Skip to main content

Box Platform

All things API and SDK related

815 Topics
M
mdelgado95New Participant
asked in Box Sign API
Request Signature Box Grayed Out w/ Error Message

I have recently set up a free Box account. I’m having issue with Requesting a Signature. The request signature box is grayed out. Why? Based on the data for the free account, I should have the ability to send 5 documents for signature per month. I have not routed any documents for signatures in July. Please advise. Upon logging in with my EDGE Browser, this is the error message that I receive. I’ve current using another Box account with the same browser, so the browser is not the problem. Can you please take a look on the back end and see if something is not set correctly.  Thanks! 

130
M
D
Da Chuan LinNew Participant
asked in API
how to get authorized for application

Hi,I have created an application (2404923) to upload the files to box from a program. It is in status “Pending Authorization”. How long it takes to get approved? Or how to know who can help approve my application?Thanks a lot 

130
D
C
cloudsferNew Participant
asked in API
updated metadata not appear when fetching file

using the .Net Sdki am not seeing the update metdata for a file  those are the fileds         public const string FieldSequence = "sequence_id";        public const string FieldEtag = "etag";        public const string FieldName = "name";        public const string FieldCreatedAt = "created_at";        public const string FieldModifiedAt = "modified_at";        public const string FieldDescription = "description";        public const string FieldSize = "size";        public const string FieldPathCollection = "path_collection";        public const string FieldCreatedBy = "created_by";        public const string FieldModifiedBy = "modified_by";        public const string FieldOwnedBy = "owned_by";        public const string FieldSharedLink = "shared_link";        public const string FieldParent = "parent";        public const string FieldItemStatus = "item_status";        public const string FieldPermissions = "permissions";        public const string FieldTags = "tags";  Am I missing so

80
C
3
3DPlataformerNew Participant
asked in API
Generate an RSA keypair problem

I'm trying to generate a Public/Private keypair in the developer console for my application, but it continuous to fail. I already set the 2FA, but still can’t generate my keys. I need help!

120
3
A
Austin JohnsonNew Participant
asked in API
Error when trying to generate public/private key, or upload public ey

I’m trying to set up a new Platform App using JWT, but when I attempt to generate a public/private key, or upload my self-generated public key, I get an error about needing 2-factor on. My 2-factor is on. It then sends me to a dead-end page in Box outside of the Developer page.

110
A
A
akayyNew Participant
asked in API
Unable to retrieve user & enterprise events using Box API

I have a Box app with a valid Client ID and Client secret. The app is set to App + Enterprise Access. I also have “Manage Enterprise Properties” checked. I can receive a Bearer Token using the Client ID and Client secret. However, when I try to retrieve events using curlcurl -i -X GET "https://api.box.com/2.0/events" \ -H "authorization: Bearer <ACCESS_TOKEN>"I get thisHTTP/2 200 date: Fri, 11 Jul 2025 06:38:55 GMTcontent-type: application/jsonx-envoy-upstream-service-time: 70strict-transport-security: max-age=31536000box-request-id: 0ad50df19baed02f845ec8d10931bcb48via: 1.1 googlealt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000{"entries":[],"next_stream_position":30401049700682011,"chunk_size":0}% Why is my entries empty?

140
A
A
akayyNew Participant
asked in API
Unable to retrieve user/enterprise events using Box API

I have a Box app with a valid Client ID and Client secret. The app is set to App + Enterprise Access. I also have “Manage Enterprise Properties” checked. I can receive a Bearer Token using the Client ID and Client secret. However, when I try to retrieve events using curlcurl -i -X GET "https://api.box.com/2.0/events" \ -H "authorization: Bearer <ACCESS_TOKEN>"I get thisHTTP/2 200 date: Fri, 11 Jul 2025 06:38:55 GMTcontent-type: application/jsonx-envoy-upstream-service-time: 70strict-transport-security: max-age=31536000box-request-id: 0ad50df19baed02f845ec8d10931bcb48via: 1.1 googlealt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000{"entries":[],"next_stream_position":30401049700682011,"chunk_size":0}% Why is my entries empty?

70
A
E
emilatflyxNew Participant
asked in API
insufficient_scope for enabling webhooks using OAuth token

Hi, I am facing the issue where I’m getting back the following error when trying to enable webhooks for a folder via the API using a valid OAuth token:error="insufficient_scope", error_description="The request requires higher privileges than provided by the access token."Example of a request:curl -X POST "https://api.box.com/2.0/webhooks" -H 'authorization: Bearer '$BOX_TOKEN'' -H "content-type: application/json" -d '{"target": {"id": "0", "type": "folder"}, "address": "xxx", "triggers": ["FILE.UPLOADED", "FILE.TRASHED", "FILE.RESTORED", "FILE.MOVED", "FILE.RENAMED"]}'I can confirm that Manage webhooks is enabled in the console. I have also followed steps to here to make sure the app is enabled the app in the admin console. Note that there’s no authorization option for OAuth apps under Platform Apps Manager -> User Authentication Apps tab. I’m facing this issue even with a fresh token is obtained after making the configuration changes above.What can be done to overcome this?

190
E
W
whayesNew Participant
asked in API
Having trouble access the GxP Sandbox and other GxP Features

I submitted a ticket with Support about not being able to access or enable the GxP feature and shared back screenshots where they said I should see the option to enable the GxP Sandbox and nothing was available, and Support said to open an issue with my Account Rep which I don’t have. I tried to open a ticket with Accounts, and it was closed in favor of the ticket with Support and marked as a duplicate which I wasn’t able to re-open to refute. So far I’ve been very unimpressed with Box and Box Support and am considering asking for a refund. Has anyone else been able to get GxP functionality setup with Box and how did you do it? We have the Enterprise Plus license which indicates GxP as a feature.  

80
W
R
RoyNew Participant
asked in API
"The request requires higher privileges than provided by the access token."

Hello,I am trying to automate some workflows for our NGO with the help of the APIs of box. Right now I am testing the endpoints in bruno. Many endpoints are working fine with the developer token. However I can’t get the Box sign APIs to work. "The request requires higher privileges than provided by the access token."We are on the “nonprofit Starter” box plan with 25k API calls per month.I have submitted and approved the app to our workspace. I have enabled all scopes within the app that I see (however I see none specific to box sign): Box sign is enabled for our organization and working fine manually: Are box sign APIs only available for higher tier subscriptions? If yes the description in the “Plan comparison” is misleading because it does not state which APIs are available per plan.Thanks for your time!

230
R
DonHammons
DonHammonsKnown Participant
published in Blogs
Box Model Context Protocol with mxHERO Mail2Cloud Advanced (with MCP)
Box Model Context Protocol with mxHERO Mail2Cloud Advanced (with MCP)

New BLOG showcasing a DEMO and the powerful tandem of leveraging Box’s Model Context Protocol with mxHERO Mail2Cloud Advanced (with MCP) to render context, insights and AI outputs leveraging cross-actor, cross-account and thematic unstructured data (and metadata) from email.  A great example of leveraging Box’s new MCP for Agentic AI and A2A use cases.Blog link via:  https://medium.com/box-developer-blog/mcp-solution-sales-account-management-seamless-handoff-e1e8cfa3dafa Video demonstration of mxHERO & Box MCP orchestration by Claude for Desktop 

210
DonHammons
S
ssk1aNew Participant
asked in API
IP probably blacklisted during tests. How to solve this?

In box developer I have setup a platform app to connect and sync some data from an Ubuntu server using rclone.I have done all steps correctly but upon connecting i get error 403 forbidden, though the access token is valid.Probably, while doing some tests for the script, seems like box banned the server ip.I tried reproducing from other machine using the same platform app, and everything works.How can box.com remove IP from blacklist?I am not using paid account yet, I am on the free tier, but I am not willing to proceed to premium if such block encounters.

90
S
F
FerverNew Participant
asked in API
Unexpected API Response [404 Not Found | xxxx] not_found - Not Found | Manage shared links in bulk

Hi everyone!  I am using Box CLI through my command line. I managed to bulk-create 400+ folders and generate individual shared links. So far it was working great. Since I need the shared links to be open to the public, I used the shared-links:update command to open them up in bulk, but for each entry on the .csv it shows the following message: Unexpected API Response [404 Not Found | aei9xvi30io52itj.039fa4e7915631e5159561a174d9cf7f5] not_found - Not Found I know it’s not an authorization/access issue because if I do the command manually (i.e., not through bulk-file-path), it goes through for the individual folder. I can't do it manually for the 400+ folders, so I would appreciate any guidance on how to bypass this issue which is not very specific to troubleshoot. Thank you in advance!

200
F
C
cmBoxUserNew Participant
asked in API
File download for box fails for one app, but passes for another

Hi All. I am working on downloading some files and folders from box. I have two apps, one created back in 2022 and one created last week. The two apps have identical setup (apart from the old one having the “App Details” option set to “Select an option”),When attempting to download the files with the old one all is good and the files are downloaded. However when I use the new one I receive the following response for downloading the files: “access_denied_insufficient_permissions”.It is very odd as they use the same code to generate the auth token and url (files/{fileId}/content). As mentioned the permissions are the same:Authentication method: OAuth 2.0 with JSON Web Tokens(Server Authentication); App Access Level: App + Enterprise Access; Application scopes: All selected; Advanced features: All selected;Both apps are authorized.I even added a check with url: “/files/{field.id}?fields=permissions,created_by”, and the “can_download” permission is set to “true”.So far I cannot narrow down

520
C
Z
zmuizNew Participant
asked in API
How to get only the files that are modified between two given date ranges using Box’s Python SDK ?

Hi Box Support / Community,I’m working on a Box integration where I need to programmatically retrieve only all files and folders that were modified within a given date range — for example, from 2025-06-22 to 2025-06-28.What I’ve Tried: 1. Search API with updated_at_rangeI referred to the SDK documentation here:📖 Box Python SDK Search Query DocumentationExample:search_results = client.search().query( query='S',ancestor_folder_ids=[folder_id],updated_at_range=('2025-06-22T00:00:00Z', '2025-06-28T23:59:59Z'))Issue:This still returns records whose modified_at (or created_at) values fall outside the specified range.For example, even with the range set as 2025-06-22 to 2025-06-28, I received a result like:{ "id": "1903231782703", "name": "Screenshot 2025-06-16 at 7.15.16 PM.png", "created_at": "2025-06-18T23:55:45-07:00", "modified_at": "2025-06-18T23:55:45-07:00" } This was clearly outside the defined date range, yet still returned by the search query.I also tested with created_at_range an

491
Z
M
masataka takiNew Participant
asked in SDKs and Tools
Box Java SDK Timeout Configuration Issue During Authentication

Based on the following documentation, we have set setConnectTimeout and setReadTimeout to 300000 milliseconds, but even after 30 minutes have passed, no timeout error occurs and the application continues to wait for a response from Box.https://opensource.box.com/box-java-sdk/javadoc/com/box/sdk/BoxAPIConnection.html When we captured a thread dump while waiting for a response, we observed the following stack trace:at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:352)at com.box.sdk.BoxAPIRequest.trySend(BoxAPIRequest.java:720)at com.box.sdk.BoxAPIRequest.sendWithoutRetry(BoxAPIRequest.java:378)at com.box.sdk.BoxDeveloperEditionAPIConnection.authenticate(BoxDeveloperEditionAPIConnection.java:439)at com.box.sdk.BoxDeveloperEditionAPIConnection.tryRestoreUsingAccessTokenCache(BoxDeveloperEditionAPIConnection.java:571)at com.box.sdk.BoxDeveloperEditionAPIConnection.getAppE

440
M
T
tt-box-app-userNew Participant
asked in API
What kind of error response will be returned when the max number of Calls in the Box AI API?

(en)Hi, I'm a Box user in Japan and I'm researching integrations with the Box AI API for Hubs.What kind of error response will be returned when the maximum number of calls per user account in the Box AI API is reached?--(ja)こんにちは、日本のBoxユーザです。Box AI API for Hubsとの統合機能の調査をしています。Box AI APIのユーザアカウント毎のコール数の上限に到達した場合、どのようなエラーレスポンスが返却されますか？ 

370
T
S
swarada_jNew Participant
asked in API
API endpoint details for Box FedRamp cloud (for Gov support)

Hi community,I'm looking for the base URL to access the List user and enterprise events API endpoint specifically for FedRAMP(Gov cloud) supported environment.Could someone please provide:The correct base URL for making API calls to the FedRAMP cloud instance Confirmation that this specific API endpoint (List user and enterprise events) is supported in the Gov cloud offeringThank you for your assistance! 

330
S
C
CBowkerNew Participant
asked in API
Error - same name already exists

I am using a third party system that has worked well for over a month now. I started getting this message, “Item with the same name already exists”   I know the file and folder I am attempting to create on BOX is unique. I have done the standard refresh, reboot, and cleared cache without any success. I am stumped and need to figure out a solution soon and I am getting farther and farther behind. . . .  HelpChris -- 

210
C
D
dev3New Participant
asked in API
In consistency in app user listed under List enterprise users API

We have created JWT auth app for Authentication (app_user)app_user - https://developer.box.com/platform/user-types/#app-userQuestion:We have seen in consistent response behaviour in Users Listing API(https://developer.box.com/reference/get-users/)- for some Box Accounts app_user is included , for some its notDoes any settings in Box Account impact this behaviour of Users Listing API  

190
D
L
loisgh61New Participant
asked in API
Is there anyway to capture individual user names or names of users using oauth

I have a box app that is using Oauth to authenticate.  Our users have to log in individually to get access to my app.  When I capture the user id using client.users.get_user_me().loginit returns the user id of the developer that setup the platform app.  Is there anyway to capture the user id as they are authenticating?  

140
L
J
janNew Participant
asked in Box Sign API
Use API to create sign template

Hello,according to the API-doc there’s no possibility to create templates using the API. Are there any plans to enable this in the future.I imagine posting a structured pdf-file with tags through an API-call…Thank you very much in advance for you feedback!Jan

120
J
J
JamesGalesNew Participant
asked in API
API set up

Hi I  want to get an API to allow my Vercel user interface page to select files in some folders in Box, how do I do that? I do not write script, there must be a simple way of doing this?

140
J
S
seno22New Participant
asked in API
Public key

I created a Box app with the my app’s public key and then authorized it Then deleted the Box app and created a new one In the new app it did not allow me to use that public key (even though there were no other apps using it); probably because the authorization was still in place (even if attached to a deleted app) and to delete the authorization I had to email the Box support. I decided to completely delete my account. however, when I tried to create a new app in a new account, it still showed the same error: apparently it is a rule across all Box app public keys. So, now I cannot basically create a Box account with my current Bubble app public key. Now, I cannot reactivate my original account since it says: Please email billing@box.com to make changes to your plan.  My questions: 1. How can I login to my deleted account again so that I can manually do sth to completely delete the reference to the public key? 2. How can I tell Box to at least completely delete the Box app with the publ

320
S
C
community-managerKnown Participant
asked in API
Sign API in Zapier

Hi, I am trying to implement an e-signature workflow using Zapier. However, current implementation of the Box integration in Zapier does not have any signature-related triggers/actions.  Some apps have a generic "API Request" action (example below) but unfortunately box does not.   Is there any way to access the signatures API through Zapier? Thanks in advance.

231
L

Badge winners

  • Intelligent Content Management Expert
    msasano Boxhas earned the badge Intelligent Content Management Expert
  • Intelligent Content Management Expert
    lukedewittCSMhas earned the badge Intelligent Content Management Expert
  • Intelligent Content Management Expert
    Curator Mhas earned the badge Intelligent Content Management Expert
  • Intelligent Content Management Expert
    Colin McMillanhas earned the badge Intelligent Content Management Expert
  • Intelligent Content Management Expert
    CareyLeehas earned the badge Intelligent Content Management Expert
Show all badges

Didn't find what you were looking for?

Ask the Community
Terms & ConditionsCookie settings