# Box — API Agent Score

> Score: 80/100 (Grade: A) | Domain: box.com | Rubric: 1.0.0 | Checked: July 24, 2026

Box scored 80/100 (A), classified "ai-ready".

[View full report](https://www.postman.com/ai/ai-ready-apis/company/box)
[All organizations](https://www.postman.com/ai/ai-ready-apis/llms.txt)

## Summary

- Overall: 80/100 (A)
- Classification: ai-ready

## Category Scores

- API Design: 96/100 (A+)
- Developer Experience: 55/100 (D)
- Agent Discovery: 97/100 (A+)
- Agent Understanding: 76/100 (B)
- Agent Usability: 75/100 (B)

## Check Results

### API Design

- [pass] Schema coverage & depth — 149/149 (100%) public params are fully typed (no any/**kwargs). Analyzer confirms all methods have a derivable input schema. Investigated: sdk 100%, spec 60%.
- [pass] Auth declared & discoverable — Authentication required (global or on every operation). Investigated: docs 100%, wellknown 100%, spec 63%.
- [warn] Machine-readable, versioned contract — info.version="1.0.0" set but no versioning scheme (URL / header / media type) detected. Investigated: spec 80%, docs 60%.
- [pass] Security & governance hygiene — No credential-shaped strings detected in spec. Investigated: spec 100%, wellknown 0%.
- [pass] Example coverage — 38% example coverage. Investigated: spec 100%, sdk 100%, docs 0%.

### Developer Experience

- [pass] Description completeness — 88% description completeness (target 90%+). Investigated: spec 100%, sdk 99%.
- [pass] Changelog published — changelog documented in the docs site at https://developer.box.com/changelog. Investigated: spec 100%, docs 100%, sdk 100%.
- [warn] Quickstart present — Quickstart page reachable (1 variants scanned starting at https://developer.box.com/get-started) but no runnable code sample detected in HTML or .md variant. Investigated: docs 50%.
- [fail] Self-service developer portal — No signup page detected across conventional paths (/signup, /sign-up, /register, /get-started, /console/signup, /dashboard/signup, /try, /try-free, /free, /free-trial, /start, /start-free). Investigated: docs 0%.
- [fail] Code samples in docs — No detectable code samples across 20 sampled docs pages. Investigated: docs 0%.

### Agent Discovery

- [pass] Docs reachable, not hard auth-gated — All 50 sampled pages are publicly accessible. Investigated: docs 100%.
- [pass] Registry & SDK presence — Indexed on Context7 (websites/ascii_dev, 748 snippets). Investigated: docs 100%, sdk 100%, cli 0%, mcp 0%, wellknown 0%.
- [warn] llms.txt present, valid & comprehensive — All 50 same-origin sampled links resolve (963 total links) (2 external links also failed; may be bot-detection or rate-limiting). Investigated: docs 88%, sdk 0%.
- [pass] Crawlable / AEO — Docs paths crawlable by all monitored AI agents. Investigated: wellknown 100%.

### Agent Understanding

- [pass] Machine-readable errors (RFC 9457) — No 4xx/5xx response codes (or default error response) documented anywhere in the spec. Investigated: docs 100%, sdk 100%, spec 50%.
- [warn] Operation purpose clarity — 29% of operations are agent-inferable. Investigated: spec 70%.
- [warn] Agent-navigable, token-efficient docs — 2 of 50 pages have substantive content differences between markdown and HTML (avg 3% missing). Investigated: docs 75%.
- [pass] Docs structured data — JSON-LD Article markup on 17/17 assessed pages (100%) with dateModified present. Investigated: docs 100%.
- [warn] Description consistency across surfaces — Mean pairwise description similarity across 2 surfaces (spec, docs) is 6% (threshold 35% for full credit).
- [fail] Agent instructions file (AGENTS.md) — No AGENTS.md at the site root or /.well-known/. Investigated: wellknown 0%.

### Agent Usability

- [pass] Idempotency documented — Built-in retry machinery is present (grep-derived). Investigated: sdk 100%, spec 0%, docs 0%.
- [pass] Pagination documented & consistent — Pagination params detected on 14 list endpoint(s). Investigated: docs 100%, sdk 100%, spec 75%.
- [warn] Sandbox separation — No test-mode flag or sandbox environment is exposed. Investigated: sdk 50%, spec 0%, docs 0%.
- [warn] Rate-limit signaling — No rate-limit response headers documented. Investigated: spec 30%, docs 30%.
- [warn] Runnable collection with test scripts — No test scripts found in the workspace's collections. Investigated: platform 50%.

## Executive Summary

Box's API program has a strong foundation in API design and agent discovery, but two areas need urgent attention to protect partner outcomes. Partners and their AI agents currently lack the onboarding self-service they expect — no frictionless portal, no embedded code samples — and agents have no structured instructions file to understand how to work with the API safely and correctly. Prioritize closing these gaps to compress the time to a partner's first successful call and ensure agents can build accurate integrations without guesswork.