Box Developer Documentation
Log in

Join BoxWorks 2024 to discover what's possible with content and AI!

Register now!

Allowing Domain Access

Guides API Calls Allowing Domain Access
Edit this page

Allowing Domain Access

To use the Box APIs it is important that your application and users have access to the following domains, where needed.

File Preview

To enable file preview, your application might need to load javascript file from the Box content delivery network (CDN). This file is loaded from the following domains.

  • api.box.com
  • boxcdn.net
  • boxcloud.com
  • dl2.boxcloud.com to dl20.boxcloud.com

File downloads

The following API domains are used to download files via the Box API.

  • api.box.com to initially request a file to download
  • dl.boxcloud.com to actually download files for authenticated users
  • public.boxcloud.com to actually download files for unauthenticated users

Ensuring access to these domains is only a first step to downloading a file. To download a file the users need to have proper access permissions and need to be fully authenticated where needed.

File uploads

The following API domains are used to upload files via the Box API.

  • api.box.com to start a file upload
  • upload.app.box.com and upload.box.com to upload the file to Box