Dropbox

This connector wraps the Dropbox API v2 (api.dropboxapi.com). You authorize it once, in AnythingMCP; access tokens are then renewed automatically.

Setup:

1. Register at https://www.dropbox.com/developers/apps → Create app → 'Scoped access' → 'App folder' or 'Full Dropbox' depending on need.
2. In the app's Permissions tab, tick account_info.read, files.metadata.read, files.content.write and sharing.write, and submit.
3. In the Settings tab, add the redirect URI https://cloud.anythingmcp.com/api/mcp-oauth/callback on AnythingMCP Cloud, or <your AnythingMCP server URL>/api/mcp-oauth/callback when you host AnythingMCP yourself.
4. Enter the app's App key as DROPBOX_CLIENT_ID and its App secret as DROPBOX_CLIENT_SECRET, leave DROPBOX_REFRESH_TOKEN empty, and install.
5. Open the connector and click Authorize with Provider. Sign in to Dropbox, allow access, and you land back on the connector page with the tools ready.

Scopes: account_info.read files.metadata.read files.content.write sharing.write, which covers every tool here. The authorization URL carries token_access_type=offline, which is what makes Dropbox issue a refresh token.

Already have a refresh token? You can paste it into DROPBOX_REFRESH_TOKEN instead of step 5, if you obtained it yourself for the same app with token_access_type=offline. Connectors set up that way keep working as they are.

Authentication: OAuth2 refresh handled by engine. Sends Authorization: Bearer ACCESS_TOKEN.

Two API hosts: most endpoints live at api.dropboxapi.com/2. Content endpoints (upload/download) use content.dropboxapi.com/2 — out of scope here for upload (multipart streaming). Use the link-based pattern: have content already accessible via URL → use dropbox_save_url to ingest, or use external upload then create_shared_link to share.

Path format: paths use /Folder/Subfolder/File.txt (case-insensitive, no leading drive). Root is empty string or /. For App-folder apps, paths are relative to the app folder.

Pagination: most list endpoints use a cursor returned in the response. Pass back as cursor to continue.

Rate limits: per-endpoint quotas, generally 100-1000 req/min. 429 with Retry-After.

Out of scope here: direct file upload (multipart, separate API), Paper docs, team admin, the legacy v1 API.