Release Notes

 We're excited to introduce a new layer of security controls for the Box MCP Server. Box admins can now control which Box MCP Server tools each unpublished platform app is allowed to use. For every app—regardless of authentication method—admins can apply the organization-wide MCP policy or create a custom set of permitted tools specifically for that app. This gives organizations the same granular governance for their internal, custom-built apps that was previously available only for published integrations. What's newEvery platform app listed in Admin Console > Platform > Platform Apps now includes its own Box MCP Server tab. From there, admins can define exactly which tools that specific app is allowed to use, independently of the organization-wide global controls.To find it: go to Admin Console > Platform > Platform Apps, locate the app by name, click to open it, and select the Box MCP Server tab.Admins can now:Choose between Global and Custom configuration for each unpubl