Skip to main content

Box connector

Back to the connector overview, authentication methods, and actions.
​
11 Sept 2026
breaking-change new-actions description-fixBreaking — the Download File action has been removed. Box delivers file content as a streamed download artifact rather than inline JSON, so the action always returned an empty body; use Get File to read metadata and retrieve content through the returned shared link. Update Task now requires message, because Box rejects any update body that omits it, and Search Content requires query, because this connector does not expose Box’s metadata-filter alternative. Added Search Content so an item can be found by name in one call instead of walking folders, Unlock File so a lock applied through Update File can be removed, and Create Metadata Template so templates can be created rather than only read. Update File no longer states that unlocking is unavailable, Copy File explains that omitting name lets Box auto-rename while an explicit name already in use returns 409, and every delete action now returns an explicit confirmation message instead of an empty payload.
box_create_metadata_template, box_search_content, box_unlock_file
box_download_file
box_copy_file, box_delete_collaboration, box_delete_comment, box_delete_file, box_delete_file_metadata, box_delete_file_version, box_delete_folder, box_delete_folder_metadata, box_delete_group, box_delete_task, box_delete_task_assignment, box_delete_user, box_delete_user_avatar, box_permanently_delete_file, box_permanently_delete_folder, box_remove_user_from_group, box_update_file, box_update_task
​
10 Sept 2026
new-featureEnabled scheduled data sync on five list actions — users, groups, trashed items, webhooks and metadata templates — so these collections can be kept in sync and read without calling Box on every request. Users, groups and trashed items page by offset; webhooks and metadata templates follow Box’s marker cursor. Each syncs by full refresh, because the Box API exposes no updated-since filter on these endpoints (change tracking is only available through the Events API).
box_list_groups, box_list_metadata_templates, box_list_trashed_items, box_list_users, box_list_webhooks
​
12 Aug 2026
guide-changesClarified in the OAuth connection guide that the Write content permission is only required when connecting with the default scopes or using actions that create or modify content — read-only connections with custom scopes can omit it.
​
28 Jul 2026
bug-fixFixed action descriptions for update_file (lock/unlock limitation), download_file (empty response clarification), query_by_metadata (enterprise scope format), update_task (completion_rule usage), update_task_assignment (resolution_state requirement), and commented out unsupported expires_at param on update_collaboration.
box_download_file, box_query_by_metadata, box_update_collaboration, box_update_file, box_update_task, box_update_task_assignment
​
13 Jul 2026
new-eventsAdded programmatic webhook support with 36 event types across files, folders, comments, collaborations, shared links, task assignments, metadata, and webhook lifecycle with connection guide.