How to Use the BoxLock MCP in Mastra AI

Q: How do I add the BoxLock MCP Server to a Mastra AI agent?

Instantiate the client using @mastra/mcp with your Vinkius endpoint URL. Spread the tools from listTools() into your Mastra agent configuration to give it physical lock access.

Q: Can Mastra AI automatically retry a failed BoxLock open command over MCP?

Yes, you can build a workflow that monitors listactivities and calls presstoopen again if a timeout occurs. Mastra's built-in retry engine handles the timing and execution.

Q: Does Mastra AI support human approval before opening a BoxLock?

Yes, you can use requireToolApproval in Mastra to pause the workflow before the agent calls presstoopen. A human administrator must confirm the action before the physical lock opens.

Q: How does the agent retrieve BoxLock location data?

The agent invokes listlocations to gather geographical coordinates for your lockboxes. It uses this data to make routing decisions during automated delivery steps.

Build self-healing workflows for BoxLock smart locks using the Mastra AI agent framework.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect BoxLock MCP to Mastra AI

Create your Vinkius account to connect BoxLock to Mastra AI and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup BoxLock with Mastra AI

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Automate delivery exception handling with Mastra AI

The `list_activities` tool feeds physical lock telemetry directly into Mastra's workflow engine to trigger automatic retries. If a delivery driver fails to open a box, your agent detects the error log and initiates a backup protocol. You write conditional branching logic to handle missed deliveries or expired barcodes without manual intervention. The framework handles the backoff and retry logic while talking directly to the BoxLock API.

Manage smart lock locations via MCP Server

The `list_locations` tool maps your physical lockboxes to specific geographical coordinates within your Mastra agent workflows. This allows your agent to route incoming shipments to the nearest open lockbox automatically. By combining this with `list_locks`, your system keeps an accurate inventory of where your assets are deployed. You don't have to hardcode coordinates because the agent queries them dynamically.

Secure credential rotation and user access

The `list_users` tool lets your workflow engine audit who has access to your physical lockboxes. Your agent can run scheduled security sweeps to flag unauthorized users or outdated lock permissions. If the agent detects an anomaly, it can trigger external alerts or modify access rules. This keeps your physical security posture synchronized with your organizational directory.

Setup guide

Set up BoxLock MCP in Mastra AI

Prerequisites

Node.js 18+ and a TypeScript project
@mastra/mcp + @mastra/core packages
Active Vinkius subscription with a valid endpoint token

1

Install dependencies
Run npm install @mastra/mcp @mastra/core plus your preferred model provider (e.g. @ai-sdk/openai).
2

Configure the MCPClient
Create an MCPClient with your Vinkius endpoint as a URL object. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com.
3

Discover and inject tools
Call mcpClient.listTools() and spread the result into your agent's tools object. All BoxLock tools become native Mastra tools.
4

Run with any model
Swap openai("gpt-4o") for any AI SDK-compatible provider. Call agent.generate() and the agent routes tool calls through MCP automatically.

agent.ts

import { MCPClient } from "@mastra/mcp";
import { Agent } from "@mastra/core/agent";
import { openai } from "@ai-sdk/openai";

const mcpClient = new MCPClient({
  id: "boxlock-mcp-client",
  servers: {
    "boxlock-mcp": {
      url: new URL(
        "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
      ),
    },
  },
});

const agent = new Agent({
  name: "BoxLock Agent",
  model: openai("gpt-4o"),
  instructions: "You have access to BoxLock tools.",
  tools: {
    ...(await mcpClient.listTools()),
  },
});

const result = await agent.generate(
  "List recent BoxLock transactions"
);
console.log(result.text);

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by BoxLock. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect BoxLock now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about BoxLock MCP in Mastra AI

Instantiate the client using `@mastra/mcp` with your Vinkius endpoint URL. Spread the tools from `listTools()` into your Mastra agent configuration to give it physical lock access.

Yes, you can build a workflow that monitors `list_activities` and calls `press_to_open` again if a timeout occurs. Mastra's built-in retry engine handles the timing and execution.

Yes, you can use `requireToolApproval` in Mastra to pause the workflow before the agent calls `press_to_open`. A human administrator must confirm the action before the physical lock opens.

The agent invokes `list_locations` to gather geographical coordinates for your lockboxes. It uses this data to make routing decisions during automated delivery steps.

All communication with your physical locks is routed through ephemeral Vinkius sandboxes. Your user lists and lock activity data are never cached on our servers, ensuring zero-trust execution.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript