MCP Server Policy

BOX MCP POLICY

Enforce policies on every tool call to the Box MCP Server. 80 tools listed, categorised, and ready for rules.

box-community/mcp-server-box 43 read 37 write 80 tools total
box cloud-storage files collaboration

GET STARTED

Download this policy scaffold and add your rules. Intercept enforces them on every tool call before it reaches Box.

terminal

# Download policy scaffold

curl -o box.yaml https://raw.githubusercontent.com/policylayer/intercept/main/policies/box.yaml

# Run with Intercept

intercept --policy box.yaml -- npx -y @box-community/mcp-server-box

Server documentation: https://github.com/box-community/mcp-server-box

READ TOOLS

43

WRITE TOOLS

41

DESTRUCTIVE TOOLS

9

POLICY YAML

This scaffold lists every tool with empty rules. Add conditions — rate limits, argument validation, deny rules — then deploy with Intercept.

box.yaml
version: "1"
description: "Policy for box-community/mcp-server-box"
default: "allow"
tools:
    box_ai_ask_file_single_tool:
        rules: []
    box_ai_ask_file_multi_tool:
        rules: []
    box_ai_ask_hub_tool:
        rules: []
    box_ai_extract_freeform_tool:
        rules: []
    box_ai_extract_structured_using_fields_tool:
        rules: []
    box_ai_extract_structured_using_template_tool:
        rules: []
    box_ai_extract_structured_enhanced_using_fields_tool:
        rules: []
    box_file_info_tool:
        rules: []
    box_folder_info_tool:
        rules: []
    box_folder_items_list_tool:
        rules: []
    box_folder_list_tags_tool:
        rules: []
    box_search_tool:
        rules: []
    box_search_folder_by_name_tool:
        rules: []
    box_who_am_i:
        rules: []
    box_groups_search_tool:
        rules: []
    box_groups_list_members_tool:
        rules: []
    box_groups_list_by_user_tool:
        rules: []
    box_users_list_tool:
        rules: []
    box_users_locate_by_name_tool:
        rules: []
    box_users_locate_by_email_tool:
        rules: []
    box_users_search_by_name_or_email_tool:
        rules: []
    box_collaboration_list_by_file_tool:
        rules: []
    box_collaboration_list_by_folder_tool:
        rules: []
    box_shared_link_file_get_tool:
        rules: []
    box_shared_link_file_find_by_shared_link_url_tool:
        rules: []
    box_shared_link_folder_get_tool:
        rules: []
    box_shared_link_folder_find_by_shared_link_url_tool:
        rules: []
    box_metadata_template_list_tool:
        rules: []
    box_metadata_template_get_by_key_tool:
        rules: []
    box_metadata_template_get_by_name_tool:
        rules: []
    box_metadata_get_instance_on_file_tool:
        rules: []
    box_task_details_tool:
        rules: []
    box_task_file_list_tool:
        rules: []
    box_task_assignments_list_tool:
        rules: []
    box_task_assignment_details_tool:
        rules: []
    box_web_link_get_by_id_tool:
        rules: []
    box_docgen_template_list_tool:
        rules: []
    box_docgen_template_get_by_id_tool:
        rules: []
    box_docgen_template_get_by_name_tool:
        rules: []
    box_docgen_template_list_tags_tool:
        rules: []
    box_docgen_template_list_jobs_tool:
        rules: []
    box_docgen_list_jobs_by_batch_tool:
        rules: []
    box_docgen_get_job_by_id_tool:
        rules: []
    box_file_copy_tool:
        rules: []
    box_file_move_tool:
        rules: []
    box_file_rename_tool:
        rules: []
    box_file_set_description_tool:
        rules: []
    box_file_lock_tool:
        rules: []
    box_file_unlock_tool:
        rules: []
    box_file_retention_date_set_tool:
        rules: []
    box_file_retention_date_clear_tool:
        rules: []
    box_folder_create_tool:
        rules: []
    box_folder_rename_tool:
        rules: []
    box_folder_move_tool:
        rules: []
    box_folder_copy_tool:
        rules: []
    box_folder_set_description_tool:
        rules: []
    box_folder_favorites_add_tool:
        rules: []
    box_folder_favorites_remove_tool:
        rules: []
    box_folder_tag_add_tool:
        rules: []
    box_folder_tag_remove_tool:
        rules: []
    box_folder_set_collaboration_tool:
        rules: []
    box_collaboration_update_tool:
        rules: []
    box_collaboration_file_group_by_group_id_tool:
        rules: []
    box_collaboration_file_user_by_user_id_tool:
        rules: []
    box_collaboration_file_user_by_user_login_tool:
        rules: []
    box_collaboration_folder_group_by_group_id_tool:
        rules: []
    box_collaboration_folder_user_by_user_id_tool:
        rules: []
    box_shared_link_file_create_or_update_tool:
        rules: []
    box_shared_link_folder_create_or_update_tool:
        rules: []
    box_shared_link_web_link_create_or_update_tool:
        rules: []
    box_metadata_template_create_tool:
        rules: []
    box_metadata_set_instance_on_file_tool:
        rules: []
    box_metadata_update_instance_on_file_tool:
        rules: []
    box_task_complete_create_tool:
        rules: []
    box_task_review_create_tool:
        rules: []
    box_task_update_tool:
        rules: []
    box_task_assign_by_email_tool:
        rules: []
    box_task_assign_by_user_id_tool:
        rules: []
    box_web_link_create_tool:
        rules: []
    box_web_link_update_by_id_tool:
        rules: []
    box_docgen_template_create_tool:
        rules: []
    box_docgen_create_batch_tool:
        rules: []
    box_docgen_create_single_file_from_user_input_tool:
        rules: []
    box_authorize_app_tool:
        rules: []
    box_file_delete_tool:
        rules: []
    box_folder_delete_tool:
        rules: []
    box_collaboration_delete_tool:
        rules: []
    box_shared_link_file_remove_tool:
        rules: []
    box_shared_link_folder_remove_tool:
        rules: []
    box_metadata_delete_instance_on_file_tool:
        rules: []
    box_task_remove_tool:
        rules: []
    box_web_link_delete_by_id_tool:
        rules: []
    box_docgen_template_delete_tool:
        rules: []

RELATED POLICIES

FREQUENTLY ASKED QUESTIONS

What tools does the Box MCP server expose?

The Box MCP Server exposes 80 tools across 3 categories: Read, Write, Destructive. Each tool can be individually controlled with Intercept policies.

How do I enforce policies on Box?

Download the policy scaffold, add rules (rate limits, argument validation, deny rules), then run Intercept as a proxy in front of the Box MCP server. Every tool call is evaluated against your YAML policy before execution.

Is the Box policy free to use?

Yes. All Intercept policies are open source under the Apache 2.0 licence. Download, modify, and deploy without restrictions.

ENFORCE POLICIES ON BOX

Open source. One binary. Zero dependencies.