://support.box.com/hc/en-us/articles/45612941554835-Expanded-AI-API-Access-and-AI-Units-for-Business-Business-Plus-and-Enterprise-Plans So now I don’t trust the answers I’m getting. I just want a handful of credits to: 1. Confirm that the reason I’m getting the Unauthorization error for this specific API is because I need credits. 2. See if what it’s returning is what I can use for my Agent Action. The only purchase of credit option I see is for a full year?? I’d even buy a handful but I obviously do not want to commit to a year without trying. Support als

SummaryThe preflight check endpoint applies NFKC normalization to the incoming filename/folder name before checking for conflicts, but does not apply the same normalization to the names already stored in the folder. This causes an order-dependent, asymmetric 409 conflict for NFKC-equivalent names that can legitimately coexist as separate items.Steps to reproduceTake two names that are NFKC-equivalent but distinct code points:- Item A: `\uFA1B` (CJK Compatibility Ideograph, U+FA1B)- Item B: `\u798F` (CJK Unified Ideograph, U+798F)These two items can coexist in Box — the actual upload/create endpoint accepts both. However:Order 1 (succeeds):1. Upload/create `\uFA1B` → stored as `\uFA1B` ✓2. Upload/create `\u798F` → preflight normalizes `\u798F` → `\u798F`, no exact `\u798F` in folder → OK ✓Order 2 (fails):1. Upload/create `\u798F` → stored as `\u798F` ✓2. Upload/create `\uFA1B` → preflight normalizes `\uFA1B` → `\u798F`, finds existing `\u798F` → **409 Conflict** ✗This behavior is reprod

Hello,We are looking to automate Box workflows using the API, and I would like to better understand how the tagging system works. Are there any limits on the number of tags that can be assigned to a file or folder? Are there restrictions on tag length, as well as on the type of characters allowed (special characters, numbers, etc.), particularly when using the Box API?

Apologies if this has been asked in the past. Can someone tell me how I can get release notification for upcoming changes to Box AI API? I saw notes from https://support.box.com/hc/en-us/categories/21356727474323-Product-Guides but does not articulate any changes in the API (or changes to the default AI model). I’d like to be notified before the changes roll into Production so we can adequately prepare for the changes.

Hi, We are trying to connect box to a salesforce sandbox to run a few tests before this goes into Production. We keep getting the error “AccountId for User XXXXXX AccountId for Service Account null” We have installed the latest version of the package and we have never had box connected to Salesfoce before. We are a new customer. Some support and help on this would be great! Thanks.

Is it possible to create and list service accounts using box api 

 These error was occor . Somebody Know?esponse_type=codeedirect_uri=https://vertexaisearch.cloud.google.com/oauth-redirectstate=eyJvcmlnaW4iOiJodHRwczovL2NvbnNvbGUuY2xvdWQuZ29vZ2xlLmNvbSIsInRpbWVzdGFtcCI6MTc3NTk3NTMwMTYyN30=client_id=ye0n4oqaz2qbh1j2ej1broyja7lixmv