Authorization header as a Bearer Token or it will return a 401 Unauthorized
HTTP status.
Use the endpoint to inspect what
user an Access Token is authenticated for.
Tokens
Use a token
Pass an access token in the Authorization header of a Box API call, and check which user the token represents.
Every authenticated API call requires an Access Token to be passed in the
Last modified on September 10, 2026