{"registry_version":"2026.1025.387","generated_at":"2026-10-25T06:27:00Z","content_sha256":"089d16f627d9365e3d0663cc8069203706d7cb23a76c332226e29686968811a5","signed":true,"signature":{"key_id":"ed25519:74ca19268e364242","algorithm":"ed25519","expires_at":"2026-11-24T06:27:09Z","expired":false,"manifest":"/registry/manifest.json"},"entry_sha256":"badd5402fa45d446f1a2929cb38dc440a9ad32e5ad31ff6f1bac4406db107a4d","entry":{"id":"box/app","name":"Box Platform app (Developer Console)","vendor":"Box","summary":"Create a User app (OAuth 2.0) or Server app (JWT or Client Credentials Grant) in the Box Developer Console; Server apps need Box Admin authorisation in enterprise accounts, and Box Integrations listings (OAuth 2.0 only) are reviewed by the Box Partner team.","category":"storage","group":"C","homepage":"https://developer.box.com","docs":["https://developer.box.com/guides/authentication/","https://developer.box.com/guides/authorization/platform-app-approval/","https://developer.box.com/guides/applications/integrations"],"status":"researched","last_verified":null,"last_researched":"2026-10-25","sources":[{"id":"authentication","url":"https://developer.box.com/guides/authentication/","title":"Authentication","accessed":"2026-10-25","supports":"OAuth 2.0 for User apps; CCG and JWT for Server apps (JWT uses keypair, CCG client ID/secret); App Token for Box View / Limited Access; Server apps must be authorised before calling the API; Developer Console at account.box.com/developers/console; developer sign-up at account.box.com/signup/developer.","kind":"official"},{"id":"app_approval","url":"https://developer.box.com/guides/authorization/platform-app-approval/","title":"Platform app approval","accessed":"2026-10-25","supports":"JWT/CCG apps need Box Admin or Co-Admin approval in enterprises (free developer accounts auto-authorise); admin enters Client ID in Admin Console > Platform > Platform Apps; scope or access changes require re-authorisation.","kind":"official"},{"id":"integrations","url":"https://developer.box.com/guides/applications/integrations","title":"Integrations","accessed":"2026-10-25","supports":"Listing needs a production-ready OAuth 2.0 app; Developer Console > Publishing tab > checklist, listing form, Preview, submit for approval; Box Partner team reviews as soon as possible.","kind":"official"}],"allowed_domains":["box.com"],"account_model":{"summary":"Apps are created under a Box developer or enterprise account; Server apps act as a service account authorised by the enterprise admin.","accounts":[{"name":"Box developer account or enterprise user","kind":"developer","required":true},{"name":"Box enterprise (admin)","kind":"organisation","required":false,"note":"Admin or Co-Admin must authorise JWT/CCG apps."}]},"steps":[{"id":"create_app","title":"Create a platform app","summary":"In the Developer Console create a new app and choose User (OAuth 2.0) or Server (JWT or Client Credentials Grant) authentication.","route":"copilot","depends_on":[],"gate":"human_submit","url":"https://account.box.com/developers/console","sources":["authentication"]},{"id":"configure","title":"Configure scopes and credentials","summary":"On the Configuration tab set redirect URIs (OAuth), application scopes and access level; copy the Client ID and Client Secret; for JWT generate a public/private keypair.","route":"copilot","depends_on":["create_app"],"gate":"human_submit","url":"https://account.box.com/developers/console","capture":{"env":"BOX_CLIENT_SECRET","kind":"secret"},"sources":["authentication","app_approval"]},{"id":"admin_authorize","title":"Get admin authorisation (Server apps)","summary":"Submit for approval from the Configuration tab, or give the Client ID to a Box Admin who adds it in Admin Console > Platform > Platform Apps. Re-authorise after changing scopes or access level.","route":"guided","depends_on":["configure"],"gate":"human_submit","recovery":[{"hiccup":"Scope changes don't take effect","fix":"Submit the app for re-authorisation; admins choose Reauthorize in Platform Apps.","source":"app_approval"}],"sources":["app_approval"]},{"id":"publish_listing","title":"Publish to Box Integrations (optional, OAuth 2.0 apps)","summary":"On the Publishing tab confirm the checklist, fill in categories, descriptions, screenshots and icon, preview, then submit for approval.","route":"copilot","depends_on":["configure"],"gate":"third_party_review","url":"https://account.box.com/developers/console","lead_time":{"official":{"text":"The Box Partner team reviews \"as soon as possible\"; no SLA stated.","source":"integrations"}},"optional":true}],"outputs":[{"name":"BOX_CLIENT_ID","description":"App client ID","secret":false,"example_format":"opaque id string","from_step":"configure"},{"name":"BOX_CLIENT_SECRET","description":"App client secret","secret":true,"example_format":"opaque secret string","from_step":"configure"},{"name":"BOX_ENTERPRISE_ID","description":"Enterprise ID (for JWT/CCG server auth) [to verify]","secret":false,"example_format":"numeric string"},{"name":"BOX_JWT_CONFIG","description":"Path to the JWT app config JSON (includes private key) for JWT apps [to verify]","secret":true,"example_format":"./box_config.json"}],"terms_notes":[{"kind":"rules_say","severity":"amber","text":"Server (JWT/CCG) apps can't call the API in an enterprise until a Box Admin or Co-Admin authorises them.","source":"app_approval"},{"kind":"rules_say","severity":"yellow","text":"Box Integrations listings accept only OAuth 2.0 apps.","source":"integrations"}],"stripe_projects":false,"api_provisioning":{"available":"no","notes":"Apps are created in the Developer Console."}}}