Box
Storage OAuth access tokenManage Box files, folders, sharing and collaborations from any Windmill script, flow or app.
Set up in 3 steps
Get an access token
At the Box developer console, create an app and generate a developer token for it, or run its OAuth flow to obtain one.
Add the resource in Windmill
Open Resources, add a resource of type box, and paste the token.
Run your first script
Fork any script below and read before writing anything. There are hundreds here, so search by the verb you need.
Scripts
Building blocks, if none of the projects above fit. Fork one, run it, or call it as a step inside your own flow.
Create retention policy
Upload file version
Upload file
Update webhook
Update web link
Update user
Update terms of service status for existing user
Update terms of service
Update task assignment
Update task
Update storage policy assignment
Update shield information barrier segment with specified ID
Update shared link on web link
Update shared link on folder
Update shared link on file
Update retention policy
Update legal hold policy
Update group membership
Update group
Update folder
Update file request
Update file
Update comment
Update collaboration
Update all Box Skill cards on file
Update Slack integration mapping
Unassign task
Unassign storage policy
Unassign legal hold policy
Transfer owned folders
Resource type
box — the shape of the credential every script on this page expects.
| Field | Type | Required | What it is |
|---|---|---|---|
| token | string | Yes | Access token generated using the Client ID and the Client Secret. |
Questions
The token stops working after an hour
Box access tokens are short-lived, and a developer token lasts an hour by design. For anything scheduled, mint tokens from an app with client credentials and refresh them rather than pasting one.
A folder is not found
A Box app only sees what has been shared with its service account, or what the authorising user can see. Check which of the two the token represents.
Is my token stored on the hub?
Never. It lives only in your own Windmill workspace, encrypted at rest.