← chatgpt-box-mcp

chatgpt-box-mcp 60f9b70064e4c539378dea05479d6b4d2f6932e5

source_git · wu6330077-sys/chatgpt-box-mcp · current release

15
Tools
0
Resources
0
Templates
0
Prompts

Observation

Observed 2026-08-25T12:08:53.929Z using mcpSecurity-inventory. Status: succeeded. Negotiated protocol: 2025-06-18.

Server capabilities
{
  "tools": {
    "listChanged": true
  }
}

Tools 15

ToolCategoryAnnotationsRisk
box_createProvision a paid Box Linux environment owned by the configured Box account. This changes external state and starts billable runtime.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "size": {
      "default": "default",
      "type": "string",
      "enum": [
        "small",
        "default",
        "large"
      ]
    },
    "ttl_seconds": {
      "default": 3600,
      "description": "Automatic archival delay. null disables auto-stop.",
      "anyOf": [
        {
          "type": "integer",
          "minimum": 1,
          "maximum": 2592000
        },
        {
          "type": "null"
        }
      ]
    },
    "no_env": {
      "default": false,
      "description": "Create an isolated box without account secrets or credentials.",
      "type": "boolean"
    }
  }
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": false,
  "openWorldHint": true
}
—Writes · Non-destructive—
box_execute_commandRun a shell command inside a Box and wait up to 60 seconds. The command may modify files, install software, access configured credentials, or affect external systems. Use box_job_start for longer work.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "command": {
      "type": "string",
      "minLength": 1,
      "maxLength": 100000
    },
    "cwd": {
      "type": "string",
      "minLength": 1,
      "maxLength": 4096
    },
    "timeout_seconds": {
      "default": 30,
      "type": "integer",
      "minimum": 1,
      "maximum": 60
    }
  },
  "required": [
    "box_id",
    "command"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": true,
  "openWorldHint": true
}
—Writes · Destructive—
box_forkCreate a new paid Box from an existing snapshot. The source Box is not modified.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "size": {
      "description": "Omit to inherit the source size.",
      "type": "string",
      "enum": [
        "small",
        "default",
        "large"
      ]
    },
    "no_env": {
      "type": "boolean"
    }
  },
  "required": [
    "box_id"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": false,
  "openWorldHint": true
}
—Writes · Non-destructive—
box_getInspect one Box environment after create, stop, resume, or fork operations.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    }
  },
  "required": [
    "box_id"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "openWorldHint": true
}
—Read only · Non-destructive—
box_job_cancelSend SIGTERM to a running background job and its process group. Partial file or external changes are not rolled back.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "job_id": {
      "type": "string",
      "pattern": "^job_[a-f0-9]{32}$"
    }
  },
  "required": [
    "box_id",
    "job_id"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": true,
  "openWorldHint": true
}
—Writes · Destructive—
box_job_logsRead the tails of stdout and stderr for a background job.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "job_id": {
      "type": "string",
      "pattern": "^job_[a-f0-9]{32}$"
    },
    "max_characters": {
      "default": 20000,
      "type": "integer",
      "minimum": 1,
      "maximum": 100000
    }
  },
  "required": [
    "box_id",
    "job_id"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "openWorldHint": true
}
—Read only · Non-destructive—
box_job_startStart a long-running shell job in a Box. The job runs independently after this tool returns and may modify the machine or external systems.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "command": {
      "type": "string",
      "minLength": 1,
      "maxLength": 100000
    },
    "cwd": {
      "type": "string",
      "minLength": 1,
      "maxLength": 4096
    }
  },
  "required": [
    "box_id",
    "command"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": true,
  "openWorldHint": true
}
—Writes · Destructive—
box_job_statusCheck whether a background job is running, succeeded, failed, or was cancelled.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "job_id": {
      "type": "string",
      "pattern": "^job_[a-f0-9]{32}$"
    }
  },
  "required": [
    "box_id",
    "job_id"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "openWorldHint": true
}
—Read only · Non-destructive—
box_listFind the user's Box environments and inspect their current lifecycle states.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "limit": {
      "default": 50,
      "type": "integer",
      "minimum": 1,
      "maximum": 200
    },
    "cursor": {
      "type": "string"
    },
    "sort": {
      "default": "desc",
      "type": "string",
      "enum": [
        "asc",
        "desc"
      ]
    },
    "state": {
      "description": "Optional comma-separated states such as ready,idle,running.",
      "type": "string"
    }
  }
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "openWorldHint": true
}
—Read only · Non-destructive—
box_list_eventsInspect recent lifecycle and work events emitted by a Box.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "limit": {
      "default": 50,
      "type": "integer",
      "minimum": 1,
      "maximum": 200
    },
    "cursor": {
      "type": "string"
    },
    "sort": {
      "default": "desc",
      "type": "string",
      "enum": [
        "asc",
        "desc"
      ]
    },
    "type": {
      "description": "Optional comma-separated event types.",
      "type": "string"
    }
  },
  "required": [
    "box_id"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "openWorldHint": true
}
—Read only · Non-destructive—
box_open_desktopCreate a secret-bearing desktop streaming URL for the user to inspect the Box. Do not log, persist, or share the returned URL.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "public_access": {
      "default": false,
      "description": "When true, returns a noVNC URL that does not require an access token.",
      "type": "boolean"
    }
  },
  "required": [
    "box_id"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": false,
  "openWorldHint": true
}
—Writes · Non-destructive—
box_read_fileRead a file relative to the Box work directory. Results are capped for model safety.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "path": {
      "type": "string",
      "minLength": 1,
      "maxLength": 4096
    },
    "encoding": {
      "default": "utf8",
      "type": "string",
      "enum": [
        "utf8",
        "base64"
      ]
    },
    "max_characters": {
      "default": 50000,
      "type": "integer",
      "minimum": 1,
      "maximum": 100000
    }
  },
  "required": [
    "box_id",
    "path"
  ]
}
Annotations
{
  "readOnlyHint": true,
  "destructiveHint": false,
  "openWorldHint": true
}
—Read only · Non-destructive—
box_resumeResume an archived Box, restarting billable runtime on a fresh machine.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "size": {
      "description": "Omit to preserve the current machine size.",
      "type": "string",
      "enum": [
        "small",
        "default",
        "large"
      ]
    },
    "no_env": {
      "type": "boolean"
    }
  },
  "required": [
    "box_id"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": false,
  "openWorldHint": true
}
—Writes · Non-destructive—
box_stopStop a Box and snapshot its disk. force=true may irreversibly lose changes since the last successful snapshot and should only follow a refused normal stop.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "force": {
      "default": false,
      "type": "boolean"
    }
  },
  "required": [
    "box_id"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": true,
  "openWorldHint": true
}
—Writes · Destructive—
box_write_fileCreate or replace a file relative to the Box work directory. Existing content at the path is overwritten.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "box_id": {
      "type": "string",
      "pattern": "^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$"
    },
    "path": {
      "type": "string",
      "minLength": 1,
      "maxLength": 4096
    },
    "content": {
      "type": "string",
      "maxLength": 1000000
    },
    "encoding": {
      "default": "utf8",
      "type": "string",
      "enum": [
        "utf8",
        "base64"
      ]
    }
  },
  "required": [
    "box_id",
    "path",
    "content"
  ]
}
Annotations
{
  "readOnlyHint": false,
  "destructiveHint": true,
  "openWorldHint": true
}
—Writes · Destructive—

Resources 0

Resource templates 0

Prompts 0

Let’s talk about MCP security.

Share your details and our security team will contact you.