Box Platform

We have created JWT auth app for Authentication (app_user)app_user - https://developer.box.com/platform/user-types/#app-userQuestion:We have seen in consistent response behaviour in Users Listing API(https://developer.box.com/reference/get-users/)- for some Box Accounts app_user is included , for some its notDoes any settings in Box Account impact this behaviour of Users Listing API  

I have a box app that is using Oauth to authenticate.  Our users have to log in individually to get access to my app.  When I capture the user id using client.users.get_user_me().loginit returns the user id of the developer that setup the platform app.  Is there anyway to capture the user id as they are authenticating?  

Hello,according to the API-doc there’s no possibility to create templates using the API. Are there any plans to enable this in the future.I imagine posting a structured pdf-file with tags through an API-call…Thank you very much in advance for you feedback!Jan

Hi I  want to get an API to allow my Vercel user interface page to select files in some folders in Box, how do I do that? I do not write script, there must be a simple way of doing this?

I created a Box app with the my app’s public key and then authorized it Then deleted the Box app and created a new one In the new app it did not allow me to use that public key (even though there were no other apps using it); probably because the authorization was still in place (even if attached to a deleted app) and to delete the authorization I had to email the Box support. I decided to completely delete my account. however, when I tried to create a new app in a new account, it still showed the same error: apparently it is a rule across all Box app public keys. So, now I cannot basically create a Box account with my current Bubble app public key. Now, I cannot reactivate my original account since it says: Please email billing@box.com to make changes to your plan.  My questions: 1. How can I login to my deleted account again so that I can manually do sth to completely delete the reference to the public key? 2. How can I tell Box to at least completely delete the Box app with the publ

Hi, I am trying to implement an e-signature workflow using Zapier. However, current implementation of the Box integration in Zapier does not have any signature-related triggers/actions.  Some apps have a generic "API Request" action (example below) but unfortunately box does not.   Is there any way to access the signatures API through Zapier? Thanks in advance.

Are there any sample code snippets or documentation on how to set up the API to upload documents? Any help would be appreciated. I searched and didn't find what I needed, just marketing material.

I followed this: https://medium.com/box-developer-blog/box-python-next-gen-sdk-getting-started-with-ccg-81be0abc82d9 And it worked but this stops at `user_client.users.get_user_me()`. I want to be able to list files in my folder and download them. How can I do that? I use python.

Current State:The downscoped token used for this has the permission for “base_explorer item_delete item_download item_upload item_preview” The app that’s being used has Co-Owner permission as well.  The Content Explorer renders based on the following settings:  We had a response Interceptor to the Box Content Explorer, but even after removing that and using OOB Box Content Explorer functionality, the download doesn’t work. I would only get something if I were to manually copy paste the download link from the response to a browser:   The download doesn’t work, neither does Preview I’ve been following the documentation provided here: https://developer.box.com/docs/box-content-explorer I believe something is wrong here and need your assistance. What needs to happen for the download to work?

I was having the same problem as the following thread:When i try to generate a token by API with the box_subject_type: user, i get this messege: I noticed that i dont have access to an Admin account, but I intent on using the api to upload files to my personal box. Do I have to publish my app before hand? But its to much of a trouble for a simple use. 

Hi,I was looking for a way to delete a user using this method : curl -i -X DELETE "https://api.box.com/2.0/users/$userID?force=true" -H "authorization: Bearer $mytoken"HTTP/1.1 404 Not Founddate: Fri, 13 Jun 2025 10:20:28 GMTcontent-type: application/jsonx-envoy-upstream-service-time: 110box-request-id: 084aa24f457de6630b1c1719f0ffcea0ecache-control: no-cache, no-storestrict-transport-security: max-age=31536000Transfer-Encoding: chunked{"type":"error","status":404,"code":"not_found","help_url":"http:\/\/developers.box.com\/docs\/#errors","message":"Not Found","request_id":"9qmpq2i2dviyjv95"}I have replaced personal data $userID and $mytokenA GET request is working properly.Many thanks

I’ve created the platform app, to list files in the folder shared with me. This app has a “Client Credentials Grant” authentication This app has “Make calls using as-user header” permissionIn my account ( which is an enterprise admin) I have two folders: “XXX” and “My Box Notes”.When I list my root folder using https://api.box.com/2.0/folders/0/items I can only see “My Box Notes”. What should I do to see the “XXX” folder which was shared with me?

Hi there,I'm trying to understand whether it's possible to use the Box API with a free account. I’ve successfully created an application, but it seems like it remains unapproved indefinitely.From what I can tell, without this approval, the API doesn't function properly. Could someone clarify whether free accounts can gain approval for apps or if API access is restricted to paid plans?Thanks in advance for your help!Best regards,  

Hi,I have created an application (2392115) to read the files from a program. It is in status “Pending Authorization”. How long it takes to get approved?  Thanks. 

If I have created an app with client_credentials grant, what happens if the user account with which the app was created gets deleted/removed. Will the app still function? https://support.box.com/hc/en-us/community/posts/360049153294-What-happens-to-custom-apps-created-by-a-user-when-that-user-s-account-is-removed-Above post suggests that the app will be orphaned, and once the collaborator is added to the app, it will function. But my query is mostly related to client_credentials grant app, as I’m using the app creds with box_subject_type as user and box_subject_id as user_id of the user who created the app. If the user gets deleted, will I get invalid grant_credentials error? And can I still use the app with other user’s user_id?

Hi, I’m trying to create an application which will read the content of a box folder, shared with me, on schedule.OAuth client_credentials grant type fit my needs well. I’ve created a platform app with authentication using “Client Credentials Grant” to test the authentication. I’ve tried to obtain the token using the following bash script (it uses httpie) having CLIENT_ID, CLIENT_SECRET, USER_ID set to the appropriate values:CLIENT_ID="client_id"CLIENT_SECRET="client_secret"USER_ID="user_id"http --print=hHbB --form POST https://api.box.com/oauth2/token \ box_subject_type=user \ box_subject_id=${USER_ID} \ client_id="${CLIENT_ID}" \ client_secret="${CLIENT_SECRET}" \ scope="root_readonly" \ grant_type=client_credentialsand I keep getting the following error:HTTP/1.1 400 Bad RequestAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Transfer-Encoding: chunkedcache-control: no-storecontent-type: application/jsondate: Thu, 12 Jun 2025 11:36:01 GMTset-cookie: box_visitor_id=684abba132c8c2

need to create an app on a box enterprise accountan external application will upload files to box. Box account has added users who will check the files Organization is recommending to use oauth  the external app is automated and need to run without having someone enter credentials everytimeis this workflow possible? 

Hello we need to temporarily raise our rate limit so we can bulk create and permission box folders to onboard a large new customer

I’ve got a small Box AI application and we’re considering exposing the output of it to the public. Has anyone got some best practices for profanity and inappropriate content filtering with Box AI? It would be enough to just have Box AI say “I’m sorry. I can’t answer that question.” or something like that, when the user asks an inappropriate question. Do I just handle that through the prompt in the API call, or is there some other functionality I should be using that provides more structured content filtering? 

I have a list of users for whom I need to change status from Active to Inactive. Is there any way to do this in bulk?

Hi team, I’m trying to set up box app with client_credentials grant_type. I have followed these steps: https://developer.box.com/guides/authentication/client-credentials/client-credentials-setup/I have setup an app with App + Enterprise Access, and have provided all the permission including the all files and folders access permissions.Now I am trying to create a client, and fetch folders and files data with enterprise box_subject_type, but it gives empty list. If I try the same with user box_subject_id, then it works and gives all the files and folders from root folder. But as I understand, this will give give admin level to the client(or the user with which I have authenticated). Is there any way to fetch all files and folders using enterprise access, and which do not need user id?I have tried by collaborating a folder with the service user which was created for my app, but with this it only gives access to the shared folder, and couldn’t find a way to share all the folders and files

Hi,In CCG model , what is the minimum requirement should business plant be sufficient or should I get a Enterprise plan for App+Enterprise Access.Also, may I know the client secret expiry duration.

When you open the first file in Box, the file_id is set correctly to the ID of the first file opened, but if you then open a second file, the file_id may remain the ID of the first file. If you then reopen the second file, the file_id will be correctly updated to the ID of the second file, but please check to see if this is an issue on the BOX side.