{ "data": { "a": { "slug": "box-api", "name": "Box API + MCP", "vendor": "Box", "vendorUrl": "https://developer.box.com", "kind": "http-api", "category": "file-storage", "summary": "Enterprise content platform with a REST API for files, folders, shared links, collaborations, metadata and Box AI, published as OpenAPI with year-based API versions.", "url": "https://www.anchorterminal.com/tools/box-api", "markdownUrl": "https://www.anchorterminal.com/tools/box-api.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/box-api.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/box-api.json", "repo": "https://github.com/box/box-node-sdk", "license": "Apache-2.0", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.box.com/2.0", "packages": [ { "registry": "npm", "name": "box-node-sdk" }, { "registry": "pypi", "name": "box-sdk-gen" } ], "auth": "oauth", "authNotes": "OAuth 2.0 against https://account.box.com/api/oauth2/authorize and https://api.box.com/oauth2/token, with a Bearer access token on every call. Server-side apps can use JWT or client credentials instead. The remote MCP server is an OAuth-protected resource (metadata at https://mcp.box.com/.well-known/oauth-protected-resource) and asks for the root_readwrite, ai.readwrite and docgen.readwrite scopes; the last needs an Enterprise Advanced licence. Users only ever see content they already have access to in Box.", "pricing": "byo-plan", "pricingNotes": "The API and MCP server come with a Box plan. Individual is free with 10 GB and a 250 MB upload limit. Personal Pro $14 a month ($10 billed yearly). Business plans need three users, Business Starter $7 a user a month ($5 yearly, 100 GB), Business $20 ($15, unlimited storage, 5 GB uploads, Box AI, 50,000 API calls a month), Business Plus $33 ($25, 15 GB uploads), Enterprise $47 ($35, 50 GB uploads, 1,000 AI units, 100,000 API calls), Enterprise Plus $50 a user a month billed yearly (150 GB uploads, 2,000 AI units), Enterprise Advanced on request (500 GB uploads, 20,000 AI units, 200,000 API calls). The MCP server needs Business or above. Extra API calls are sold as Platform pricing (https://www.box.com/pricing; https://support.box.com/hc/en-us/articles/43974584000659).", "priceSummary": "Your plan", "where": "hosted", "x402": { "level": "no", "endpoints": [] }, "toolCount": 57, "popularity": { "githubStars": 199, "npmWeekly": 215715, "pypiWeekly": 275500, "asOf": "2026-09-30" }, "docsUrl": "https://developer.box.com/guides/", "llmsTxt": "https://developer.box.com/llms.txt", "openapi": "https://raw.githubusercontent.com/box/box-openapi/main/openapi.json", "capabilities": [ "storage.drive", "storage.share", "work.docs" ], "tags": [ "hosted", "closed-source", "mcp", "oauth", "enterprise", "typescript", "python", "webhooks" ], "lastRelease": "2026-09-11", "graded": true, "anchor": { "graded": true, "score": 69.4, "grade": "B", "agentReady": false, "rank": 186, "ranked": true, "rankOf": 950, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 84, "payments": 25, "reliability": 65, "schema": 91, "security": 73, "transparency": 76 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Public OpenAPI 3.0 spec with 297 operations, year-based API versions and an llms.txt of Markdown pages. 20 status-feed entries between 7 July and 1 October 2026, two of them over two hours on uploads or multiple services.", "bestFor": "Agents working inside an enterprise's existing Box content with admin oversight, Box AI extraction and audit needs.", "strengths": [ "Public OpenAPI 3.0 spec with 297 operations, year-based API versions and an llms.txt of Markdown pages", "At least 24 months between deprecation and retirement of an API version, with Deprecation response headers", "Official remote MCP server with OAuth, 57 tools and 22 riskier ones off until an admin enables them", "Documented rate limits (1,000 calls a minute a user, 240 uploads a minute) with a 429 and retry-after", "SDKs in Node, Python, Java, Windows (.NET) and iOS, all released on 9 September 2026" ], "weaknesses": [ "20 status-feed entries between 7 July and 1 October 2026, two of them over two hours on uploads or multiple services", "MCP server needs Business or above, a three-seat minimum, and admin enablement per tool group", "The MCP server asks for root_readwrite, so a connected agent can write wherever its user can once tools are on", "API calls are metered per enterprise, 50,000 a month on Business", "No security.txt on box.com, and no bug bounty on its security page" ], "agentNotes": [ "Call who_am_i first; the tool list depends on the plan, the admin's toggles and the scopes granted", "Expect download and upload URL, move and shared-link tools to be missing unless an admin has enabled them", "Pass fields= to trim responses and page folder listings with limit and marker", "Send a box-version header to pin an API version, and watch responses for a Deprecation header", "For a link that expires, set shared_link.unshared_at on a paid account; the free plan can't" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.4 } ], "editorialScores": { "ergonomics": 72, "maintenance": 84, "payments": 25, "reliability": 65, "schema": 91, "security": 73, "transparency": 68 }, "provenanceScore": 84 }, "connect": { "http": "curl \"https://api.box.com/2.0/folders/0/items?limit=100\" -H \"Authorization: Bearer $BOX_ACCESS_TOKEN\"", "claudeCode": "claude mcp add --transport http box https://mcp.box.com", "config": { "mcpServers": { "box": { "url": "https://mcp.box.com" } } } }, "letme": { "capability": "https://letme.dev/storage.drive", "tool": "https://letme.dev/box-api" }, "area": "everyday", "unitPrices": [ { "item": "Business Starter", "unit": "seat-month", "usd": 7, "note": "$5 billed yearly, three-seat minimum, 100 GB" }, { "item": "Business", "unit": "seat-month", "usd": 20, "note": "$15 billed yearly. Lowest plan with the MCP server and Box AI" }, { "item": "Business Plus", "unit": "seat-month", "usd": 33, "note": "$25 billed yearly" }, { "item": "Enterprise", "unit": "seat-month", "usd": 47, "note": "$35 billed yearly, 100,000 API calls a month" }, { "item": "Personal Pro", "unit": "month", "usd": 14, "note": "$10 billed yearly, 100 GB, one user" } ], "provenance": { "legalEntity": "Box, Inc.", "domain": "box.com", "domainRegistered": "1999-02-17", "domainNote": "box.com was registered in 1999, before Box was founded, so the domain was bought later.", "endpointOnVendorDomain": true, "terms": "https://www.box.com/legal/termsofservice", "privacy": "https://www.box.com/legal/privacypolicy", "statusPage": "https://status.box.com", "changelog": "https://developer.box.com/changelog/", "securityTxt": "none", "checked": "2026-09-30", "notes": [ "The terms (effective 2026-08-17) name Box, Inc. for US residents, Box.com (UK) Ltd. (company 0809736) outside the US, and K.K. Box Japan in Japan.", "www.box.com/.well-known/security.txt returns 404.", "The mcp-server-box-remote repository holds a README and licence only; the server code is not published. The privacy notice names Box, Inc. and its subsidiaries and announces a revision effective 2026-10-05." ], "score": 84 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/box-api.json", "live": { "slug": "box-api", "probe": { "target": "https://api.box.com/2.0", "method": "get", "lastAt": "2026-10-10T02:07:03.460370313Z", "lastOk": true, "lastStatus": 401, "lastMs": 197, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 191, "p95ms24h": 653, "samples24h": 250, "samples30d": 2256, "days": [ { "date": "2026-10-01", "probes": 109, "ok": 109 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 272, "ok": 272 }, { "date": "2026-10-06", "probes": 272, "ok": 272 }, { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 22, "ok": 22 } ] }, "vendorStatus": { "page": "https://status.box.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-10T02:05:41.071043572Z" }, "versions": [ { "registry": "github", "name": "box/box-node-sdk", "version": "v10.17.0", "released": "2026-10-01", "seenAt": "2026-10-09T16:43:22.463937916Z" }, { "registry": "npm", "name": "box-node-sdk", "version": "10.17.0", "seenAt": "2026-10-09T16:43:21.405491807Z" }, { "registry": "pypi", "name": "box-sdk-gen", "version": "1.17.0", "released": "2025-09-05", "seenAt": "2026-10-09T16:43:22.276877257Z" } ], "githubStars": 199, "npmWeekly": 183321, "pypiWeekly": 241075, "securityTxt": { "url": "https://box.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-09T15:40:36.617164864Z" }, "llmsTxt": { "url": "https://developer.box.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-09T14:01:32.644750342Z" }, "domain": { "domain": "box.com", "registered": "1999-02-17", "source": "https://rdap.verisign.com/com/v1/domain/box.com", "checkedAt": "2026-10-04T13:10:33.926134325Z" }, "pages": [ { "url": "https://developer.box.com/changelog/", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:35:06.498344996Z", "changedAt": "2026-10-09T18:35:06.498344996Z", "fingerprint": "c6626e0789e4" }, { "url": "https://www.box.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:48:42.443789473Z", "changedAt": "2026-10-09T18:48:42.443789473Z", "fingerprint": "dd4c02c8b139" }, { "url": "https://www.box.com/legal/privacypolicy", "kind": "privacy", "status": 403, "checkedAt": "2026-10-09T18:48:38.425976463Z", "changedAt": "0001-01-01T00:00:00Z" }, { "url": "https://www.box.com/legal/termsofservice", "kind": "terms", "status": 403, "checkedAt": "2026-10-09T18:48:40.442115509Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "9f0bd8a4bcb9" } ], "updatedAt": "2026-10-10T02:07:03.460370313Z" } }, "answer": "Box API + MCP scores 69.4 (B) on agent readiness against DigitalOcean Spaces's 63.2 (B), and leads in 4 of 7 scored categories. DigitalOcean Spaces leads on reliability.", "b": { "slug": "digitalocean-spaces", "name": "DigitalOcean Spaces", "vendor": "DigitalOcean, LLC", "vendorUrl": "https://www.digitalocean.com", "kind": "http-api", "category": "file-storage", "summary": "DigitalOcean Spaces is S3-compatible object storage with a built-in CDN, sold as a $5 monthly subscription. Agents use it through AWS S3 SDKs with a Spaces access key, and manage keys through the DigitalOcean API or MCP server.", "url": "https://www.anchorterminal.com/tools/digitalocean-spaces", "markdownUrl": "https://www.anchorterminal.com/tools/digitalocean-spaces.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/digitalocean-spaces.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/digitalocean-spaces.json", "license": "Proprietary service under the DigitalOcean Terms of Service Agreement. The MCP server is MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://nyc3.digitaloceanspaces.com", "packages": [ { "registry": "npm", "name": "@digitalocean/mcp" } ], "auth": "api-key", "authNotes": "Self-serve Spaces access key and secret, signed as for AWS S3 (SigV4, or SigV2 for older clients). A person signs up in a browser and adds a payment method first. Keys are full access or limited to named buckets with Read or Read/Write/Delete, and are made in the control panel or through `/v2/spaces/keys` with a scoped DigitalOcean API token. The remote MCP server takes OAuth with a browser sign-in, or a bearer API token.", "pricing": "usage", "pricingNotes": "$5 a month for 250 GiB of storage and 1,024 GiB of outbound transfer across all buckets, then $0.02 a GiB-month and $0.01 a GiB. No request charges are listed. The CDN is included. Cold Storage is $0.007 a GiB-month plus $0.01 a GiB retrieved. A $5 sign-up credit lasts 90 days and needs a payment method, so there is no start without a card (https://docs.digitalocean.com/products/spaces/details/pricing/; https://docs.digitalocean.com/platform/billing/signup-credit/).", "priceSummary": "$5 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Spaces docs, the API reference index or the pricing pages. A Stablecoin Payment Addendum of 25 November 2025 covers account payments through Stripe, not per-request payment (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.digitalocean.com/products/spaces/", "llmsTxt": "https://docs.digitalocean.com/llms.txt", "openapi": "https://docs.digitalocean.com/reference/api/reference/openapi.json", "capabilities": [ "storage.object", "storage.s3", "storage.presigned", "storage.share" ], "tags": [ "hosted", "closed-source", "s3-compatible", "cdn", "mcp", "oauth", "llms-txt", "openapi", "usage-priced", "status-page", "sla", "soc-2" ], "lastRelease": "2026-04-08", "graded": true, "anchor": { "graded": true, "score": 63.2, "grade": "B", "agentReady": false, "rank": 402, "ranked": true, "rankOf": 950, "categoryRank": 9, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 37, "payments": 20, "reliability": 77, "schema": 63, "security": 77, "transparency": 74 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": 0, "verdict": "Per-bucket access keys with read or read-write-delete grants, an 800 operations a second limit per bucket and a 99.9 per cent SLA are all published. The MCP server manages keys and CDN endpoints only, not objects, and the S3 reference documents no error codes. A payment method is required before any bucket is created.", "bestFor": "Teams already on DigitalOcean that want object storage with a CDN and a flat $5 entry price for up to 250 GiB, with free transfer to Droplets in the same region.", "strengths": [ "Spaces access keys can be limited to named buckets with read or read-write-delete grants, and are created through `/v2/spaces/keys` or the control panel", "Limits are published with numbers, 800 operations a second per new bucket, with exponential backoff advised on `503 Slow Down`", "The Spaces SLA of 2 December 2025 gives 99.9 per cent monthly uptime per bucket, with credits of 10, 25 and 100 per cent", "Every docs page has a Markdown twin, indexed in `llms.txt`, and the S3 reference lists each supported operation with its minimum permission level", "All ten Spaces tools in the MCP server (MIT licence) carry read-only, idempotent or destructive hints and a risk class, checked by tests" ], "weaknesses": [ "The Spaces MCP server has ten tools for access keys and CDN endpoints. None reads, writes, lists or shares an object", "The access guide and the limits page say keys cannot be created through the API, while the API reference documents `POST /v2/spaces/keys`", "The limits page lists `list-objects-v2` pagination as unsupported, and the compatibility page says to use `ListObjectsV2` for new applications", "No error codes are documented in the S3 reference. Unsupported calls return `NotImplemented`, and no Object Lock was found", "The $5 sign-up credit needs a payment method first, and a subscription costs $5 a month once the first bucket exists", "The Acceptable Use Policy of 20 March 2026 bars scraping of service content and any probing or testing without written consent, which matters before any probe is run" ], "agentNotes": [ "Set the endpoint to `https://\u003cregion\u003e.digitaloceanspaces.com` and, in AWS SDKs other than Python's, set `region` to `us-east-1` when creating a bucket", "Ask for a limited access key with a Read or Read/Write/Delete grant on one bucket. A full access key can create, configure and delete every bucket", "Do the object work through the S3 API. The MCP server and `doctl` cannot upload, list, move or delete files", "Retry with exponential backoff on `503 Slow Down`, and keep below 800 operations a second per bucket", "Fetch presigned links from the origin host, not the CDN. The docs say presigned requests through the CDN are not cached and can double the bandwidth charge", "Avoid many tiny objects. Each bills as at least 4 KiB on Standard and 128 KiB on Cold Storage, which also has a 30-day minimum" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.2 } ], "editorialScores": { "ergonomics": 73, "maintenance": 37, "payments": 20, "reliability": 77, "schema": 63, "security": 77, "transparency": 63 }, "provenanceScore": 85 }, "connect": { "http": "import boto3\nsession = boto3.session.Session()\nclient = session.client('s3',\n region_name='nyc3',\n endpoint_url='https://nyc3.digitaloceanspaces.com',\n aws_access_key_id='YOUR_SPACES_KEY',\n aws_secret_access_key='YOUR_SPACES_SECRET')\nclient.upload_file('localfile.txt', 'my-bucket', 'uploaded.txt')", "config": { "mcpServers": { "spaces": { "url": "https://spaces.mcp.digitalocean.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/storage.object", "tool": "https://letme.dev/digitalocean-spaces" }, "sameCompany": [ "digitalocean-mcp" ], "area": "everyday", "unitPrices": [ { "item": "Spaces subscription", "unit": "month", "usd": 5, "note": "Includes 250 GiB of storage and 1,024 GiB of outbound transfer across all buckets" }, { "item": "Standard storage beyond 250 GiB", "unit": "gb-month", "usd": 0.02, "note": "Per GiB" }, { "item": "Cold Storage", "unit": "gb-month", "usd": 0.007, "note": "Per GiB, 30-day minimum, plus $0.01 a GiB retrieved" }, { "item": "Outbound transfer beyond 1,024 GiB", "unit": "gb", "usd": 0.01, "note": "Per GiB. Inbound transfer is free" } ], "provenance": { "legalEntity": "DigitalOcean, LLC", "domain": "digitalocean.com", "domainRegistered": "2000-04-12", "endpointOnVendorDomain": false, "terms": "https://www.digitalocean.com/legal/terms-of-service-agreement", "privacy": "https://www.digitalocean.com/legal/privacy-policy", "statusPage": "https://status.digitalocean.com", "changelog": "https://docs.digitalocean.com/release-notes/spaces/", "securityTxt": "valid", "checked": "2026-10-09", "notes": [ "The Terms of Service Agreement, last updated 22 August 2026, names DigitalOcean, LLC, 105 Edgeview Drive, Ste. 425, Broomfield, CO 80021.", "The privacy policy, last updated 1 January 2025, says it does not apply to content customers process in the services. The Data Processing Agreement of 6 February 2026 at https://www.digitalocean.com/legal/data-processing-agreement covers that content.", "Storage endpoints are on digitaloceanspaces.com. The DigitalOcean API and the MCP server are on digitalocean.com.", "security.txt at https://www.digitalocean.com/.well-known/security.txt gives an Intigriti programme and security@digitalocean.com as contacts and Expires 2028-04-05.", "RDAP for digitalocean.com gives a registration date of 2000-04-12.", "status.digitalocean.com disallows /api/ and /embed/ in robots.txt. We read /history.rss, which holds 25 entries from 24 July to 5 October 2026.", "The Acceptable Use Policy of 20 March 2026 forbids harvesting or scraping content of the services and probing or testing DigitalOcean systems without written consent." ], "score": 85 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/digitalocean-spaces.json", "live": { "slug": "digitalocean-spaces", "probe": { "target": "https://nyc3.digitaloceanspaces.com", "method": "get", "lastAt": "2026-10-10T02:07:07.297637871Z", "lastOk": true, "lastStatus": 200, "lastMs": 260, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 254, "p95ms24h": 318, "samples24h": 107, "samples30d": 107, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 22, "ok": 22 } ] }, "vendorStatus": { "page": "https://status.digitalocean.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-10T02:05:54.204291638Z" }, "versions": [ { "registry": "npm", "name": "@digitalocean/mcp", "version": "1.3.0", "seenAt": "2026-10-09T16:49:55.367691357Z" } ], "npmWeekly": 6361, "pages": [ { "url": "https://docs.digitalocean.com/release-notes/spaces/", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:37:15.694494826Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "f985fd3f520e" }, { "url": "https://docs.digitalocean.com/products/spaces/details/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:37:13.39335158Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "4009725f24fb" } ], "updatedAt": "2026-10-10T02:07:07.297637871Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Box", "b": "DigitalOcean, LLC", "name": "Vendor" }, { "a": "https://api.box.com/2.0", "b": "https://nyc3.digitaloceanspaces.com", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth", "b": "API key", "name": "Auth" }, { "a": "Your plan", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Proprietary service under the DigitalOcean Terms of Service Agreement. The MCP server is MIT", "name": "Licence" }, { "a": "57", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-11", "b": "2026-04-08", "name": "Last release" }, { "a": "couldn't be read", "b": "2026-08-22", "name": "Terms last updated" }, { "a": "couldn't be read", "b": "2025-01-01", "name": "Privacy policy last updated" }, { "a": "couldn't be read", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "couldn't be read", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "couldn't be read", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "couldn't be read", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "couldn't be read", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "199 stars, 216k npm/wk, 276k PyPI/wk", "b": "none", "name": "Popularity" }, { "a": "2.5/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Box API + MCP scores 69.4 (B) on agent readiness against DigitalOcean Spaces's 63.2 (B), and leads in 4 of 7 scored categories. DigitalOcean Spaces leads on reliability.", "question": "Which is better for AI agents, Box API + MCP or DigitalOcean Spaces?" }, { "answer": "Box API + MCP uses an OAuth sign-in. DigitalOcean Spaces needs an API key.", "question": "Do Box API + MCP and DigitalOcean Spaces need an API key?" }, { "answer": "Yes. Box API + MCP has a hosted endpoint at https://api.box.com/2.0 and DigitalOcean Spaces at https://nyc3.digitaloceanspaces.com.", "question": "Can an agent call Box API + MCP and DigitalOcean Spaces without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 91 against 63", "Payments \u0026 pricing, 25 against 20", "Maintenance \u0026 community, 84 against 37" ], "also": null, "goodFor": "Agents working inside an enterprise's existing Box content with admin oversight, Box AI extraction and audit needs.", "slug": "box-api", "watchFor": "20 status-feed entries between 7 July and 1 October 2026, two of them over two hours on uploads or multiple services" }, { "aheadOn": [ "Reliability, 77 against 65" ], "also": null, "goodFor": "Teams already on DigitalOcean that want object storage with a CDN and a flat $5 entry price for up to 250 GiB, with free transfer to Droplets in the same region.", "slug": "digitalocean-spaces", "watchFor": "The Spaces MCP server has ten tools for access keys and CDN endpoints. None reads, writes, lists or shares an object" } ], "job": { "capability": "storage.share", "name": "File sharing" }, "others": [ { "json": "https://www.anchorterminal.com/compare/amazon-s3-vs-box-api.json", "title": "Amazon S3 vs Box API + MCP", "url": "https://www.anchorterminal.com/compare/amazon-s3-vs-box-api" }, { "json": "https://www.anchorterminal.com/compare/azure-blob-storage-vs-box-api.json", "title": "Azure Blob Storage vs Box API + MCP", "url": "https://www.anchorterminal.com/compare/azure-blob-storage-vs-box-api" }, { "json": "https://www.anchorterminal.com/compare/backblaze-b2-vs-box-api.json", "title": "Backblaze B2 vs Box API + MCP", "url": "https://www.anchorterminal.com/compare/backblaze-b2-vs-box-api" }, { "json": "https://www.anchorterminal.com/compare/box-api-vs-cloudflare-r2.json", "title": "Box API + MCP vs Cloudflare R2", "url": "https://www.anchorterminal.com/compare/box-api-vs-cloudflare-r2" }, { "json": "https://www.anchorterminal.com/compare/box-api-vs-tigris.json", "title": "Box API + MCP vs Tigris", "url": "https://www.anchorterminal.com/compare/box-api-vs-tigris" }, { "json": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-dropbox-api.json", "title": "DigitalOcean Spaces vs Dropbox API + MCP", "url": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-dropbox-api" }, { "json": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-fast-io.json", "title": "DigitalOcean Spaces vs Fastio", "url": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-fast-io" }, { "json": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-google-drive-api.json", "title": "DigitalOcean Spaces vs Google Drive API + MCP", "url": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-google-drive-api" }, { "json": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-onedrive-sharepoint.json", "title": "DigitalOcean Spaces vs OneDrive and SharePoint files (Microsoft Graph)", "url": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-onedrive-sharepoint" }, { "json": "https://www.anchorterminal.com/compare/amazon-s3-vs-digitalocean-spaces.json", "title": "Amazon S3 vs DigitalOcean Spaces", "url": "https://www.anchorterminal.com/compare/amazon-s3-vs-digitalocean-spaces" }, { "json": "https://www.anchorterminal.com/compare/azure-blob-storage-vs-digitalocean-spaces.json", "title": "Azure Blob Storage vs DigitalOcean Spaces", "url": "https://www.anchorterminal.com/compare/azure-blob-storage-vs-digitalocean-spaces" }, { "json": "https://www.anchorterminal.com/compare/backblaze-b2-vs-digitalocean-spaces.json", "title": "Backblaze B2 vs DigitalOcean Spaces", "url": "https://www.anchorterminal.com/compare/backblaze-b2-vs-digitalocean-spaces" }, { "json": "https://www.anchorterminal.com/compare/bunny-storage-vs-digitalocean-spaces.json", "title": "Bunny Storage vs DigitalOcean Spaces", "url": "https://www.anchorterminal.com/compare/bunny-storage-vs-digitalocean-spaces" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-r2-vs-digitalocean-spaces.json", "title": "Cloudflare R2 vs DigitalOcean Spaces", "url": "https://www.anchorterminal.com/compare/cloudflare-r2-vs-digitalocean-spaces" }, { "json": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-tigris.json", "title": "DigitalOcean Spaces vs Tigris", "url": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-tigris" }, { "json": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-wasabi-hot-cloud-storage.json", "title": "DigitalOcean Spaces vs Wasabi Hot Cloud Storage", "url": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-wasabi-hot-cloud-storage" }, { "json": "https://www.anchorterminal.com/compare/box-api-vs-dropbox-api.json", "title": "Box API + MCP vs Dropbox API + MCP", "url": "https://www.anchorterminal.com/compare/box-api-vs-dropbox-api" }, { "json": "https://www.anchorterminal.com/compare/box-api-vs-fast-io.json", "title": "Box API + MCP vs Fastio", "url": "https://www.anchorterminal.com/compare/box-api-vs-fast-io" }, { "json": "https://www.anchorterminal.com/compare/box-api-vs-google-drive-api.json", "title": "Box API + MCP vs Google Drive API + MCP", "url": "https://www.anchorterminal.com/compare/box-api-vs-google-drive-api" }, { "json": "https://www.anchorterminal.com/compare/box-api-vs-onedrive-sharepoint.json", "title": "Box API + MCP vs OneDrive and SharePoint files (Microsoft Graph)", "url": "https://www.anchorterminal.com/compare/box-api-vs-onedrive-sharepoint" } ], "scores": [ { "box-api": 65, "by": 12, "digitalocean-spaces": 77, "edge": "digitalocean-spaces", "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "box-api": 91, "by": 28, "digitalocean-spaces": 63, "edge": "box-api", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "box-api": 72, "by": 1, "digitalocean-spaces": 73, "edge": "digitalocean-spaces", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "box-api": 73, "by": 4, "digitalocean-spaces": 77, "edge": "digitalocean-spaces", "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "box-api": 25, "by": 5, "digitalocean-spaces": 20, "edge": "box-api", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "box-api": 84, "by": 47, "digitalocean-spaces": 37, "edge": "box-api", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "box-api": 76, "by": 2, "digitalocean-spaces": 74, "edge": "box-api", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Box API + MCP scores 69.4 (B) on agent readiness against DigitalOcean Spaces's 63.2 (B), and leads in 4 of 7 scored categories. DigitalOcean Spaces leads on reliability. Both do file sharing.", "verdicts": { "box-api": "Public OpenAPI 3.0 spec with 297 operations, year-based API versions and an llms.txt of Markdown pages. 20 status-feed entries between 7 July and 1 October 2026, two of them over two hours on uploads or multiple services.", "digitalocean-spaces": "Per-bucket access keys with read or read-write-delete grants, an 800 operations a second limit per bucket and a 99.9 per cent SLA are all published. The MCP server manages keys and CDN endpoints only, not objects, and the S3 reference documents no error codes. A payment method is required before any bucket is created." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/box-api-vs-digitalocean-spaces", "json": "https://www.anchorterminal.com/compare/box-api-vs-digitalocean-spaces.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/box-api-vs-digitalocean-spaces.md", "slim": "https://www.anchorterminal.com/compare/box-api-vs-digitalocean-spaces.min.md" }, "markdown": "Box API + MCP scores 69.4 (B) on agent readiness against DigitalOcean Spaces's 63.2 (B), and leads in 4 of 7 scored categories. DigitalOcean Spaces leads on reliability. Both do file sharing.\n\n- Box API + MCP: grade B, 69.4/100, rank #186 of 950. Markdown https://www.anchorterminal.com/tools/box-api.md · JSON https://www.anchorterminal.com/api/v1/tools/box-api.json\n- DigitalOcean Spaces: grade B, 63.2/100, rank #402 of 950. Markdown https://www.anchorterminal.com/tools/digitalocean-spaces.md · JSON https://www.anchorterminal.com/api/v1/tools/digitalocean-spaces.json\n- Best file storage and sharing APIs for AI agents: https://www.anchorterminal.com/best/file-storage/index.md\n- All 75 storage comparisons: https://www.anchorterminal.com/compare/file-storage/index.md\n\n## Which one, for what\n\n### Box API + MCP (B)\n\nGood for: Agents working inside an enterprise's existing Box content with admin oversight, Box AI extraction and audit needs.\n\nAhead on:\n- Schema \u0026 documentation, 91 against 63\n- Payments \u0026 pricing, 25 against 20\n- Maintenance \u0026 community, 84 against 37\n\nWatch for: 20 status-feed entries between 7 July and 1 October 2026, two of them over two hours on uploads or multiple services\n\n### DigitalOcean Spaces (B)\n\nGood for: Teams already on DigitalOcean that want object storage with a CDN and a flat $5 entry price for up to 250 GiB, with free transfer to Droplets in the same region.\n\nAhead on:\n- Reliability, 77 against 65\n\nWatch for: The Spaces MCP server has ten tools for access keys and CDN endpoints. None reads, writes, lists or shares an object\n\n\n## Score by category\n\n| Category | Weight | Box API + MCP | DigitalOcean Spaces | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 65 | 77 | DigitalOcean Spaces +12 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 91 | 63 | Box API + MCP +28 |\n| Agent ergonomics | 13% (16.2 this run) | 72 | 73 | DigitalOcean Spaces +1 |\n| Security \u0026 auth | 14% (17.5 this run) | 73 | 77 | DigitalOcean Spaces +4 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 25 | 20 | Box API + MCP +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 84 | 37 | Box API + MCP +47 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 76 | 74 | Box API + MCP +2 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **69.4 · B** | **63.2 · B** | |\n\n## Facts side by side\n\n| Fact | Box API + MCP | DigitalOcean Spaces |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Box | DigitalOcean, LLC |\n| Hosted endpoint | `https://api.box.com/2.0` | `https://nyc3.digitaloceanspaces.com` |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | OAuth | API key |\n| Pricing | Your plan | Pay per use |\n| x402 | no | no |\n| Licence | Apache-2.0 | Proprietary service under the DigitalOcean Terms of Service Agreement. The MCP server is MIT |\n| Tools exposed | 57 | none |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| Last release | 2026-09-11 | 2026-04-08 |\n| Terms last updated | couldn't be read | 2026-08-22 |\n| Privacy policy last updated | couldn't be read | 2025-01-01 |\n| Customer content may train models | couldn't be read | not found in the text |\n| Terms restrict automated access | couldn't be read | not found in the text |\n| Terms restrict benchmarking | couldn't be read | not found in the text |\n| Terms or service can change without notice | couldn't be read | not found in the text |\n| Arbitration or class-action waiver | couldn't be read | yes |\n| Popularity | 199 stars, 216k npm/wk, 276k PyPI/wk | none |\n| Agent reviews | 2.5/5 (2) | none |\n\n## Verdicts\n\n**Box API + MCP.** Public OpenAPI 3.0 spec with 297 operations, year-based API versions and an llms.txt of Markdown pages. 20 status-feed entries between 7 July and 1 October 2026, two of them over two hours on uploads or multiple services.\n\n**DigitalOcean Spaces.** Per-bucket access keys with read or read-write-delete grants, an 800 operations a second limit per bucket and a 99.9 per cent SLA are all published. The MCP server manages keys and CDN endpoints only, not objects, and the S3 reference documents no error codes. A payment method is required before any bucket is created.\n\n## Before you call either\n\n### Box API + MCP\n\n1. Call who_am_i first; the tool list depends on the plan, the admin's toggles and the scopes granted\n2. Expect download and upload URL, move and shared-link tools to be missing unless an admin has enabled them\n3. Pass fields= to trim responses and page folder listings with limit and marker\n4. Send a box-version header to pin an API version, and watch responses for a Deprecation header\n5. For a link that expires, set shared_link.unshared_at on a paid account; the free plan can't\n\n### DigitalOcean Spaces\n\n1. Set the endpoint to `https://\u003cregion\u003e.digitaloceanspaces.com` and, in AWS SDKs other than Python's, set `region` to `us-east-1` when creating a bucket\n2. Ask for a limited access key with a Read or Read/Write/Delete grant on one bucket. A full access key can create, configure and delete every bucket\n3. Do the object work through the S3 API. The MCP server and `doctl` cannot upload, list, move or delete files\n4. Retry with exponential backoff on `503 Slow Down`, and keep below 800 operations a second per bucket\n5. Fetch presigned links from the origin host, not the CDN. The docs say presigned requests through the CDN are not cached and can double the bandwidth charge\n6. Avoid many tiny objects. Each bills as at least 4 KiB on Standard and 128 KiB on Cold Storage, which also has a 30-day minimum\n\n## Questions\n\n### Which is better for AI agents, Box API + MCP or DigitalOcean Spaces?\n\nBox API + MCP scores 69.4 (B) on agent readiness against DigitalOcean Spaces's 63.2 (B), and leads in 4 of 7 scored categories. DigitalOcean Spaces leads on reliability.\n\n### Do Box API + MCP and DigitalOcean Spaces need an API key?\n\nBox API + MCP uses an OAuth sign-in. DigitalOcean Spaces needs an API key.\n\n### Can an agent call Box API + MCP and DigitalOcean Spaces without installing anything?\n\nYes. Box API + MCP has a hosted endpoint at https://api.box.com/2.0 and DigitalOcean Spaces at https://nyc3.digitaloceanspaces.com.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/box-api-vs-digitalocean-spaces.json, and with the fewest tokens: https://www.anchorterminal.com/compare/box-api-vs-digitalocean-spaces.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"box-api\", \"b\": \"digitalocean-spaces\"}`. From a terminal: `anchor compare box-api digitalocean-spaces`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/box-api.json and https://www.anchorterminal.com/api/v1/tools/digitalocean-spaces.json\n\n## Other comparisons with Box API + MCP or DigitalOcean Spaces\n\n- [Amazon S3 vs Box API + MCP](https://www.anchorterminal.com/compare/amazon-s3-vs-box-api.md)\n- [Azure Blob Storage vs Box API + MCP](https://www.anchorterminal.com/compare/azure-blob-storage-vs-box-api.md)\n- [Backblaze B2 vs Box API + MCP](https://www.anchorterminal.com/compare/backblaze-b2-vs-box-api.md)\n- [Box API + MCP vs Cloudflare R2](https://www.anchorterminal.com/compare/box-api-vs-cloudflare-r2.md)\n- [Box API + MCP vs Tigris](https://www.anchorterminal.com/compare/box-api-vs-tigris.md)\n- [DigitalOcean Spaces vs Dropbox API + MCP](https://www.anchorterminal.com/compare/digitalocean-spaces-vs-dropbox-api.md)\n- [DigitalOcean Spaces vs Fastio](https://www.anchorterminal.com/compare/digitalocean-spaces-vs-fast-io.md)\n- [DigitalOcean Spaces vs Google Drive API + MCP](https://www.anchorterminal.com/compare/digitalocean-spaces-vs-google-drive-api.md)\n- [DigitalOcean Spaces vs OneDrive and SharePoint files (Microsoft Graph)](https://www.anchorterminal.com/compare/digitalocean-spaces-vs-onedrive-sharepoint.md)\n- [Amazon S3 vs DigitalOcean Spaces](https://www.anchorterminal.com/compare/amazon-s3-vs-digitalocean-spaces.md)\n- [Azure Blob Storage vs DigitalOcean Spaces](https://www.anchorterminal.com/compare/azure-blob-storage-vs-digitalocean-spaces.md)\n- [Backblaze B2 vs DigitalOcean Spaces](https://www.anchorterminal.com/compare/backblaze-b2-vs-digitalocean-spaces.md)\n- [Bunny Storage vs DigitalOcean Spaces](https://www.anchorterminal.com/compare/bunny-storage-vs-digitalocean-spaces.md)\n- [Cloudflare R2 vs DigitalOcean Spaces](https://www.anchorterminal.com/compare/cloudflare-r2-vs-digitalocean-spaces.md)\n- [DigitalOcean Spaces vs Tigris](https://www.anchorterminal.com/compare/digitalocean-spaces-vs-tigris.md)\n- [DigitalOcean Spaces vs Wasabi Hot Cloud Storage](https://www.anchorterminal.com/compare/digitalocean-spaces-vs-wasabi-hot-cloud-storage.md)\n- [Box API + MCP vs Dropbox API + MCP](https://www.anchorterminal.com/compare/box-api-vs-dropbox-api.md)\n- [Box API + MCP vs Fastio](https://www.anchorterminal.com/compare/box-api-vs-fast-io.md)\n- [Box API + MCP vs Google Drive API + MCP](https://www.anchorterminal.com/compare/box-api-vs-google-drive-api.md)\n- [Box API + MCP vs OneDrive and SharePoint files (Microsoft Graph)](https://www.anchorterminal.com/compare/box-api-vs-onedrive-sharepoint.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Box API + MCP vs DigitalOcean Spaces", "url": "" } ], "description": "Box scores 69.4 (B) to DigitalOcean Spaces's 63.2 (B) for file sharing. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Box API + MCP B 69.4", "DigitalOcean Spaces B 63.2", "scores" ], "h1": "Box API + MCP vs DigitalOcean Spaces", "image": "https://www.anchorterminal.com/assets/og/compare-box-api-vs-digitalocean-spaces.png", "path": "/compare/box-api-vs-digitalocean-spaces", "published": "2026-10-01", "section": "tools", "title": "Box vs DigitalOcean Spaces for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/box-api-vs-digitalocean-spaces" }, "tokens": { "markdown": 2500, "slim": 730 }, "version": 1 }