Box Platform

We’re currently using the /folders/trash/items endpoint to get trashed items. When I recover them, I use the GET files and GET folder endpoint to sync my files in Box. It appears the modified_at date doesn’t update when a file/folder is restored thus the file/folder never gets restored as undeleted in my system.Is there another way to retrieve files/folders that have been restored from the trash? 

What's in the roadmap for optimizing the Box API's + documentation for "vibe coders" to quickly build with Box? 

Hello Sir/Madam,We would like to set which file extensions should be allowed on upload to box folders. We are sending app user tokens to browsers. The browser passes the token to Box UI Elements, i.e. the Uploader element. We can customize JS scripts to only allow a list of file extensions. However, is it possible to do it through box settings so that they can’t use the token maliciously to upload files with unauthorized extensions? I can see that in Governance / Content Security / Policies we can set which file extensions are forbidden, but I’m searching for the opposite: setting which file extensions should be allowed.Does box support this feature, or is there a workaround (through collaboration settings for example)? Thank you for your time,Sincerely,Antonin Marxer 

Hi, I’ve been working with the Java SDK and am trying to use the FileRequest copy method to apply an existing template to file requests to new folders. This is the example code I’ve been following:https://developer.box.com/guides/file-requests/copy/But the template doesn’t seem to be copying over correctly. Could there be an issue with the Java SDK?Thanks!

Hi Team,We are planning to develop an integration between Box and Zoho Cliq.Use Case:We are trying to fetch both team folders and personal folders of a user through the API. However, we couldn’t find any specific endpoint that directly supports this.Currently, we are able to fetch all files and folders in the root directory using the /folders/0/items endpoint. Is there any recommended workaround or approach for specifically identifying team folders (i.e., folders shared with groups)?

Hi,I’m running an API Call to upload a PDF file to Box. I get the PDF URL from another API call to another software, and then input the URL into this apex class, it downloads it and uploads it into Box folder of specific folder Id which I input. For some reason, everything works, but the file that comes into Box is not PDF and is of unsupported file type (can’t be opened or downloaded). Can anyone find what my error could possibly be? public class HV_BoxPDFUploader {    @InvocableMethod(label='Upload PDF to Box' description='Uploads a PDF from a URL to Box using Box Toolkit')    public static List<Result> uploadPDFToBox(List<Request> requests) {        List<Result> results = new List<Result>();                for (Request req : requests) {            Result res = new Result();            try {                // Download PDF content                Http http = new Http();

Join us for a webinar dedicated to developers, where we will explore the generated Box SDKs. You’ll see several code demos of Box SDKs in Python, .NET, and TypeScript both on the server side and within a web browser. Learn tips and tricks, get to know new convenience methods, compile-time issue detection, and get to know exciting new features coming soon.Join on April 15th, and choose a time slot that works best for you.Register here: https://events.box.com/box-webinars/box-sdk-webinar-2025See you soon!

I referred the API documentation from link below:https://developer.box.com/reference/get-users/#param-user_typeAccording to the documentation, I should be able to fetch external users by passing the value "external" to the "user_type" query parameter in the "/users" API. However, when I tried this, it returned an empty list, even though I know there are external users in my account. I have attached screenshots for your reference.External User tab UIPostman API responseCould you please clarify if any limitations with the a

We are looking to automate the process of adding users to segments within an Information Barrier using the Box API, as we anticipate frequent additions to each segment. However, we are encountering issues during implementation.When attempting to add a user to a segment while the Information Barrier is in the "enabled" state, the API returns a 409 Conflict response.The API endpoint we are using for this operation is: POST /shield-information-barrier-segment-members.We understand from the documentation that modifying segment members is not allowed when the Information Barrier is in the "enabled" state. Could you provide guidance on the recommended approach to edit segment members via the API under these circumstances? Is there a specific workflow we should follow to handle this?

Hello dear box.com support team, Perhaps someone here can help me… but first, some information: TB: 115.6.1 (64-Bit) OS: Windows 10 Account Type: POP Mailbox Provider (split): SMTP marec.de (own domain) / POP (Incoming server:) gmail.com Storage Service (the one that is / isn’t working ;)): box (box.com) AV: Windows Defender Firewall: Windows Defender (and Fritzbox) On the subject: For many years, I have been using the Box (box.com) add-on with Filelink (from a certain attachment size). It has always worked great. However, for some time now, the upload always fails, I can no longer use Box (box.com) in conj

Hello, I'm trying to integrate with Retool to sign some documents via API, I've already created the app and granted all necessary scopes for it.The problem is with the OAuth2 authentication, when I authenticate with Retool, it successfully generates the access token, but it didn't grant the sign scope, even when I (on purpouse) write the scopes when I request the access token.When I try the developer token it works fine.

Hi Box Community,I hope this message finds you well.As part of the BOX redesign in our organization, I worked on redesigning the BOX API Python code. Here is an overview of the code logic and the challenges faced:Code LogicPython code is invoked. Checks for the specific folder ID and retrieves the total number of files available. Creates a loop with a batch size of 100. Executes the download command.Scenario100 files, each with a size of 150 MB, were present in the BOX folder ID.Challenges FacedDuring the download, 96 to 97 files are downloaded with full size, but 3 to 4 files are downloaded with 0 MB size.Workarounds ExecutedPost-download of each file the script revalidates the file size. If the file size is 0 MB, a retry for the download is executed. This worked fine even for large

Hi Everyone,Need to have any documentation about the default expiration period for a JWT requested through private key default expiration period.Best Regards

Hello Box devs!I’ve written a JS script that connects to box and uploads some files. When I run it locally, the script connects to Box using the following: { "boxAppSettings": { "clientID": "value", "clientSecret": "value", "appAuth": { "publicKeyID": "value", "privateKey": "value", "passphrase": "value" } }, "enterpriseID": "value"}Locally this works and there is no problem. The issue is when the script is run by a Github Workflow for automation. In this case, no matter how I format the private key value, I get this response: Error connecting to box: secretOrPrivateKey is not valid key materialThis is the error I would get locally if the key was not being correctly loaded, due to an incorrect filepath or data type (not a string). I’ve confirmed this is not the case on github - the script finds the secret value, but using it produces this error.  I’m having a very tough time unders

I do find my question to be similar to an unanswered one I can set the event type to download and only return download events.  but when I set it to accessrevoked I see results returned for content_access, Delete, upload, etcI am using EventType = new List<StringEnum<GetEventsQueryParamsEventTypeField>> { new(GetEventsQueryParamsEventTypeField.AccessRevoked) } to set the filter in the parameter variable

Hi, I created a platform App using OAuth 2.0.  I created a website that allows a user to login to Box, then use the Box API to list all the folders that the user owns.  I use the Create folder lock endpoint to allow the user to lock/unlock a folder.  However I always get an Authorization failed when trying to lock/unlock.  The app has both read and write permissions.  Are there other settings I need to set ?  Thanks.

お疲れ様です。SalesforceからBoxApiへのアクセスを試みたのですが、エラーになってしまってアクセスできませんでした。エラーの内容：Box API 認証エラー: {"error":"invalid_grant","error_description":"Please check the 'sub' claim. The 'sub' specified is invalid."} 実際いただいた、公開鍵/秘密鍵のペアのデータを確認したところ、Enterprise IDが0になっていたので、subにUserID（番号）を入れて、box_sub_typeをuserにしましたがエラーになりました。最初はこの設定でやっていました。 ですが、エラーになっていましたので、アプリの状態も確認しました。 こちらのアプリが承認されていないからアクセスされないというのも原因としてありますでしょうか？結論として、無料ユーザの場合は外部ApiからJWT認証してデータをとることは不可能なのでしょうか？可能でしたら、やり方を教えていただけますでしょうか。以上、よろしくお願いいたします。

Hello, Team.I got a 429 Error when calling the search API.The error message is as follows.--------------------{"type":"error","status":429,"code":"rate_limit_exceeded","help_url":"http:\/\/developers.box.com\/docs\/#errors","message":"Request rate limit exceeded, please try again later","request_id":"XXXXXX"}--------------------I found information about this error at the link below.https://developer.box.com/guides/api-calls/permissions-and-errors/common-errors/https://developer.box.com/guides/api-calls/permi

I am developing using Box.V2 (5.8.0) in VB.Net. Dim downloadStreamRequest = objBoxClient.FilesManager.DownloadAsync(strBoxId)  downloadStreamRequest.Wait() When executing the above process repeatedly, an internal exception with "Request timed out" always occurs on the third attempt.Even if I restart the program and try again, it still happens on the third attempt.I am not sure what is causing this issue and am struggling to find a solution.If anyone knows how to resolve this, please let me know.

How do I programmatically move files from my app service account to user accounts? I need to distribute app-uploaded files between the users. I am using box.sdk.gen API. What is the allocated space limit for the service account with a business plus subscription?

Hello I am Using Box Search API and Also Try To Search With dll When I Give the Search Keyword “disposition” In response I Get the files Which contain “disposition” in file name and file content.But ,Here i also get files Which Contain Different Keyword “dispositive” and “disposal”Hello ,Box Team Can You explain me this ?and i also try with Exact Match using operator “disposition” but return same result.  

Hello, I’m getting 104 errors when processing webhooks for Trashed files.The error only occurs in this specific scenario - I have no issues doing similar processing of webhooks for Uploaded or Restored files. I also have tested the same API calls I’m running here from a Jupyter notebook using the same app auth with no issues. Specifically, when I receive a webhook notification that a file has been trashed, I call box.trashed_files.get_trashed_file_by_id() with the ID from the webhook message. (This is all Python with the newer box-sdk-gen library.) This call throws the 104. When I make the same call from my notebook, it returns the file info I need with no errors.

oauth.get_authorization_url returns url that returns a 302 errorThe url starts with https://account.box.com/login/mfa?redirectUrl

I realize this is probably the wrong forum.  And I am sure I am overlooking something simple - but I am having an issue with new users view of folders within Box.  I haven’t had this problem in the 2+ years we have been using Box and I have spent more time than I care to admit trying to figure it out.  For the last two years my existing users will navigate to the folders in Box via the path - All Files>Salesforce Root Folder>Object Folder>Record Folder. All collaboration is granted via the Box for Salesforce integration. They don’t have collaboration rights granted to anything but the selected Record Folders - but they are housed in the above tree and makes their All Files page much cleaner.The issue is that my recent new users (last 2 months) are not getting this same tree.  Instead it is All Files>Record Folder.  And results in a cluttered mess on their All Files page.  Ultimately they can still get the folders and files they need to do their j

Hello,I am working on an integration between kintone and Box. When using a Box Starter account to create a shared link from kintone for internal use, I encountered the following error:{"type":"error","status":403,"code":"forbidden","context_info":{"errors":[{"reason":"invalid_parameter","name":"access","message":"Invalid value '1'. The item does not allow this access option."}]},"help_url":"http:\/\/developers.box.com\/docs\/#errors","message":"Forbidden","request_id":"h7yusxhze4s1svcd"}The issue does not occur when the access is set to 'open', but it appears when the access is set to 'company'.Could anyone help me understand the cause of this issue and how to resolve it?Thank you for your help!Best regards,Marie