Dropbox logo

Dropbox

Generally Available

After OAuth2 authorization an agent can search files, read content, create files and folders, generate sharing links, and copy, move or delete items.

  • File Storage
  • Document Search
  • Collaboration
Authentication
OAuth 2.0
Hosting
Vendor-hosted endpoint
Required scopes
9
Data actions
Read and write

How it works

Every agent request passes through Ferentin policy before it reaches Dropbox.

  1. AI agentAsks for something
  2. Ferentin policies
    • OAuth 2.0 consent
    • Granular scope selection
    • Permission aware access
    • Audit logging
  3. Dropbox MCP serverAuthorized connection
  4. Governed resultMasked, logged, returned

What you can do with Dropbox

  • File search
  • File read
  • File create
  • Folder management
  • Link generation
  • Metadata retrieval
  • Copy move delete

Permissions requested

The OAuth 2.0 scopes Dropbox asks you to approve when you connect.

ScopeAccess
account_info.readRead
file_requests.readRead
file_requests.writeElevated
files.content.readRead
files.content.writeElevated
files.metadata.readRead
files.metadata.writeElevated
sharing.readRead
sharing.writeElevated

Before you connect

  • A Dropbox account is required. The connector operates inside the signed-in user's existing file permissions — it cannot reach content that user cannot already open.
  • Dynamic Client Registration is open at https://www.dropbox.com/oauth2/register (verified 2026-09-20), so credential inheritance is ALLOW_INHERIT.
  • Note the split hosts: authorize on www.dropbox.com, exchange tokens on api.dropboxapi.com. Both are covered by the explicit URLs in this card.
  • Dropbox also serves an equivalent resource at https://mcp.dropbox.com/claude_app_mcp with a slightly narrower scope set (no files.metadata.write). This card uses the general /mcp resource; override the endpoint if you want the narrower one.
2 more technical notes
  • sharing.write can publish content outside the organization via shared links — leave it off unless a workflow genuinely needs it.
  • This is a WRITE-CAPABLE server: files.content.write, files.metadata.write and the delete paths all change customer data. Consider an approval gate on the destructive tools.

About Dropbox

Dropbox is a cloud file storage and collaboration service for individuals and teams.

Frequently asked about Dropbox

What can AI agents do with Dropbox through Ferentin?
Through Ferentin, agents can use Dropbox for file search, file read, file create, folder management, link generation, metadata retrieval and copy move delete. Every call is checked against your Ferentin policies first.
How is Dropbox access secured?
Requests through the Dropbox integration are covered by OAuth 2.0 consent, granular scope selection, permission aware access and audit logging. These controls are applied by Ferentin, not by Dropbox, so they hold across every connected agent.
What permissions does the Dropbox integration require?
The Dropbox integration requests 9 OAuth 2.0 scopes: account_info.read (read access); file_requests.read (read access); file_requests.write (elevated access); files.content.read (read access); files.content.write (elevated access); files.metadata.read (read access); files.metadata.write (elevated access); sharing.read (read access); sharing.write (elevated access)
How do I connect Dropbox to Ferentin?
Open the Ferentin admin console, add Dropbox as a new connection and authenticate with OAuth 2.0. You then choose which permissions and which tools your agents may use, and the connection goes live for everyone covered by your policies.
Is the Dropbox integration generally available?
Yes. The Dropbox integration is generally available on Ferentin, including the free tier.