Box
13 operations33 webhooks
Cloud content management for secure file storage, sharing, and enterprise collaboration.
Supported operations
- CopyWrite
Copy a Box file to a destination folder
- DeleteDestructive
Delete a Box file
- DownloadRead-only
Download the content of a Box file
- GetRead-only
Get metadata for a Box file by ID
- SearchRead-only
Search for files in Box
- ShareWrite
Create or update a shared link for a Box file
- UploadWrite
Upload a new file to Box
Supported triggers
- Accepted
A collaboration invitation was accepted
- Created
A new collaboration was created
- Rejected
A collaboration invitation was rejected
- Removed
A collaboration was removed
- Updated
A collaboration was updated
FAQ
Install corsair and @corsair-dev/box, add the Box plugin, and connect with OAuth. Then call methods like corsair.box.api.files.copy() from your app. Corsair verifies webhooks, stores tokens, and syncs data per tenant.
Yes. Box needs an OAuth app with scopes that match what you automate. Register the app in Box, configure redirect URLs, then connect through Corsair or managed OAuth in Hub.
Yes. One Corsair client can hit Box, GitHub, Notion, Stripe, and the rest. Trigger Box from a webhook, push updates to Slack, or chain actions across plugins. Same tenant context across integrations, plain TypeScript.
Teams use Corsair for cloud content management for secure file storage, sharing, and enterprise collaboration. Common builds include sync jobs, admin tooling, and agents that call Box APIs from your backend. Webhook handlers react to Box events and fan out to Slack, email, or other plugins in the same tenant. Local DB entities let you query synced Box records without hitting the API on every read.
The SDK is open source. Self-host and you pay Corsair nothing for the integration layer. Hub bills for hosted auth and execution, not per Box API call. Hub has a generous free tier. For hobby projects you can probably run the whole thing on free. Paid plans start to matter with more tenants or heavier traffic.
We maintain @corsair-dev/box in the open repo. When Box ships API changes, upgrade the package. Your call sites stay typed. You should not need to rewrite the integration layer each time.
No. Corsair does not read your Box data or hold individual access credentials. Credentials stay in your database. API calls run on your instance. We do not store Box data on your behalf.