> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corsair.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Credentials

> Step-by-step instructions for obtaining Box OAuth 2.0 credentials.

This guide walks you through obtaining OAuth 2.0 credentials for the Box plugin.

## Authentication Method

* **[`oauth_2`](/concepts/oauth)** - OAuth 2.0 user authentication

## OAuth 2.0 Setup

### Step 1: Create a Box App

1. Go to [Box Developer Console](https://app.box.com/developers/console)
2. Click **Create New App**
3. Select **Custom App**
4. Choose **Standard OAuth 2.0** as the authentication method
5. Enter your app name and click **Create App**

### Step 2: Configure OAuth Settings

1. In your app settings, go to the **Configuration** tab
2. Under **OAuth 2.0 Redirect URI**, add your callback URL
   * For CLI flow: `http://localhost:<port>`
3. Under **Application Scopes**, select the required permissions:
   * `Read all files and folders stored in Box`
   * `Write all files and folders stored in Box`
4. Click **Save Changes**

### Step 3: Get Client Credentials

1. In the **Configuration** tab, copy the **Client ID** and **Client Secret**
2. Store these securely

**Storing Credentials:**

```bash theme={null}
pnpm corsair setup --plugin=box client_id=your-client-id client_secret=your-client-secret
pnpm corsair auth --plugin=box
```

The CLI will print an authorization URL — open it in a browser. Once you approve, tokens are saved automatically.

## Required Credentials Summary

| Credential    | Required For | Where to Find                         |
| ------------- | ------------ | ------------------------------------- |
| Client ID     | OAuth 2.0    | Developer Console → App Configuration |
| Client Secret | OAuth 2.0    | Developer Console → App Configuration |

For general information about how Corsair handles authentication, see [Authentication](/concepts/auth).