Box by Ascii

Use Box's API or CLI for machine management and SSH or the command API for work inside a VM. Read operations and observations before direct API calls, credential changes, or recovery work.

Start with the actual account and machine

1. Read the current project's instructions and operational notes. Identify the intended account, organization, Box, and repository; retain existing mappings instead of provisioning duplicates.
2. Load BOX_API_KEY from the environment or the project's documented, gitignored credentials file. Read its location from the project's setup instructions; do not assume a universal path. Do not search unrelated credential stores or print their contents. Use the secrets skill if a new key is needed.
3. For operations, check authentication and state with GET /me, /limits, and /boxes. If the CLI is available, inspect box status, box list, and the relevant --help instead. Filter output to the fields needed for the task.
4. Check which tools are already installed. An API workflow does not require the Box CLI or an SDK. Read the official install instructions if installation is needed; do not execute a remote installer blindly.

Use the DeepAPI skill to read current Box docs when behavior or request fields are uncertain. Prices, limits, model catalogs, and install commands must be checked live. A documentation lookup is not evidence that an authenticated operation succeeded.

API access