Access Tokens

Access Tokens

Access Tokens are at the core of every Box API call. They represent an authenticated user to the Box servers and determine what files and folders an application has access to.

Application Types & Access Tokens

The following shows how each application type is expected to create an Access Token.

Box Application TypeHow to get Access Token
Custom App + OAuth 2.0Explicit user grant
Custom App + JWTExchange a JWT assertion
Custom App + App TokenConfigure token in developer console
Enterprise Integration + OAuth 2.0Explicit user grant
Enterprise Integration + JWTExchange a JWT assertion
Partner Integration + App TokenConfigure token in developer console
Custom SkillAccess Token in event payload