Skip to content
Merulan

Box setup

What an operator supplies to connect the Box Source, and the verification the provider requires.

Connecting Box opens a Nango Connect session in the operator browser. Nango holds the credential, and Merulan holds a handle to it. An operator who holds the material below connects in one pass.

Prerequisites

Box refuses the connection until every item holds.

  • A Box account, and an administrator who may approve a connected application.
  • A Box folder an operator may nominate as the root a Pipeline reads.

Credentials

Box stores the credential under the brokered custody the registry declares, so Merulan never shows the secret again once the connection is saved.

  • No secret is typed into Merulan. The Connect session returns a connection handle, and Merulan stores the handle rather than the token.

Scopes

Box carries no scope list in Merulan: the broker application in Nango Cloud holds the requested scopes for this Source.

Merulan declares no Box scope for this Source, so a scope change is made in the broker and takes effect on the next grant.

Verification

Broker-registered application governs the Box connection. Box admits the broker-registered application, and a Box administrator approves it once for the account.

  • Connect and map a Source runs the connect ceremony and binds collections once the credential is in hand.
  • Integrations lists every Source that carries a setup page, with its ceremony and verification posture.