Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 0
- 4 1
- 3 3
- 2 3
- 1 0
Trust in production
- Trust it - 0%
- With caveats - 29%
- Wouldn't - 71%
29% would recommend this server
How reviewers scored it
- Setup & docs 2.6
- Auth experience 2.9
- Reliability 2.4
- Maintainer responsiveness 2.7
Why it got a C
Box's official server, hosted over HTTPS with OAuth sign-in and no advisories on record. An admin must enable it, can switch individual tools on or off, and sets the scopes for custom client credentials; riskier tools such as moves and shared links start off. Default tools still upload files, copy folders, add comments and create hubs, and it reads files other people wrote, so keep tool approval on. Box's old self-hosted server is deprecated. Biggest deduction: the last dated server change is February 2026 and the server is closed source, so maintenance scores zero; default scopes are read-write on all your files.
How to connect
// Cursor Settings > Tools and MCPs > Add Custom MCP (mcp.json); client ID and secret from the Box Admin Console
{ "mcpServers": { "box": { "url": "https://mcp.box.com",
"auth": { "CLIENT_ID": "your_client_id", "CLIENT_SECRET": "your_client_secret" } } } }claude mcp add box --transport http https://mcp.box.comIs Box MCP Server safe?
Is Box MCP Server safe to use?
Box MCP Server grades C (usable with care). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Updates are rare or unknown, so fixes may be slow to arrive.
Does Box MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Box MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Collaboration
- A Google Drive MCP ServerOfficial Google-hosted Drive server (Developer Preview) to search, read, download, create, and copy files, with scoped OAuth.
- A Pragor Project Board MCP ServerHosted server that connects an agent to a Pragor project board to read and update messages, tasks and operations, with a per-agent token limited to its project role.
- A Slack MCP ServerOfficial hosted Slack server to search and read messages, files, and canvases, and send messages as you.
- A monday.com MCPmonday.com's official MCP server, hosted at mcp.monday.com or run locally from npm, to read and update boards, items, columns, updates and forms.
- B Asana MCPOfficial hosted Asana server to search, read, create, and update tasks and projects, with OAuth sign-in.
Embed this badge
[](https://trustedmcp.io/servers/box-mcp-server)<a href="https://trustedmcp.io/servers/box-mcp-server"><img src="https://trustedmcp.io/badge/box-mcp-server.svg" alt="TrustedMCP grade C" height="80"></a>Community reviews
Handy for dev, careful in prod
I like it, with reservations. Open issues pile up without replies. Works today, but I am watching for a fork. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Searching old conversations for decisions
- Setup & docs 3/5
- Auth experience 2/5
- Reliability 3/5
- Maintainer responsiveness 2/5
Would not run this unattended
Not what I expected from the description. Narrowing the scopes took ten minutes and made me much happier running it. Sign-in flow was painless and I never had to paste a key into a config file. Keeping it to local experiments for now.
Used for Posting daily standup summaries
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 2/5
Security story needs work
Gave it a fair shot over two weeks. Auth is handled properly, and revoking access later was one click. Maintenance has gone quiet, so I would not build anything critical on it. Hosted endpoint means no local process to babysit. I will check back in a few releases.
Used for Meeting prep from shared docs
- Setup & docs 2/5
- Auth experience 2/5
- Reliability 1/5
- Maintainer responsiveness 3/5
Quietly reliable
Been running this for about a month now. Hosted endpoint means no local process to babysit. Auth is handled properly, and revoking access later was one click. The OAuth flow worked first time in Claude Code. Keep permissions tight and it is a good tool.
Used for Drafting announcements
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Decent, not set-and-forget
Mostly reliable, with the odd timeout. Self-hosting it was straightforward and I like keeping the data on our side. Sign-in flow was painless and I never had to paste a key into a config file. Maintenance has gone quiet, so I would not build anything critical on it. Recommended, with sensible guardrails.
Used for Keeping project boards up to date
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 2/5
- Maintainer responsiveness 4/5
Too much access for my comfort
It works in a demo, but things got shaky under real use. The OAuth flow worked first time in Claude Code. The last release is getting old, which makes me nervous long term.
Used for Summarising channels I missed
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 1/5
Does the job, docs could be better
Took longer to configure than I expected. Self-hosting it was straightforward and I like keeping the data on our side. I like that access goes through a proper sign-in instead of a long-lived secret on disk. For anything real I would look elsewhere.
Used for Turning chat threads into tasks
- Setup & docs 3/5
- Auth experience 2/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.