Dropbox MCP Server
Dropbox files and folders management through the Model Context Protocol.
Data last scanned today · Reviewed yesterday
Overview
Dbx MCP Server allows AI models to perform standard Dropbox file management tasks, such as listing directory contents, uploading, downloading, and moving files. It provides a structured interface for interacting with your Dropbox account by wrapping public API endpoints into MCP-compatible tools.
Our verdict
With a security score of 3/100, this server carries a high-risk profile primarily due to the lack of a standardized authentication method, which grants full configuration-based access. Users should be aware that this is a community-maintained project that has not undergone editorial review and has seen no commits in over a year, suggesting it may lack recent security patches or maintenance.
- Supports common file operations like move and copy
- Uses only eight direct dependencies
- Provides documented setup instructions
- No authentication method implemented for secure access
- Project inactive with last commit 368 days ago
- Full write access granted upon installation
Setup
{
"mcpServers": {
"dbx-mcp-server": {
"args": [
"-y",
"dbx-mcp-server"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| list_files | List files in a directory | low |
| upload_file | Upload a file | medium |
| download_file | Download a file | low |
| safe_delete_item | Safely delete with recycle bin support | high |
| create_folder | Create a new folder | medium |
| copy_item | Copy a file or folder | medium |
| move_item | Move or rename a file/folder | medium |
| get_file_metadata | Get file/folder metadata | low |
| search_file_db | Search files and folders | low |
| get_sharing_link | Create sharing links | medium |
| get_file_content | Get file contents | low |
| get_account_info | Get account information | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›What prerequisites are needed to set up the Dropbox integration?
You must register a Dropbox app in the Dropbox App Console, choose 'Scoped access', add 'http://localhost' as the redirect URI, and note your App key and App secret.
›How does the server handle authentication?
The server uses OAuth 2.0 with PKCE for secure authentication and requires environment variables such as DROPBOX_APP_KEY, DROPBOX_APP_SECRET, and a 32-character TOKEN_ENCRYPTION_KEY.
›Are there specific Dropbox permissions I need to enable for this server?
Yes, you must select specific permissions in the Dropbox App Console depending on the tools you plan to use, such as 'files.metadata.read' for listing files or 'files.content.write' for uploading files.
›Can I configure how often the server refreshes its authentication tokens?
Yes, you can adjust the refresh behavior using optional environment variables like TOKEN_REFRESH_THRESHOLD_MINUTES, MAX_TOKEN_REFRESH_RETRIES, and TOKEN_REFRESH_RETRY_DELAY_MS.
›What is the purpose of the setup script during installation?
The 'npm run setup' script is a required step after installing dependencies and building the project to properly initialize the server environment.
Alternatives
Badge
Maintain this server? Add the live badge to your README.