dropbox-files-core-openapi
Core Dropbox API v2 for listing folders, reading file metadata, creating folders, uploading and downloading files, and deleting files or folders. Dropbox uses OAuth 2.0 Bearer access tokens supplied by the user at connection time; no credential is included. Official documentation: https://www.dropbox.com/developers/documentation/http/documentation
Connect this API to an AI agent Browse all specs
What you can do with dropbox-files-core-openapi via MCP
Every endpoint below becomes a governed tool your AI agent (Claude, ChatGPT, or a customer-facing VX agent) can call — with scoped permissions, sandbox testing, and audit logs.
| Method | Path | Operation | Description |
|---|---|---|---|
| POST | /files/list_folder |
listFolder | List files and folders |
| POST | /files/list_folder/continue |
continueListFolder | Continue listing a folder |
| POST | /files/get_metadata |
getFileMetadata | Get file or folder metadata |
| POST | /files/create_folder_v2 |
createFolder | Create a Dropbox folder |
| POST | /files/delete_v2 |
deleteFileOrFolder | Delete a file or folder |
| POST | /files/upload |
uploadFile | Upload a file |
| POST | /files/download |
downloadFile | Download a file |
Authentication
bearerAuth
Bearer token — sent as Authorization: Bearer <token>
Usage guide
Getting credentials
- Create or log in to an account at Dropbox.
- Create a Dropbox app in the Dropbox App Console.
- Configure only the file and folder scopes required by the integration and complete OAuth 2.0 authorization.
- When VX Agent asks for authentication, provide the OAuth access token using Bearer authentication.
Keep the access token private. Do not paste it into the Swagger file, marketplace description, prompts, or chat messages.
How to use this API
Use this API to manage authorized Dropbox files and folders.
A typical workflow is:
- Use
POST /files/list_folderwith an empty path to inspect the Dropbox root, or provide a folder path. - If the response contains
has_more: true, usePOST /files/list_folder/continuewith the returned cursor. - Use
POST /files/get_metadatato inspect a file or folder. - Use
POST /files/create_folder_v2to create a folder after confirming the destination path. - Use
POST /files/uploadto upload binary content. This operation uses the Dropbox content domain and requires a JSON-encodedDropbox-API-Argheader. - Use
POST /files/downloadto download a file. This operation also uses the Dropbox content domain and requires aDropbox-API-Argheader. - Use
POST /files/delete_v2only after the user explicitly confirms the exact file or folder path.
Dropbox paths are case-insensitive and the empty string represents the root folder. Start with small files and narrow folder paths before attempting larger transfers.
Safety and usage notes
Only access files and folders that the connected user has authorized. Uploading, overwriting, moving, or deleting files changes external data, so require confirmation before each consequential operation. Verify the destination path, overwrite behavior, file name, and file content before uploading.
Do not expose private file content or OAuth tokens. Do not delete a folder without checking its contents and obtaining explicit confirmation. Respect Dropbox sharing permissions, privacy requirements, and the user's retention policies.
Official documentation: Dropbox HTTP API v2.
How to use this spec
- Create a free VX Agents account (sandbox tools included).
- Open the marketplace and connect “dropbox-files-core-openapi” to an agent.
- Expose it as an MCP server for Claude/ChatGPT, or chat with it directly.