Skip to content
Start in the sandbox
All connectors
Box logo

Box

AI, documents, knowledge & search

Put Box to work on your own records, inside your rules, with a person approving what it changes.

35 ways to read, 17 ways to write, each write switched on by you.

Try this in the sandboxBring us a workflow

Quality checks

Built and tested with example responses.

  1. Ready to connect: doneEvery listed action is built in.
  2. Built and tested with example responses: doneEach action is built from the provider’s published API and tested against example responses, errors, rate limits and paging.
Box with Nexra

Connected, approved, proven.

The things teams do most with Box, an example flow with a person in the loop, and what Nexra keeps as proof.

Top actions

  • Add commentcomments.createApproval by rule
  • Copy filefile_copies.createApproval by rule
  • List collaborationscollaborations.listRead

Example flow

  1. Box · List collaborationscollaborations.listDone
  2. Box · Add commentcomments.createMaker-checker
  3. Nexra · Record the decision and result in the evidence chainProven

Example workflow. Routine runs go through on their own. Only a change your rules flag, such as one over a limit you set, waits for the right person, who sees the exact change and the rule before it reaches Box.

What gets logged

  • Whether it ran on its own or who approved it, and under which rule
  • A fingerprint of the exact request sent to Box
  • Box's reply: what it created or changed
  • One entry in the evidence chain, linked to the one before

Try this in the sandbox

Run the whole flow with test data in your sandbox, then connect a Box test account before you go live.

Try this in the sandboxBring us a workflow

For developers

Technical detail

Box folders, files, web links, metadata templates and instances, metadata queries, search, events, shared-link reads, comments, tasks, collaborations, users and groups.

Box API docs
Source actions
35
Destination actions
17
Data types
28

What you can map

Reads are always available. Writes are off until you switch them on for a connection, and governed writes follow your policies.

collaborations2
  • Get collaborationSource

    One collaboration with its item, grantee, role and status.

  • List collaborationsSource

    Users and groups collaborating on a file or folder, with roles.

collection items1
  • List collection itemsSource

    Files, folders and web links in a collection.

collections1
  • List collectionsSource

    The user's collections, such as Favorites.

comments4
  • Add commentDestinationNot retried automaticallyApproval before production

    Comments on a file, or replies to a comment.

  • Get commentSource

    One comment or reply.

  • List file commentsSource

    Comments on a file.

  • Update commentDestinationProvider duplicate protectionApproval before production

    Changes a comment's text.

events1
  • List eventsSourceIncremental

    The user's event stream (uploads, edits, moves, comments, shares) or the enterprise admin log, from a stream position.

file content1
  • Download a fileSource

    Copies a Box file into Nexra, for example to read its text and tables. Returns a Nexra file reference, never the bytes or a link.

file copies1
  • Copy fileDestinationProvider duplicate protectionApproval before production

    Copies a file, optionally a specific version, into a folder.

file versions2
  • Get file versionSource

    One previous version of a file.

  • List file versionsSource

    Previous versions of a file.

files2
  • Get fileSource

    File metadata; contents are not downloaded.

  • Update fileDestinationProvider duplicate protectionApproval before production

    Renames, moves, describes or tags a file.

folder copies1
  • Copy folderDestinationProvider duplicate protectionApproval before production

    Copies a folder and its contents into another folder.

folder items1
  • List folder itemsSource

    Files, folders and web links in a folder. Folder 0 is the root.

folders3
  • Create folderDestinationProvider duplicate protectionApproval before production

    Creates a folder inside a parent folder.

  • Get folderSource

    Folder metadata.

  • Update folderDestinationProvider duplicate protectionApproval before production

    Renames, moves, describes or tags a folder.

group memberships1
  • List group membersSource

    Users in a group and their group role.

groups1
  • List groupsSource

    Groups in the enterprise.

items1
  • Search contentSourceIncremental

    Files, folders and web links matching a query, optionally updated since a time.

metadata cascade policies1
  • List metadata cascade policiesSource

    Templates set to cascade from a folder to everything inside it.

metadata instances4
  • Apply metadata templateDestinationProvider duplicate protectionApproval before production

    Applies a metadata template to a file or folder with initial values.

  • Get item metadataSource

    One template's metadata instance on a file or folder.

  • List item metadataSource

    All metadata instances applied to a file or folder.

  • Update item metadataDestinationProvider duplicate protectionApproval before production

    Changes values on an applied metadata template with JSON Patch add, replace and test operations.

metadata items1
  • Query items by metadataSource

    Files and folders whose metadata instance matches field filters, with the chosen field values.

metadata templates4
  • Create metadata templateDestinationProvider duplicate protectionApproval before production

    Creates an enterprise metadata template with string, float, date and option fields.

  • Get metadata templateSource

    One metadata template's fields, types and options.

  • List metadata templatesSource

    Enterprise (default) or Box global metadata templates with their fields and types.

  • Update metadata templateDestinationProvider duplicate protectionApproval before production

    Edits an enterprise template: rename it, add fields or options, edit field labels and reorder. Removals are not allowed.

recent items1
  • List recent itemsSource

    Items the user recently previewed, opened, uploaded, modified or commented on.

shared items1
  • Find item by shared linkSource

    Resolves a Box shared link to the file, folder or web link it points to.

shared links1
  • Get shared linkSource

    The shared link on a file, folder or web link: URL, access level, permissions, expiry and counts.

task assignments4
  • Create task assignmentDestinationNot retried automaticallyApproval before production

    Assigns a task to a Box user by ID or login email.

  • Get task assignmentSource

    One task assignment and its resolution state.

  • List task assignmentsSource

    People assigned to a task and their resolution state.

  • Update task assignmentDestinationProvider duplicate protectionApproval before production

    Resolves a task assignment (approve, reject, complete) or changes its message.

tasks4
  • Create taskDestinationNot retried automaticallyApproval before production

    Creates a review or completion task on a file. Assign people with Create task assignment.

  • Get taskSource

    One task with its type, due date and completion state.

  • List file tasksSource

    Review and completion tasks on a file.

  • Update taskDestinationProvider duplicate protectionApproval before production

    Changes a task's message, due date, type or completion rule.

trash items1
  • List trashed itemsSource

    Files, folders and web links in the user's trash (read-only).

users2
  • Get current userSource

    The authorised Box user.

  • List enterprise usersSource

    Managed and external users in the enterprise, optionally filtered by name or login.

web links3
  • Create web linkDestinationNot retried automaticallyApproval before production

    Adds a bookmark to a folder.

  • Get web linkSource

    A bookmark stored in a Box folder.

  • Update web linkDestinationProvider duplicate protectionApproval before production

    Changes a bookmark's URL, name or description, or moves it.

webhooks2
  • Get webhookSource

    A webhook's target, address and triggers.

  • List webhooksSource

    Webhooks registered by this Box application (read-only).

Access and limits

Authentication
Box OAuth 2.0 client and refresh token
Plans and access
All Box plans; metadata templates require Business Plus or above. Requires a Box Platform app using user OAuth 2.0. The app's scopes and the user's access limit what is visible.
Test environment
Box offers free developer accounts and sandboxes for Enterprise customers.
Rate limits
About 1,000 API requests per minute per user, with lower limits for search and uploads; HTTP 429 with Retry-After.
Pagination
Marker pagination for folder items, trash, recent items, collaborations, templates, cascade policies, webhooks and metadata queries; offset for search, comments, versions, collections, users and groups; stream positions for events.
Provider events
Box V2 webhooks signed with primary and secondary keys. Flows run on demand, on a schedule, or when a scheduled check finds new or changed records.

Before you build a flow

  • Client Credentials Grant (server authentication) is not supported yet: Box requires per-connection box_subject_type and box_subject_id token parameters that the shared runtime cannot template.
  • Files are downloaded into Nexra with file_content.get (following Box's redirect to dl.boxcloud.com without credentials). Uploads from Nexra are not implemented yet.
  • Deletes and trashing, shared-link creation or changes, collaboration invites, Box Sign requests, legal holds, retention policies and user or group administration are intentionally excluded: they are destructive, expose content publicly, or email people.
  • Shared links are read-only. Password-protected shared links cannot be resolved because the password would have to travel as a mapped value.
  • Metadata instance updates accept add, replace and test JSON Patch operations; remove is not exposed. Metadata template updates allow additive and reordering operations only (no removeField, removeEnumOption, removeMultiSelectOption, or option renames that rewrite stored values); taxonomy fields are not supported.
  • Metadata queries are built only from validated field keys and operators; values are always bound through query_params. Filters are joined with AND.
  • Events: a page shorter than the requested size ends pagination. Store the nextStreamPosition from the last record and pass it as Stream position on the next run. Enterprise admin_logs require an admin token with the Manage enterprise scope.
  • Listing enterprise users and groups requires an admin or co-admin user and the Manage users / Manage groups scopes.
  • Web links have no idempotency key; uncertain creates are not repeated automatically.
  • Comments, tasks and task assignments have no idempotency key; uncertain creates are not repeated automatically.

Developer reference

  1. Create the Box credentials described above with the narrowest permissions your flows need.
  2. In Nexra, open Connect, then Connections, then New connection, choose Box, enter its settings and credentials, and tick only the write actions you need. Connection guide
  3. Test the connection, then use its actions as flow sources and destinations. Flow guide
Box docsAPI referenceBox docsAuthenticationBox docsRate limitsBox docsWebhooks

Machine-readable detail: GET /api/public/connect/connectors/box and the Connections API.