Files & knowledge · wired today
What can agents actually do with Box?
Documents and wikis are the long-term memory agents reason over. The Box connector is one of 205 executable connectors and gives agents 5 read-only tools, with the credential held in the vault and every call receipted.
The Box tool list, exactly as agents see it
get_current_user— Get the Box user the credential belongs to (name, login, storage usage)list_folder_items— List the files and folders inside one Box folder (use folder_id 0 for the root folder)get_folder_info— Get one Box folder by ID (name, path, size, owner)get_file_info— Get one Box file by ID (name, size, timestamps, sha1)search— Search Box for files, folders and web links matching a query string
Every tool above is read-only. Write surfaces ship only after live testing, and always behind approval gates.
What the Box connector needs
You provide access token from your Box account; Quox sends it as a bearer token. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Where to get it: Box's own API documentation ↗ covers creating and scoping the credential.
How proven is this?
Box answers every unauthenticated request identically, so its endpoint paths rest on Box's own published API reference (cited in the connector spec). The credential wire format was verified against the real host. Like every factory connector, it is Beta: it has not yet been run with a real credential.
Box integration FAQ
What can Quox agents do with Box?
Agents can run 5 read-only tools against Box: get current user, list folder items, get folder info, get file info, search. Every call is receipted in the evidence trail.
What does the Box integration need?
You provide access token from your Box account; Quox sends it as a bearer token. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Do agents see my Box credentials?
No. Credentials live encrypted in the Quox vault and are resolved server-side at call time. Agents invoke tools; they never receive the underlying secret.
How proven is the Box connector?
Box answers every unauthenticated request identically, so its endpoint paths rest on Box's own published API reference (cited in the connector spec). The credential wire format was verified against the real host. Like every factory connector, it is Beta: it has not yet been run with a real credential.