As AI agents start acting inside Box through the Model Context Protocol (MCP) Server, they can create files, move content, share documents, and add collaborators on your behalf. Agents work autonomously and at machine speed, so a single misconfigured workflow can cause outsized damage before a person can step in.
MCP Guardrails for the Box MCP Server give admins policy-driven control over the write actions AI agents can perform through Box. You decide which actions are allowed, and the Box Action Platform enforces that decision on every request.
What's new
Admins can configure guardrails for individual write tools directly in Admin Console under Integrations > Box MCP Server. When an external AI agent calls a write tool, the Box Action Platform checks the request against your rules and either allows or blocks it. Blocked actions return a clear, structured error back to the agent, and every configuration change is written to the Box event stream and available through the Events API.
Guardrails are set at the global MCP Server level and establish a default policy that applies across all connected clients. More on Box MCP Server Global Admin Controls can be found here
Covered write tools at general availability:
- upload_file — Upload a new file
- upload_file_version — Upload a new version of an existing file
- create_box_note — Create a new Box Note
- create_folder — Create a new folder
- copy_file / move_file — Copy or move a file
- copy_folder / move_folder — Copy or move a folder
- create_collaboration — Add a collaborator to a file, folder, or Hub
- create_shared_link — Create a shared link to a file, folder, or Hub
Read operations stay out of scope and are governed by Shield Access Policies.
Why it matters
AI agents move fast and act on their own, which is exactly what makes them useful and exactly what makes them risky. Guardrails stop a harmful action at the point of execution, so a compromised session or an overly aggressive workflow cannot quietly reshape your content. You get the productivity of agents in Box with the control your security and compliance teams expect.
Admin action required
Guardrails are off by default. To turn them on, open the Box MCP Server page in Admin Console, pick the write tools you want to protect, and set your policy. Enforcement events flow into the Box event stream so your SIEM, SOC, and incident workflows pick them up automatically.
Availability
MCP Guardrails for the Box MCP Server are available exclusively for Enterprise Advanced customers