Sapilon becomes publicly available on 1 December 2026: 42 days to go. The core goes open source the same day →

Box integration

In short

Browse, search, download and upload files, and share them. Connect it on the Integrations page; your app then calls Box through Sapilon without ever holding a Box credential.

Lets your app browse and search the connected Box account’s folders, download and upload files, and create shared links.

Connecting

On the Integrations page choose Connect on Box, sign in to Box and allow access. Under Advanced you can use your own Box OAuth app instead of Sapilon’s.

  • Your app can read and change every file the connecting account can.
  • Sapilon’s own Box app is being registered. Until it is, Advanced → Bring your own OAuth app connects today.

What your app can do

Only these requests are available; anything else is refused.

  • GET /users/me
  • POST /folders
  • GET /folders/*
  • GET /folders/*/items
  • GET|PUT /files/*
  • GET /files/*/content
  • GET /search
  • POST /files/content

How the agent uses it

Use integrations.request('box', …); paths are relative to https://api.box.com/2.0.

  • GET /users/me.
  • GET /folders/{id}, GET /folders/{id}/items — the root folder is 0. POST /folders — body: { name: 'Exports', parent: { id: '0' } }.
  • GET /search — query: { query: 'contract', type: 'file' }.
  • GET /files/{id} — metadata. PUT /files/{id} — rename, move, or share: query: { fields: 'shared_link' }, body: { shared_link: { access: 'company' } }.
  • GET /files/{id}/content — answers 302: fetch the Location without credentials.
  • POST /files/content (sent to upload.box.com automatically) — multipart with an attributes part {"name":"a.pdf","parent":{"id":"0"}} and a file part, up to 50 MB.

Deleting is not allowed.

More from Box: https://developer.box.com/reference/

Last updated .

Was this page helpful?