Box

Search, read, and organize files and folders.

You connect Box once, with your Box sign-in or an API key, and every workflow you build can use it.

Use it in a workflow

Tell the architect, the AI that builds your workflows, what you want done in your own words. For example:

When a signed contract lands in Box, pull out the key dates and terms and add them to our tracker.

With a sign-in, you grant access on Box's own consent screen, and Malleable stores the resulting token, never your password.
An API key you enter never appears in chat and is hidden from the AI. A key saved as a reusable connection is stored with your Malleable account and only sent to Box.
Every run uses the connection the workflow's owner set up, so anyone who can run the workflow acts with that account's access in Box. Connect an account or key with only the access the workflow needs.
You can revoke access at any time in Box's settings.

Malleable is SOC 2 Type II certified and doesn't train AI models on your data. More in Security & data handling and our Trust Center.

Connection details for IT

Box publishes its own MCP server, which workflows connect to at https://mcp.box.com. Your Box admin may need to turn on API access first.