NAVER MYBOX

io.github.java-jaydevPublished by GitHub account java-jaydevv0.1.0Updated Oct 25, 2026

List, search, download and upload files in a NAVER MYBOX (네이버 마이박스) cloud drive.

VerifiedSTDIODesktop onlyCloud & InfrastructureFiles & Storage

Overview

AI-generated overview

An unofficial MCP server that lets an assistant list, search, download and upload files in a NAVER MYBOX cloud drive.

What you can do
Inspect the drive: show quota, used bytes, per-category file counts and maximum upload size, and read the attributes of one file or folder. Browse and search: list entries in a folder or the drive root, and search by keyword, category and/or date range in KST. Move files: download one file into a local directory and upload one local file. Organize: create a folder. Deleting, emptying the trash and trash auto-delete settings are deliberately not exposed.
When to use it
Useful when you keep files in NAVER MYBOX and want an agent to find and fetch them, for example pulling photos from a date range into a working folder, or pushing a local file up to the drive. Not suitable if you need delete or trash management, or access to encrypted or shared folders.
Requirements
Python 3.10+ and the naver-mybox-mcp package installed locally, run over stdio. A MYBOX personal access token created in the MYBOX web UI, supplied as the MYBOX_PAT environment variable or on one line in ~/.mybox/token. Network access to the MYBOX open API. A MYBOX account; free plans can use the API.
Before you install
The token grants access to the whole drive, so treat it as a password and never commit it; tokens are shown once, last 30 to 180 days, and up to five per account. Uploads and folder creation write to the drive. Download limits are daily and the client cannot pace around them, and MYBOX may block bursts without notice. Encrypted and shared folders are not visible, so an empty listing does not mean an empty drive.

Installation

In SourceWeft

  1. Open NAVER MYBOX in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

naver-mybox-mcp

An MCP server for NAVER MYBOX (네이버 마이박스) — list, search, download and upload files in your MYBOX cloud drive from any MCP client (Claude Code, Claude Desktop, and others).

MYBOX opened a public API in August 2026 (developers.mybox.naver.com). This wraps it as tools. Unofficial, not affiliated with NAVER.

Why

Phone photos land in MYBOX automatically. Getting them onto a machine meant clicking through the web UI. With this, an agent can fetch "every photo taken on 10–11 September" into a working folder in one step.

Install

Requires Python 3.10+.

bash
pip install naver-mybox-mcp

Get a token

Authentication is a personal access token, not OAuth.

  1. Sign in at MYBOX on the web.
  2. Settings → account and personal access token management → create token.
  3. Copy it immediately — it is shown once.

Up to five tokens per account; each lasts 30, 60, 90 or 180 days, and MYBOX emails you 7 days and 1 day before expiry. Anyone holding the token can reach the whole drive, so treat it as a password and never commit it.

Provide it as the MYBOX_PAT environment variable, or put it on one line in ~/.mybox/token.

Configure your MCP client

json
{  "mcpServers": {    "mybox": {      "command": "naver-mybox-mcp",      "env": { "MYBOX_PAT": "mbx_pat_..." }    }  }}

In Claude Code: claude mcp add mybox --env MYBOX_PAT=mbx_pat_... -- naver-mybox-mcp

Tools

ToolWhat it does
mybox_storageQuota, used bytes, per-category file counts, max upload size
mybox_listEntries directly inside a folder, or the drive root
mybox_searchSearch by keyword, category and/or date range (KST)
mybox_file_infoAttributes of one file or folder
mybox_downloadDownload one file into a local directory
mybox_uploadUpload one local file
mybox_create_folderCreate a folder

Deliberately missing: delete

The API can delete files, empty the trash and set its auto-delete period. Those tools are not exposed here. An agent that can read and write files is useful; one that can destroy them is a different risk, and the web UI is right there. Open an issue if you need them behind a flag.

Quotas

The docs publish per-plan limits and warn that bursts or abuse may be blocked without prior notice, so the client paces itself below the lowest documented per-minute limits (9/min for search, 55/min otherwise). Free accounts can use the API; the plan only changes the limits.

PlanDownloadsSearchOther APIs
30GB500/day10/min60/min each
80GB1,000/day10/min60/min each
180GB–330GB1,000/day30/min240/min each
2TB2,000/day30/min240/min each

Download limits are daily and the client cannot pace around them. Search first, count the results, and fetch in batches if the set is large.

Notes on the API

  • Base URL https://open-api.mybox.naver.com/v1
  • Upload is two steps: POST /drive/files returns an uploadUrl (48h, single use); the bytes go there as multipart field Filedata.
  • Download is two steps: GET /drive/files/{id}/download returns a downloadUrl (10 minutes, single use).
  • Paging: responseMetaData.nextCursor goes back as cursor.
  • Search needs at least one of keyword, category or a date bound.
  • Encrypted folders and folders shared with you are not exposed by the API — they exist only in the web and mobile apps. An empty listing does not mean an empty drive.

Related projects

The MYBOX API opened on 2026-08-10 and tooling appeared quickly. NAVER publishes no MCP server or SDK of its own, and its launch post does not mention MCP. Community work that exists:

ProjectWhat it is
minking/mybox-mcpMCP server in TypeScript covering all 20 endpoints, including delete and trash
oliverne/myboxctlCLI for file operations (@oliverne/myboxctl on npm)
overworks/php-myboxPHP SDK, plus a Go CLI and a Flysystem adapter by the same author
chiwanpark/mybox-s3S3-compatible API in front of MYBOX

This one is Python, exposes a deliberately smaller surface (no delete), paces itself under the documented rate limits, and ships tests that need neither a token nor the network. Pick whichever fits; if you want every endpoint including destructive ones, the TypeScript server above has them.

Development

bash
pip install -e ".[dev]"pytest

Tests run against httpx.MockTransport; no token or network needed.

Releases are published from GitHub Actions on a GitHub release: PyPI via Trusted Publishing (no stored token) and the MCP registry via GitHub OIDC.

License

MIT

Source: README.md at commit 6ea4302

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts