API

I am a systems integrator building an OAuth 2.0 application used to migrate customer-owned content from Box to another DAM. The OAuth application is owned by my free Box Developer account, while each customer authorizes the application using their own Box user account. The migration contains approximately 200,000 files and will generate several hundred thousand API requests. Which account's Platform API allocation applies to these requests? Does the developer account that owns the OAuth application require a paid Platform/Business subscription for production use? The customer’s source account is Individual.

I am trying to test the Box API endpoint /2.0/notes/convert in Postman, which is used to convert Markdown content into a native .boxnote file in a target Box folder.However, I am not receiving the expected output when making the API request. I would like assistance in understanding the correct request format, required parameters, headers, and any specific requirements for successfully creating a .boxnote file from Markdown content.API Endpoint:https://api.box.com/2.0/notes/convertEnvironment: PostmanExpected Result:The Markdown content should be converted into a native Box Note (.boxnote) and created in the specified target folder.Actual Result:The API request giving the below error (Screenshot attached)Please provide guidance on the correct API request and any required configuration or permissions needed for this operation.Are this APIs only available for higher tier subscriptions? If yes the description in the “Plan comparison” is misleading because it does not state which APIs are a

I am trying to test the Box API endpoint /2.0/notes/convert in Postman, which is used to convert Markdown content into a native .boxnote file in a target Box folder.However, I am not receiving the expected output when making the API request. I would like assistance in understanding the correct request format, required parameters, headers, and any specific requirements for successfully creating a .boxnote file from Markdown content.API Endpoint:https://api.box.com/2.0/notes/convertEnvironment: PostmanExpected Result:The Markdown content should be converted into a native Box Note (.boxnote) and created in the specified target folder.Actual Result:The API request giving the below error (Screenshot attached)Please provide guidance on the correct API request and any required configuration or permissions needed for this operation.Are this APIs only available for higher tier subscriptions? If yes the description in the “Plan comparison” is misleading because it does not state which APIs are a

We are currently working on a project where we use the Box C# SDK (v5.x) to upload large files (100MB+) to our Box Enterprise account using the Chunked Upload API (CreateUploadSessionAsync). While standard single-part uploads work flawlessly for smaller files, large chunked uploads fail consistently.After creating the upload session and splitting the file into chunks, calls to UploadFilePartAsync return a 400 Bad Request (Digest Mismatch) response.anyone help?

Persistent operationInProgressError on folder hierarchyI own a Box folder that has been unable to be moved or deleted for several months, though I can rename it. It contains four empty subfolders, which I can also rename, but not move or delete. I cannot move a newly-created folder into the affected folder. I reproduced the problem in Chrome Incognito.The failed delete request returns:HTTP 409errorCode: operationInProgressErrordata: "A conflicting operation is being performed on one or more of the selected items."It seems that there is a persistent/stale operation or lock affecting this folder hierarchy. How can I ask for Box to clear it?

Whenever I try to save app configuration in the app portal I get this error. Regardless of what I am changing.{"error":{"code":"Unexpected error"}}Any ideas?  

Ich nutze ein Box-Individual-Konto, das mit ChatGPT verbunden ist.Die Integration kann erfolgreich:Ordner in Box anlegen Text-, Markdown- und CSV-Dateien hochladen Dateien aus Box lesenDie Berechtigungen des Box-Kontos zeigen canUpload: true.Der Upload von Binärdateien, z. B. PDF, schlägt jedoch beim eigentlichen Binär-Upload fehl. Eine Test-PDF war nur ca. 82 KB groß, die Dateigröße ist also nicht das Problem.Der gewünschte Ablauf ist:PDF scannen → in ChatGPT bearbeiten → die fertige PDF direkt wieder in Box speichernMeine Fragen:Wird der Upload von PDF-/Binärdateien über die ChatGPT-Box-Integration grundsätzlich unterstützt? Funktioniert das auch mit einem Box-Individual-Konto? Muss dafür eine zusätzliche Berechtigung oder Einstellung in Box aktiviert werden? Gibt es aktuell ein bekanntes Problem mit dem Binär-Upload bzw. dem Upload-Endpunkt?Normale Uploads direkt in Box funktionieren. Das Problem scheint nur den Upload über die ChatGPT-Integration zu betreffen.

Box API利用時に発生したエラーについて、ご存じの方がいらっしゃいましたらご教示いただけますでしょうか？2026年8月17日 10:44頃（JST）、Talend JobからBox APIを利用してファイルアップロード処理を実行した際、以下のエラーが発生し、処理が失敗しました。■ エラー内容com.box.boxjavalibv2.exceptions.BoxServerException:upstream connect error or disconnect/reset before headers.reset reason: overflowスタックトレース上では、Box Java Libraryの以下の処理でエラーが発生しています。com.box.boxjavalibv2.resourcemanagers.BoxItemsManagerImpl.getItemcom.box.boxjavalibv2.resourcemanagers.BoxFoldersManageImpl.getFolder■ 発生状況本番環境で上記エラーが発生した後、QA環境でも同様の処理を複数回実行しましたが、同様のエラーが発生しました。その後、同日午後に再度実行したところ、正常に処理が完了しました。そのため、特定のJobや環境に依存したものではなく、一時的な事象であった可能性もあると考えています。以下について、ご存じの方がいらっしゃいましたらご教示いただけますでしょうか。1. 「upstream connect error or disconnect/reset before headers. reset reason: overflow」というエラーは、どのような場合に発生するものでしょうか。2. 2026年8月17日午前（JST）頃に、Box APIまたは関連サービスにおいて一時的な接続異常等が発生していた可能性はありますでしょうか。3. 同様の事象が発生した場合、リトライ等の対応が推奨されますでしょうか。よろしくお願いいたします。

Hi Box team,I've built a server-side integration that pulls report files from Box folders into an internal TPM dashboard. The app is created and configured, but every token request is refused because the app has not been authorized for our enterprise. I can't clear this myself — it needs a co-admin action in the Admin Console.What I'm asking for1. Authorize this Custom App by Client ID in Admin Console → Apps → Custom Apps Manager → Add App:   - Client ID: 3hmb65ju4kleaytjogzilts6d6azr6tt   - App type: Custom App, Server Authentication (Client Credentials Grant)   - Access level: App Access Only (service account)   - Scopes needed: read-only — read files and folders. Please do not grant write scope.2. Confirm the Enterprise ID I'm using is correct: 1035202.3. Confirm our policy on shared links (see question below).

I am trying to test the Box API endpoint /2.0/notes/convert in Postman, which is used to convert Markdown content into a native .boxnote file in a target Box folder.However, I am not receiving the expected output when making the API request. I would like assistance in understanding the correct request format, required parameters, headers, and any specific requirements for successfully creating a .boxnote file from Markdown content.API Endpoint:https://api.box.com/2.0/notes/convertEnvironment: PostmanExpected Result:The Markdown content should be converted into a native Box Note (.boxnote) and created in the specified target folder.Actual Result:The API request giving the below error (Screenshot attached)Please provide guidance on the correct API request and any required configuration or permissions needed for this operation.Are this APIs only available for higher tier subscriptions? If yes the description in the “Plan comparison” is misleading because it does not state which APIs are a

Hello, I created an App to help generate an API Key for use in some automation I need to complete. It has been in “Pending Enablement” for a while and I want to ask for support to get this approved. Can someone please help with getting this approved?

Is there an integration with Hazel/Altruist in the works?

when I try to click "fetch secret" button within an app, it shows an info message: "this action requires 2-step verification. please wait while you are redirected."    And after that an empty page shows up.  The thing is the 2-step verification is already set up in my account.  Could you please help with this? What am I missing? 

Hi,I have a service account that was invited into a few client’s folders. It was probably renamed and it is under developers console → Platform Apps → Name of app now. I got everything here as Authorized and enabled since Jan 2023. Client changed security and enforces 2FA now, which I do have for my account. If I go to to the Content Manager, I see nothing here. All folders I had access to are gone. From the folder’s perspective I see the automation user as Pending I’m also Co-owner in another folder and I have rights to resend the invitationit says it does sent the email but that email is automatically generated so I assumed it comes to me or ideally all owners of the app as listed here but nope, I didn’t receive anything nor other Admins. How am I supposed to accept the invitation to virtual email that doesn’t exist? My use case is that I want to upload files or create sub-folders in a given folder from our integration application. It is our client’s Box probably as Enterprise and th

I have the exact problem that is discussed here - Transfer owned folders | CommunityThe account that is using OAUTH has all Co-Admin management for user and file access based on what is seen in the Manage Users. And the application appears to have the needed rights. However, when attempting to move the content to an Admin account (which we do within the web portal) a 403 forbidden is received. The process seems to allow the transfer to the OAuth user so member to Co-Admin which doesn’t correlate with the error that is received.  I have not tried transferring ownership of the folder to the admin account that we are using for all the other folder storage but really feel like that is not going to work.  I really wish there was an easier way to do this but if anyone has done this and can validate that it will work, I would appreciate the response.

Hi there, we submitted our app mid July for review and haven't heard back from you. We haven’t heard back from the team after 10 days and reached out to [removed by moderator] but also don’t get a response. Do you have a rough ETA on the review? The app can be previewed here: https://app.box.com/integrations/NepcCkAiWm/i Best,Erhard.

I am unable to view option to submit my app for authorization. I am not sure why, please help. I have none of the tabs or options where I am able to submit the app for request.

Subject: Custom App (Client Credentials Grant) blocked from downloading file content despite correct scopes, collaboration, and verified impersonationEnterprise ID: 290084Enterprise name: Simplexity ServicesApp name: WebDataApp ID: 2633167Client ID: 81jcl8rh4t3pc2b22z05n5rcumo5x4lkAuthentication type: Client Credentials Grant (Server Authentication)Service Account: [removed by moderator] (user id [removed by moderator] )SUMMARYMy Custom App's service account can successfully authenticate, list foldercontents, and read file metadata, but every attempt to download actual filecontent via GET /2.0/files/{id}/content returns: HTTP 403 {"type":"error","status":403,"code":"access_denied_insufficient_permissions", "message":"Access denied - insufficient permission"}This happens even when the request impersonates a full co-owner of theenterprise via the As-User header, so it does not appear to be apermissions/ownership/collaboration issue on any specific file or folder.I believe this is an ente

Hi Box Developer Team,We are developing a Node.js-based Box connector and are facing an issue while working with HTML files.We have uploaded an HTML file (for example, myhtml.html) to our Box account. However, we are unable to retrieve its metadata or upload a new version of the file using the Box API. What we have triedRetrieved the File ID from the Box web interface. Generated a valid OAuth 2.0 access token. Called the Get File Metadata endpoint using the official Box API. Tested the same request using the official Box API Swagger / API Explorer. Verified that the File ID and Access Token belong to the same Box account.   Issue The API consistently returns: HTTP 404 Not Found As a result, we are unable to: Retrieve the metadata of the HTML file. Upload a new version of the HTML file. Continue implementing our Box connector.QuestionsDoes Box support HTML (.html) files as regular files for metadata retrieval and version upload? Are there any limitations or special requirements for HTM

Hello. I’m hoping someone can help with this…I am trying to set up an app, to support the migration of some files from Box to a different storage system.I’ve set up the app on the developer console and it is showing as ‘Pending authorisation’, waiting for our admin to approve.But I am the admin and I’ve not received any emails or contact about it.Any advice on how I can get authorised?Thank you!

Our automation has been successfully uploading files to the folder shared by client for several years.Recently, the integration lost access to the folder.When authenticating as the App User, the following request returns Not Found:GET /2.0/folders/ [removed by moderator] When authenticated as my Box user account (using developer token), I can access the folder without issueThe folder still contains a collaboration for the App User:{ "accessible_by": { "login": " [removed by moderator] " }, "status": "pending", "created_at": "2023-06-26T06:50:34-07:00", "modified_at": "2026-06-25T11:56:27-07:00"}Notably:The collaboration has been in pending status since 2023. The integration worked while the collaboration was pending. Recreating the collaboration did not resolve the issue. Creating new application and sharing the folder did not resolve the issue. Not able to accept this collaboration thru API call: PUT /2.0/collaborations/{collaboration_id}23{4"status": "accepted"5}Returns:needs_two_fac

I want to create a python script that grabs data from SQL Server, creates a csv, and drops it into my box.com folder automatically. I can do this with a developer token, but that expires after 60 minutes.The issue is that I have a enterprise_id of 0. Company A uses box.com and they are getting data from a bunch of Companies like mine. So they instructed me (Company B) to create a free personal account and they shared a folder with me that I can dump my data into.I have to drop data in weekly, and setting up an automated process would be best. I created a developer account and got a developer token and was successful in a test. But I need a token that lasts longer, and I am reading that JWT does not work with enterprise_ids of 0. OAuth doesn’t really apply to my situation.Is there anything I can do to automate this process? 

Will keep it short and sweet. I am looking to build a folder structure traversal UX that includes search/sort/filtering capabilities. e.g.Find me files with metadata attribute == X in folder YIt doesn’t seem like this is possible today. There are three APIs in questionGet Folder ItemsSearchMetadata Query Search and Metadata Query do not have the ability to only search within a single folder. Get Folder Items is limited in it’s filtering capabilities. It seems like an attribute I would expect in the metadata query filter options. ancestor_folder_id does not look at just a single folder, it looks at all folders below, which means we cannot recreate the folder structure navigation experience without serious server interception (prohibitively expensive). Has anyone solved this? Is this a known issue in the API offering? 

We created a Box Platform App using JWT server authentication. The app is configured as App Access Only, not App + Enterprise Access, and the authorized scope currently shown is “Read all files and folders stored in Box.”The JWT token authenticates as the app’s Service Account / Automation User. In our case, the token identifies as:Name of automation serviceE-mail of automation serviceWhat is confusing is that we have not intentionally collaborated that Service Account onto the target folder or any parent folder. The folder and test Excel files were created by my sandbox admin user, not by the Service Account. Despite that, when we call the Box API with the JWT Service Account token and provide the folder ID, the app can list the folder contents and read file/folder metadata.For example, it can see the folder and files and read metadata such as owner, creator, file name, file ID, permissions, etag, etc. The metadata shows the folder/file is owned and created by my sandbox user, not the

Hi everyone,I have used Box Microsoft Sentinel Codeless Connector (CCP) connector which uses the REST API Poller to ingest Box Enterprise Events.The connector authenticates using the Client Credentials Grant against the Box OAuth endpoint.OAuth EndpointPOST https://api.box.com/oauth2/tokenGrant Typeclient_credentialsAdditional Parametersbox_subject_type=enterprisebox_subject_id=<Enterprise ID>The connector configuration is similar to:"auth": { "type": "OAuth2", "grantType": "client_credentials", "TokenEndpoint": "https://api.box.com/oauth2/token"}However, the connector consistently fails.Microsoft Sentinel reports the following error:RES40001Invalid Credential or cannot get credential for example OAuth2 access token.Call failed with status code 429 (Too Many Requests):POST https://api.box.com/oauth2/tokenNote that the credentials used are valid, Microsoft Sentinel Data Connector shows the following: