Box Skill for OpenClaw

Developer Preview — This skill is experimental and intended for developer evaluation only. Do not use it in production environments. It is provided "as-is" without warranty of any kind. Box does not offer support for this integration.

A Box CLI integration for OpenClaw that enables authenticated file operations and Box AI workflows directly from an OpenClaw agent.

This skill is built for developers who have their own OpenClaw instance and want to extend it with Box capabilities. It is not a daily productivity tool — it is a building block for developer workflows and automation.

Designed for headless environments (Railway, CI, servers), this skill uses Client Credentials Grant (CCG) or JWT server authentication. Credentials must be supplied by the user — the skill does not provision or manage secrets.

---

Important: Use a Dedicated Box Developer Account

This skill authenticates as a service account. All file operations occur within the service account's content — not your personal Box account. To see what the service account owns, go to the Box Admin Console and navigate to Content.

Because this is a developer preview, you should run it on a separate Box instance rather than your organization's primary account. You can do so by using a free Box Developer account

---

Capabilities

• Browse, upload, download, and search Box files
• Manage metadata
• Execute any supported box CLI command
• Run Box AI operations (QA, extract, structured extraction)

AI operations are executed via Box AI APIs.

---

Prerequisites

Your Box app must be authorized in the Admin Console before it can make API calls. If you skip this step, authentication will fail with invalid_grant.

The app must also have the appropriate application scopes enabled in the Developer Console. At a minimum, enable Read and write all files and folders. If you plan to use Box AI features, also enable Manage AI.

---

Installation

1. Clone or copy this repository into your OpenClaw skills/ directory. The SKILL.md file at the root is what OpenClaw uses to load the skill.
2. Provide your own Box CCG or JWT configuration file. Place it at:

/data/.secrets/box-ccg.json

3. Ask OpenClaw to install the Box CLI (if not already installed). For example:

npm install -g @box/cli

4. Ask OpenClaw to register the Box environment and verify authentication. For example:

box configure:environments:add /data/.secrets/box-ccg.json --ccg-auth --name ccg --set-as-current
box users:get me

After this one-time setup, OpenClaw can invoke Box CLI commands and Box AI workflows directly.

---

CCG Configuration Template

Create a Box application using Server Authentication (Client Credentials Grant). Note your app's client ID, client secret, and enterprise ID.

Then authorize the application in the Box Admin Console. Your app cannot make API calls until an admin has approved it.

Then create:

/data/.secrets/box-ccg.json

With:

{
  "boxAppSettings": {
    "clientID": "YOUR_CLIENT_ID",
    "clientSecret": "YOUR_CLIENT_SECRET"
  },
  "enterpriseID": "YOUR_ENTERPRISE_ID"
}

Secure the file:

chmod 600 /data/.secrets/box-ccg.json

Do not commit credential files to version control.

---

Documentation

• OpenClaw: https://docs.openclaw.ai/
• OpenClaw Skills: https://docs.openclaw.ai/skills/
• Box CLI: https://developer.box.com/guides/cli/
• Box AI: https://developer.box.com/guides/box-ai/