mcp-box
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| HOST | No | HTTP bind address | 127.0.0.1 |
| PORT | No | HTTP port | 3333 |
| BOX_API_KEY | Yes | Box dashboard API key; never sent to the MCP client | |
| ALLOW_WRITES | No | When false, deny non-read tools | true |
| BOX_BASE_URL | No | API base | https://ascii.dev/api/box/v1 |
| MCP_BOX_MODE | No | isolated or trusted | isolated |
| MCP_BOX_AUDIT_PATH | No | Optional audit JSONL path |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| box_createA | Create a Box cloud computer. Isolated mode always uses noEnv. Waits until ready when possible. |
| box_listB | List boxes for the account. |
| box_getA | Get box state. Desktop URLs are redacted in the summary field. |
| box_execC | Run a shell command in a ready box. timeoutSeconds is capped at 60. |
| box_exec_backgroundA | Start a long command via nohup under .mcp-box-jobs// and return immediately. |
| box_job_statusB | Poll background job state from .mcp-box-jobs// files. |
| box_read_fileA | Read a file relative to the box workdir. |
| box_write_fileB | Write a file relative to the box workdir. |
| box_download_artifactA | Download an artifact as base64 (max ~2MB). Prefer box-side tools for larger files. |
| box_desktopB | Get a secret-bearing desktop/noVNC URL. Never log the full URL. |
| box_stop_and_waitA | Stop a box and wait until archived. Requires confirm:true. force requires trusted mode. |
| box_resumeA | Resume an archived box and wait until ready. |
| box_forkA | Fork a box from its latest snapshot. Isolated forks always use noEnv. |
| box_interruptA | Best-effort interrupt of prompt work on a box (not shell background jobs). |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/EnzoTironi/mcp-box'
If you have feedback or need assistance with the MCP directory API, please join our Discord server