My Apps

    Domain Whitelisting

    Domain Whitelisting

    To use the Box APIs it is important that your application and users have access to the following domains, where needed.

    File Preview

    To enable file preview, your application might need to load javascript file from the Box content delivery network (CDN). This file is loaded from the following domains.

    • boxcdn.net
    • boxcloud.com
    • dl2.boxcloud.com to dl20.boxcloud.com

    File downloads

    The following API domains are used to download files via the Box API.

    • api.box.com to initially request a file to download
    • dl.boxcloud.com to actually download files for authenticated users
    • public.boxcloud.com to actually download files for unauthenticated users

    Ensuring access to these domains is only a first step to downloading a file. To download a file the users need to have proper access permissions and need to be fully authenticated where needed.

    File uploads

    The following API domains are used to upload files via the Box API.

    • api.box.com to start a file upload
    • upload.app.box.com and upload.box.com to upload the file to Box