completed API for server-side box access