Box Platform provides functionality to provide access to content stored within Box. It provides endpoints for basic manipulation of files and folders, management of users within an enterprise, as well as more complex topics such as legal holds and retention poli
https://api.box.com/2.0
Auth type
OAuth 2.0
Auth header
Authorization: Bearer YOUR_ACCESS_TOKEN
Rate limit
4,000 API calls/min (authenticated)
Pricing
Free tier available
Free quota
10 GB storage / forever
Documentation
https://box.dev
Endpoint status
Server online — HTTP 401 — server is online but path returned an error (may require auth)705ms
(checked Mar 29, 2026)
Builder score
B
75%
builder-friendly
OAuth 2.0 or JWT (Server Authentication) for machine-to-machine
Authorization: Bearer YOUR_ACCESS_TOKEN
| Plan | Price/mo | Included |
|---|---|---|
| Individual | Free | 10 GB storage |
| Business Starter | $15 | Per user/mo, unlimited storage |
| Business | $20 | Per user/mo, advanced admin |
| Enterprise | $0 | Custom pricing |
Individual: free (10GB). Business Starter: $15/user/mo (unlimited storage). Business: $20/user/mo. Enterprise: custom.
| Method | Path | Description |
|---|---|---|
| GET | /authorize |
Authorize user |
| GET | /collaboration_whitelist_entries |
List allowed collaboration domains |
| POST | /collaboration_whitelist_entries |
Add domain to list of allowed collaboration domains |
| DELETE | /collaboration_whitelist_entries/{collaboration_whitelist_entry_id} |
Remove domain from list of allowed collaboration domains |
| GET | /collaboration_whitelist_entries/{collaboration_whitelist_entry_id} |
Get allowed collaboration domain |
| GET | /collaboration_whitelist_exempt_targets |
List users exempt from collaboration domain restrictions |
| POST | /collaboration_whitelist_exempt_targets |
Create user exemption from collaboration domain restrictions |
| DELETE | /collaboration_whitelist_exempt_targets/{collaboration_whitelist_exempt_target_id} |
Remove user from list of users exempt from domain restrictions |
curl -X GET 'https://api.box.com/2.0/authorize' \ -H 'Authorization: Bearer <access_token>'
{}
Data sourced from API Map. Always verify pricing and rate limits against the official Box Platform documentation.