Skip to main content
Glama
EnzoTironi

mcp-box

by EnzoTironi
OverviewSchemaRelated ServersScoreDiscussions
TypeScript
Remote

mcp-box

Private MCP server that turns the ascii Box API into tools an external agent can drive. ChatGPT, Claude, Cursor, or Grok is the agent. The Box is the Linux machine.

POST /prompt is never used. Agents run shell and file tools only.

Install

npm install
cp .env.example .env   # set BOX_API_KEY
npm run typecheck
npm test

Related MCP server: can-see

Run

stdio (Claude Desktop, Cursor, Grok local):

npm run start:stdio
# or
npx tsx src/stdio.ts

Streamable HTTP (local Inspector, or behind tunnel-client):

npm run start:http
# listens on http://127.0.0.1:8787/mcp when PORT=8787 in .env

ChatGPT: use OpenAI Secure MCP Tunnel, not a public Cloudflare URL. See docs/chatgpt.md.

# after tunnel-client is installed and CONTROL_PLANE_API_KEY is set
export CONTROL_PLANE_TUNNEL_ID=tunnel_6a7290ef51b88191af7b32deba8e0640
tunnel-client run \
  --control-plane.tunnel-id "$CONTROL_PLANE_TUNNEL_ID" \
  --mcp.server-url http://127.0.0.1:8787/mcp

Then in ChatGPT: Criar app → Conexão Túnel → select mcp-box → Sem autenticação.

Environment

Variable

Default

Purpose

BOX_API_KEY

(required for live)

Box dashboard API key; never sent to the MCP client

BOX_BASE_URL

https://ascii.dev/api/box/v1

API base

MCP_BOX_MODE

isolated

isolated or trusted

ALLOW_WRITES

true

When false, deny non-read tools

HOST

127.0.0.1

HTTP bind address

PORT

3333

HTTP port

MCP_BOX_AUDIT_PATH

stderr (trusted)

Optional audit JSONL path

See .env.example.

Trust modes

Mode

noEnv on create/fork

Account secrets

Audit log

Force stop

isolated (default)

always true

blocked

off

denied

trusted

may be false

allowed via env / account

JSON lines

allowed with confirm: true

Isolated boxes cannot act on your account secrets. Use them for untrusted agent work.

Trusted mode records every tool call (timestamp, tool, boxId, outcome). Desktop URLs and tokens are redacted in logs.

Tools

Tool

Read-only

Notes

box_create

no

Default size small; TTL 3600s; waits until ready

box_list

yes

Optional state filter

box_get

yes

Desktop URL redacted in summary

box_exec

no

timeoutSeconds capped at 60

box_exec_background

no

Convention under .mcp-box-jobs/

box_job_status

yes

Poll pid/exit/log tails

box_read_file

yes

Relative paths only

box_write_file

no

utf8 or base64

box_download_artifact

yes

Base64, max ~2MB

box_desktop

yes

Secret URL; do not log full value

box_stop_and_wait

no

Requires confirm: true

box_resume

no

Wait until ready

box_fork

no

Isolated forks are noEnv

box_interrupt

no

Best-effort; prompt-oriented

There is no box_prompt tool.

Background jobs

Box has no native shell job API. Background work is:

  1. Write a launcher under .mcp-box-jobs/<jobId>/

  2. nohup the command; store pid and logs

  3. Poll with box_job_status

Clients

Grok template

npm run grok:template          # small box: grok CLI + OAuth + EnzoTironi/skills + zoen-skills/pstack
npm run grok:diagnose -- bx_…  # resume + smoke; REARCHIVE=1 to stop again

Current template: go-zoen / bx_sb5sbxzz (see docs/grok-template.md). Fork for ChatGPT work with Grok + skills + go-zoen.

ChatGPT write caveat

Full write MCP tools in ChatGPT generally need Business / Enterprise / Edu. Pro is often read-only for connectors. Confirm your plan before relying on ChatGPT as the primary write agent.

Security

  • Keep BOX_API_KEY on the host only.

  • Prefer isolated mode unless you intentionally need account secrets.

  • Redact desktop URLs (_token) from logs and tickets.

  • Bind HTTP to localhost unless you add auth (v1 has no OAuth).

Non-goals (v1)

  • Multi-tenant OAuth

  • Wrapping POST /prompt

  • Native job queue

  • Cloudflare Workers deploy

Development

npm test
npm run typecheck
npm run smoke              # fake client tools/list
LIVE_BOX=1 npm run smoke   # live create → exec → write/read → stop

License

Private / unlicensed unless you add one.

Install Server
F
license - not found
A
quality
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

View all tools

Related MCP Servers

View all related MCP servers

Related MCP Connectors

  • Remote Desktop Commander

    Hosted MCP server connecting claude.ai, ChatGPT and other AI apps to your own computer

  • mcp-aichat

    MCP server for AI dialogue using various LLM models via AceDataCloud

  • gread

    An MCP server that gives your AI access to the source code and docs of all public github repos

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/EnzoTironi/mcp-box'

If you have feedback or need assistance with the MCP directory API, please join our Discord server