A Platform App allows for interaction with our 150+ endpoints.
For example, downloading/uploading, searching, applying metadata and more.
Prerequisites
Access to the Developer Console.
- Navigate to the Developer Console.
- Click New App.
- Select an app type: User for apps where users link their Box accounts, or Server for backend services infrastructure.
- If you selected Server, you may also be asked to choose an authentication method (see below for more information).
- Click Create.
For Server apps,
is always the default. The Switch
server app auth type (CCG or JWT) setting in Admin Console > Enterprise Settings > Platform Apps controls whether the
method is locked:
- When switching is enabled (the default for free developer accounts), the
app is created with Client Credentials Grant and you can change it to
- or back - afterward.
- When switching is disabled (the default for enterprises), the dialog shows
a Select Method step with Client Credentials Grant preselected. You have the option to
pick at creation instead.
The method is then fixed for the life of the app.
See
for guidance on choosing the method.
After you create a Platform App, the settings screen is displayed.
General settings
- App Name - the name you set up during the app creation, you can change it here if needed.
- App Description - provide a description for your app (optional).
- Contact Email - this is set to the developer of the application by default.
Keep in mind that once you publish your app, this email is publicly visible to Box users
who view your app in the . We recommend to change it to a
support email address, so that users can reach out to support in case of any issues with
the integration.
Configuration
- Purpose - select the purpose of your app from the drop-down list.
Depending on the option you choose, you might need to specify further details.
- Authentication Method - how your app authenticates to the Box APIs.
- Developer Token - a developer token is created automatically when you create a Platform App.
- Application Scopes - choose the scopes you want to grant to your app. See the for detailed information on each option.
- Advanced Features - enable the advanced features your application requires.
- CORS Domains - add the domains you want to allow requests from.
Last modified on July 14, 2026