The Box API allows for downloading files to the application’s server, or directly
by the end user in a browser.
When not to download
Downloading a file is not always the desired solution, especially if the file is
only being downloaded for the user to preview, comment, or annotate. In those
cases we recommend using one of the ways to embed the Box experience straight
into your application.
Learn more about embedding Box
Access Errors
It is important to realize that the application needs to have access to the
file that is to be downloaded. When the application is authenticated through
JWT, the user is authenticated as a Service Account. This service
account does not have access to files besides their own.
If this user does not have access to the file the application will receive a
404 Not Found error.
Learn more about different User Types
Last modified on June 19, 2026
