Contact sales
Try Box
Contact sales
Try Box
Box Box Console

Move the same box into production.

Review the installed package set, prepare the operating boundary, deploy your hosts, and move compatible versions forward without rebuilding the platform.

Deploy
$ box deploy --register-domains
console.yourbank.com   certificate issued
api.yourbank.com       certificate issued
*.shops.yourbank.com   wildcard issued
✓ live

Know what is installed

A deployment is the package set installed into it. Entitlement is resolved at install, not checked inside every request.

Installed packages
box packages list --installed

catalogue       2026.9.1   foundation
orders          2026.9.1   foundation
payments        2026.9.1   foundation
websites        2026.9.0   basic
30 installed · tier basic

Register the production hosts

Deploy
box deploy --register-domains

The command registers the console, API, and merchant wildcard under domains your institution controls. Certificates follow registration.

Expected output
console.yourbank.com      certificate issued
api.yourbank.com          certificate issued
*.shops.yourbank.com      wildcard, certificate issued
✓ live                    engine 4000 · console 3010

Give the platform team a short boundary

Database

Use the database and region selected by the institution.

Identity

Bind institution authentication and role controls.

Providers

Keep credentials in the deployment environment.

Egress

Allow licensing, package pulls, and the public render only.

Outbound destinations
licence.boxspace.io   443   activation and domains
registry.boxspace.io  443   install and upgrade
render.boxspace.io    443   public website render

Review every upgrade before applying it

Dry run
box upgrade --to 2026.09 --dry-run

4 packages move · 3 migrations
0 capabilities removed
estimated serving impact: none

Tier nesting is asserted in CI. The dry run shows package and migration movement before the deployment changes.

Production checklist

  • Package manifest reviewed and pinned
  • Database, backups, and region approved
  • Identity and provider adapters bound
  • Hosts, wildcard, and certificates verified
  • Egress destinations approved
  • Dry-run and rollback procedure recorded
Read deployment docs Review release notes