Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Box API integration with managed OAuth. Manage files, folders, collaborations, and cloud storage. Use this skill when users want to upload, download, share, or organize files and folders in Box. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.
Box API integration with managed OAuth. Manage files, folders, collaborations, and cloud storage. Use this skill when users want to upload, download, share, or organize files and folders in Box. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Access the Box API with managed OAuth authentication. Manage files, folders, collaborations, shared links, and cloud storage.
# Get current user info python <<'EOF' import urllib.request, os, json req = urllib.request.Request('https://gateway.maton.ai/box/2.0/users/me') req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}') print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2)) EOF
https://gateway.maton.ai/box/2.0/{resource} The gateway proxies requests to api.box.com/2.0 and automatically injects your OAuth token.
All requests require the Maton API key in the Authorization header: Authorization: Bearer $MATON_API_KEY Environment Variable: Set your API key as MATON_API_KEY: export MATON_API_KEY="YOUR_API_KEY"
Sign in or create an account at maton.ai Go to maton.ai/settings Copy your API key
Manage your Box OAuth connections at https://ctrl.maton.ai.
python <<'EOF' import urllib.request, os, json req = urllib.request.Request('https://ctrl.maton.ai/connections?app=box&status=ACTIVE') req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}') print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2)) EOF
python <<'EOF' import urllib.request, os, json data = json.dumps({'app': 'box'}).encode() req = urllib.request.Request('https://ctrl.maton.ai/connections', data=data, method='POST') req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}') req.add_header('Content-Type', 'application/json') print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2)) EOF
python <<'EOF' import urllib.request, os, json req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}') req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}') print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2)) EOF Response: { "connection": { "connection_id": "bd484938-0902-4fc0-9ffb-2549d7d91f1d", "status": "ACTIVE", "creation_time": "2026-02-08T21:14:41.808115Z", "last_updated_time": "2026-02-08T21:16:10.100340Z", "url": "https://connect.maton.ai/?session_token=...", "app": "box", "metadata": {} } } Open the returned url in a browser to complete OAuth authorization.
python <<'EOF' import urllib.request, os, json req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}', method='DELETE') req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}') print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2)) EOF
If you have multiple Box connections, specify which one to use with the Maton-Connection header: python <<'EOF' import urllib.request, os, json req = urllib.request.Request('https://gateway.maton.ai/box/2.0/users/me') req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}') req.add_header('Maton-Connection', 'bd484938-0902-4fc0-9ffb-2549d7d91f1d') print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2)) EOF If omitted, the gateway uses the default (oldest) active connection.
Get Current User GET /box/2.0/users/me Response: { "type": "user", "id": "48806418054", "name": "Chris", "login": "chris@example.com", "created_at": "2026-02-08T13:12:34-08:00", "modified_at": "2026-02-08T13:12:35-08:00", "language": "en", "timezone": "America/Los_Angeles", "space_amount": 10737418240, "space_used": 0, "max_upload_size": 262144000, "status": "active", "avatar_url": "https://app.box.com/api/avatar/large/48806418054" } Get User GET /box/2.0/users/{user_id}
Get Root Folder The root folder has ID 0: GET /box/2.0/folders/0 Get Folder GET /box/2.0/folders/{folder_id} Response: { "type": "folder", "id": "365037181307", "name": "My Folder", "description": "Folder description", "size": 0, "path_collection": { "total_count": 1, "entries": [ {"type": "folder", "id": "0", "name": "All Files"} ] }, "created_by": {"type": "user", "id": "48806418054", "name": "Chris"}, "owned_by": {"type": "user", "id": "48806418054", "name": "Chris"}, "item_status": "active" } List Folder Items GET /box/2.0/folders/{folder_id}/items Query parameters: limit - Maximum items to return (default 100, max 1000) offset - Offset for pagination fields - Comma-separated list of fields to include Response: { "total_count": 1, "entries": [ { "type": "folder", "id": "365036703666", "name": "Subfolder" } ], "offset": 0, "limit": 100 } Create Folder POST /box/2.0/folders Content-Type: application/json { "name": "New Folder", "parent": {"id": "0"} } Response: { "type": "folder", "id": "365037181307", "name": "New Folder", "created_at": "2026-02-08T14:56:17-08:00" } Update Folder PUT /box/2.0/folders/{folder_id} Content-Type: application/json { "name": "Updated Folder Name", "description": "Updated description" } Copy Folder POST /box/2.0/folders/{folder_id}/copy Content-Type: application/json { "name": "Copied Folder", "parent": {"id": "0"} } Delete Folder DELETE /box/2.0/folders/{folder_id} Query parameters: recursive - Set to true to delete non-empty folders Returns 204 No Content on success.
Get File Info GET /box/2.0/files/{file_id} Download File GET /box/2.0/files/{file_id}/content Returns a redirect to the download URL. Upload File POST https://upload.box.com/api/2.0/files/content Content-Type: multipart/form-data attributes={"name":"file.txt","parent":{"id":"0"}} file=<binary data> Note: File uploads use a different base URL: upload.box.com Update File Info PUT /box/2.0/files/{file_id} Content-Type: application/json { "name": "renamed-file.txt", "description": "File description" } Copy File POST /box/2.0/files/{file_id}/copy Content-Type: application/json { "name": "copied-file.txt", "parent": {"id": "0"} } Delete File DELETE /box/2.0/files/{file_id} Returns 204 No Content on success. Get File Versions GET /box/2.0/files/{file_id}/versions
Create a shared link by updating a file or folder: PUT /box/2.0/folders/{folder_id} Content-Type: application/json { "shared_link": { "access": "open" } } Access levels: open - Anyone with the link company - Only users in the enterprise collaborators - Only collaborators Response includes: { "shared_link": { "url": "https://app.box.com/s/sisarrztrenabyygfwqggbwommf8uucv", "access": "open", "effective_access": "open", "is_password_enabled": false, "permissions": { "can_preview": true, "can_download": true, "can_edit": false } } }
List Folder Collaborations GET /box/2.0/folders/{folder_id}/collaborations Create Collaboration POST /box/2.0/collaborations Content-Type: application/json { "item": {"type": "folder", "id": "365037181307"}, "accessible_by": {"type": "user", "login": "user@example.com"}, "role": "editor" } Roles: editor, viewer, previewer, uploader, previewer_uploader, viewer_uploader, co-owner Update Collaboration PUT /box/2.0/collaborations/{collaboration_id} Content-Type: application/json { "role": "viewer" } Delete Collaboration DELETE /box/2.0/collaborations/{collaboration_id}
GET /box/2.0/search?query=document Query parameters: query - Search query (required) type - Filter by type: file, folder, web_link file_extensions - Comma-separated extensions ancestor_folder_ids - Limit to specific folders limit - Max results (default 30) offset - Pagination offset Response: { "total_count": 5, "entries": [...], "limit": 30, "offset": 0, "type": "search_results_items" }
GET /box/2.0/events Query parameters: stream_type - all, changes, sync, admin_logs stream_position - Position to start from limit - Max events to return Response: { "chunk_size": 4, "next_stream_position": "30401068076164269", "entries": [...] }
List Trashed Items GET /box/2.0/folders/trash/items Get Trashed Item GET /box/2.0/files/{file_id}/trash GET /box/2.0/folders/{folder_id}/trash Restore Trashed Item POST /box/2.0/files/{file_id} POST /box/2.0/folders/{folder_id} Permanently Delete DELETE /box/2.0/files/{file_id}/trash DELETE /box/2.0/folders/{folder_id}/trash
List Collections GET /box/2.0/collections Response: { "total_count": 1, "entries": [ { "type": "collection", "name": "Favorites", "collection_type": "favorites", "id": "35223030868" } ] } Get Collection Items GET /box/2.0/collections/{collection_id}/items
GET /box/2.0/recent_items
List Webhooks GET /box/2.0/webhooks Create Webhook POST /box/2.0/webhooks Content-Type: application/json { "target": {"id": "365037181307", "type": "folder"}, "address": "https://example.com/webhook", "triggers": ["FILE.UPLOADED", "FILE.DOWNLOADED"] } Note: Webhook creation may require enterprise permissions. Delete Webhook DELETE /box/2.0/webhooks/{webhook_id}
Box uses offset-based pagination: GET /box/2.0/folders/0/items?limit=100&offset=0 GET /box/2.0/folders/0/items?limit=100&offset=100 Some endpoints use marker-based pagination with marker parameter. Response: { "total_count": 250, "entries": [...], "offset": 0, "limit": 100 }
const response = await fetch( 'https://gateway.maton.ai/box/2.0/folders/0/items', { headers: { 'Authorization': `Bearer ${process.env.MATON_API_KEY}` } } ); const data = await response.json();
import os import requests response = requests.get( 'https://gateway.maton.ai/box/2.0/folders/0/items', headers={'Authorization': f'Bearer {os.environ["MATON_API_KEY"]}'} ) data = response.json()
import os import requests response = requests.post( 'https://gateway.maton.ai/box/2.0/folders', headers={ 'Authorization': f'Bearer {os.environ["MATON_API_KEY"]}', 'Content-Type': 'application/json' }, json={ 'name': 'New Folder', 'parent': {'id': '0'} } ) folder = response.json() print(f"Created folder: {folder['id']}")
Root folder ID is 0 File uploads use upload.box.com instead of api.box.com Delete operations return 204 No Content on success Use fields parameter to request specific fields and reduce response size Shared links can have password protection and expiration dates Some operations (list users, create webhooks) require enterprise admin permissions ETags can be used for conditional updates with If-Match header IMPORTANT: When piping curl output to jq or other commands, environment variables like $MATON_API_KEY may not expand correctly in some shell environments
StatusMeaning400Missing Box connection or bad request401Invalid or missing Maton API key403Insufficient permissions for the operation404Resource not found409Conflict (e.g., item with same name exists)429Rate limited4xx/5xxPassthrough error from Box API Box errors include detailed messages: { "type": "error", "status": 409, "code": "item_name_in_use", "message": "Item with the same name already exists" }
Check that the MATON_API_KEY environment variable is set: echo $MATON_API_KEY Verify the API key is valid by listing connections: python <<'EOF' import urllib.request, os, json req = urllib.request.Request('https://ctrl.maton.ai/connections') req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}') print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2)) EOF
Ensure your URL path starts with box. For example: Correct: https://gateway.maton.ai/box/2.0/users/me Incorrect: https://gateway.maton.ai/2.0/users/me
Box API Reference Box Developer Documentation Authentication Guide Box SDKs Maton Community Maton Support
Code helpers, APIs, CLIs, browser automation, testing, and developer operations.
Largest current source with strong distribution and engagement signals.