MCP server intelligence profile

chatgpt-box-mcp Server

A private MCP server that lets ChatGPT create, manage, and operate Box by ASCII Linux environments through secure MCP tools

Local Onlywu6330077-sys
Awaiting current scanSource Git · 60f9b70064e4c539378dea05479d6b4d2f6932e5

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

1Distribution channel
15Independently observed tools
0Linked remote endpoints
AvailableVersion intelligence

Detailed security scan evidence is not public for this MCP yet. Public identity, registry metadata, and independently observed protocol inventory remain available.

Install and connect

Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.

No verified installation or connection method is available in the retained evidence yet.

Identity

Canonical slugchatgpt-box-mcp-1ae02ed7DeploymentLocal Only
Canonical package—Repositorywu6330077-sys/chatgpt-box-mcp
First published—Latest release—
Last security verification—Classification confidence90%
PublicationDraftOfficial distributionNot verified

Distributions

ChannelIdentifierCurrent versionVersionsSource
source_gitwu6330077-sys/chatgpt-box-mcp60f9b70064e4c539378dea05479d6b4d2f6932e51Repository

Current release

PackageVersionPublished / observedInventorySecurity scan
source_gitwu6330077-sys/chatgpt-box-mcp60f9b70064e4c539378dea05479d6b4d2f6932e5CurrentAug 25, 202615 toolsSucceeded · 0 resources · 0 promptsEvidence restricted
Enterprise protection

Continuously monitor this MCP for security risk

Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.

  • Independent exact-version security scans
  • Continuous release and vulnerability monitoring
  • Risk-change alerts with capability context
  • Historical evidence and API exports
Custom pricingContact salesTailored to your organization, integrations, data needs, and support requirements.

Current version evidence

No public current-version evidence is available yet.

Current protocol inventory

2025-06-18Negotiated protocol
chatgpt-box-mcpServer-reported name
1Capability groups
Aug 25, 2026Observed

Tools 15

ToolCategoryAnnotationsRisk
box_createProvision a paid Box Linux environment owned by the configured Box account. This changes external state and starts billable runtime.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "size": {
      "default": "default",
      "type": "string",
      "enum": [
        "small",
        "default",
        "large"
      ]
    },
    "ttl_seconds": {
      "default": 3600,
      "description": "Automatic archival delay. null disables auto-stop.",
      "anyOf": [
        {
          "type": "integer",
          "minimum": 1,
          "maximum": 2592000
        },
        {
          "type": "null"
        }
      ]
    },
    "no_env": {
      "default": false,
      "description": "Create an isolated box without account secrets or credentials.",
      "type": "boolean"
    }
  }
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": false,
  "openWorldHint": true
}
—WritesNon-destructiveOpen world—
box_execute_commandRun a shell command inside a Box and wait up to 60 seconds. The command may modify files, install software, access configured credentials, or affect external systems. Use box_job_start for longer work.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "command": {
      "type": "string",
      "minLength": 1,
      "maxLength": 100000
    },
    "cwd": {
      "type": "string",
      "minLength": 1,
      "maxLength": 4096
    },
    "timeout_seconds": {
      "default": 30,
      "type": "integer",
      "minimum": 1,
      "maximum": 60
    }
  },
  "required": [
    "box_id",
    "command"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": true,
  "openWorldHint": true
}
—WritesDestructiveOpen world—
box_forkCreate a new paid Box from an existing snapshot. The source Box is not modified.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "size": {
      "description": "Omit to inherit the source size.",
      "type": "string",
      "enum": [
        "small",
        "default",
        "large"
      ]
    },
    "no_env": {
      "type": "boolean"
    }
  },
  "required": [
    "box_id"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": false,
  "openWorldHint": true
}
—WritesNon-destructiveOpen world—
box_getInspect one Box environment after create, stop, resume, or fork operations.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    }
  },
  "required": [
    "box_id"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "openWorldHint": true
}
—Read onlyNon-destructiveOpen world—
box_job_cancelSend SIGTERM to a running background job and its process group. Partial file or external changes are not rolled back.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "job_id": {
      "type": "string",
      "pattern": "^job_[a-f0-9]{32}$"
    }
  },
  "required": [
    "box_id",
    "job_id"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": true,
  "openWorldHint": true
}
—WritesDestructiveOpen world—
box_job_logsRead the tails of stdout and stderr for a background job.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "job_id": {
      "type": "string",
      "pattern": "^job_[a-f0-9]{32}$"
    },
    "max_characters": {
      "default": 20000,
      "type": "integer",
      "minimum": 1,
      "maximum": 100000
    }
  },
  "required": [
    "box_id",
    "job_id"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "openWorldHint": true
}
—Read onlyNon-destructiveOpen world—
box_job_startStart a long-running shell job in a Box. The job runs independently after this tool returns and may modify the machine or external systems.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "command": {
      "type": "string",
      "minLength": 1,
      "maxLength": 100000
    },
    "cwd": {
      "type": "string",
      "minLength": 1,
      "maxLength": 4096
    }
  },
  "required": [
    "box_id",
    "command"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": true,
  "openWorldHint": true
}
—WritesDestructiveOpen world—
box_job_statusCheck whether a background job is running, succeeded, failed, or was cancelled.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "job_id": {
      "type": "string",
      "pattern": "^job_[a-f0-9]{32}$"
    }
  },
  "required": [
    "box_id",
    "job_id"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "openWorldHint": true
}
—Read onlyNon-destructiveOpen world—
box_listFind the user's Box environments and inspect their current lifecycle states.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "limit": {
      "default": 50,
      "type": "integer",
      "minimum": 1,
      "maximum": 200
    },
    "cursor": {
      "type": "string"
    },
    "sort": {
      "default": "desc",
      "type": "string",
      "enum": [
        "asc",
        "desc"
      ]
    },
    "state": {
      "description": "Optional comma-separated states such as ready,idle,running.",
      "type": "string"
    }
  }
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "openWorldHint": true
}
—Read onlyNon-destructiveOpen world—
box_list_eventsInspect recent lifecycle and work events emitted by a Box.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "limit": {
      "default": 50,
      "type": "integer",
      "minimum": 1,
      "maximum": 200
    },
    "cursor": {
      "type": "string"
    },
    "sort": {
      "default": "desc",
      "type": "string",
      "enum": [
        "asc",
        "desc"
      ]
    },
    "type": {
      "description": "Optional comma-separated event types.",
      "type": "string"
    }
  },
  "required": [
    "box_id"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "openWorldHint": true
}
—Read onlyNon-destructiveOpen world—
box_open_desktopCreate a secret-bearing desktop streaming URL for the user to inspect the Box. Do not log, persist, or share the returned URL.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "public_access": {
      "default": false,
      "description": "When true, returns a noVNC URL that does not require an access token.",
      "type": "boolean"
    }
  },
  "required": [
    "box_id"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": false,
  "openWorldHint": true
}
—WritesNon-destructiveOpen world—
box_read_fileRead a file relative to the Box work directory. Results are capped for model safety.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "path": {
      "type": "string",
      "minLength": 1,
      "maxLength": 4096
    },
    "encoding": {
      "default": "utf8",
      "type": "string",
      "enum": [
        "utf8",
        "base64"
      ]
    },
    "max_characters": {
      "default": 50000,
      "type": "integer",
      "minimum": 1,
      "maximum": 100000
    }
  },
  "required": [
    "box_id",
    "path"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "openWorldHint": true
}
—Read onlyNon-destructiveOpen world—
box_resumeResume an archived Box, restarting billable runtime on a fresh machine.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "size": {
      "description": "Omit to preserve the current machine size.",
      "type": "string",
      "enum": [
        "small",
        "default",
        "large"
      ]
    },
    "no_env": {
      "type": "boolean"
    }
  },
  "required": [
    "box_id"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": false,
  "openWorldHint": true
}
—WritesNon-destructiveOpen world—
box_stopStop a Box and snapshot its disk. force=true may irreversibly lose changes since the last successful snapshot and should only follow a refused normal stop.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "force": {
      "default": false,
      "type": "boolean"
    }
  },
  "required": [
    "box_id"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": true,
  "openWorldHint": true
}
—WritesDestructiveOpen world—
box_write_fileCreate or replace a file relative to the Box work directory. Existing content at the path is overwritten.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "path": {
      "type": "string",
      "minLength": 1,
      "maxLength": 4096
    },
    "content": {
      "type": "string",
      "maxLength": 1000000
    },
    "encoding": {
      "default": "utf8",
      "type": "string",
      "enum": [
        "utf8",
        "base64"
      ]
    }
  },
  "required": [
    "box_id",
    "path",
    "content"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": true,
  "openWorldHint": true
}
—WritesDestructiveOpen world—

Resources 0

  • None observed.

Resource templates 0

  • None observed.

Prompts 0

  • None observed.

Remote endpoints

EndpointTransportAuthenticationHealthObserved
No verified remote endpoint is linked.

chatgpt-box-mcp Server questions

How do I install chatgpt-box-mcp Server?

No verified package installation command is available in the retained catalog evidence.

What tools does chatgpt-box-mcp Server provide?

chatgpt-box-mcp Server exposed 15 tools during independent protocol observation, including box_create, box_execute_command, box_fork, box_get, box_job_cancel, box_job_logs, box_job_start, box_job_status, and others.

Is chatgpt-box-mcp Server secure?

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

Company and product intelligence

These internal links are derived from strong identity fields such as the implementation name, package, repository, vendor, and listing name—not generic description prose.

Associated company landscape

OpenAI intelligence →

Association is based on retained identity fields; it does not by itself prove first-party publication.

ChatGPT 90 matches

Explore related MCP server guides

Curated product and capability guides containing this catalog record.

Official vs Community MCP Servers

Let’s talk about MCP security.

Share your details and our security team will contact you.