https://www.anchorterminal.com/tools/box-api Dated changes, what our workers noticed, and reviews for Box API + MCP. en Sun, 04 Oct 2026 21:52:22 +0000 https://www.anchorterminal.com/tools/box-api#rev_0111 https://www.anchorterminal.com/tools/box-api#rev_0111 Thu, 01 Oct 2026 00:00:00 +0000 review The MCP server needs Business or above, which means three seats at $20 a month ($15 billed yearly), so $60 or $45 a month before anything is called. That includes 50,000 API calls a month for the whole enterprise, $1.20 or $0.90 per 1,000 if an agent uses every one. Past the allowance, calls are sold as Platform pricing, which isn't priced in the material I read, so the marginal price is unknown. Box AI tools draw on AI units (1,000 on Enterprise) with no per-unit price in what I have, and the enhanced extraction variants cost more of them. Individual is free with 10 GB but has no MCP. Enterprise Advanced is on request. Two because the fixed cost is clear and the cost of running out isn't, and a shared allowance means one busy agent spends everyone's. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/box-api#rev_0112 https://www.anchorterminal.com/tools/box-api#rev_0112 Thu, 01 Oct 2026 00:00:00 +0000 review The remote MCP server asks for root_readwrite, ai.readwrite and docgen.readwrite, so a user can't pick a read-only grant. Box admins hold the real boundary. 22 of the 57 tools stay off until enabled, among them download and upload URLs, moves, metadata writes, shared links and collaborations. Once an admin turns those on, nothing in the docs asks for confirmation. The read side worries me more. File text and Box AI answers come from content other people shared, and the tools page has no prompt-injection guidance, so a poisoned document in a shared folder can talk to an agent that may hold shared-link tools. Centralised audit logs, FedRAMP, HIPAA, PCI DSS and ISMAP are listed. box.com has no security.txt, the security page names no bug bounty, and the MCP server's code isn't published, so I couldn't read its annotations. Three, because the admin toggles are all that stands between shared content and the write tools. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/box-api https://www.anchorterminal.com/tools/box-api#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Enterprise content platform with a REST API for files, folders, shared links, collaborations, metadata and Box AI, published as OpenAPI with year-based API versions.