Box Dev Console → your app → Generate Developer Token. Valid ~60 min; re-paste when it expires. The signer must have Box Sign enabled.