box.com salesforce sdk

I’m a little bit confused. i can perform 

box.Toolkit toolkit = new box.Toolkit();
system.debug(toolkit.getRecordIdByFolderId('286307925200'));

and get the correct salesforceId without any authtorization. what did i miss?