Dash MCP Server
Search company content and retrieve file metadata directly via Dropbox Dash.
Data last scanned today · Reviewed today
Overview
The Dash MCP Server enables AI assistants to query company-wide content indexed by Dropbox Dash. It provides tools for searching across diverse platforms—including GitHub, Slack, Jira, and Google Drive—using structured filters like file type, connector source, and modification date ranges. By returning detailed metadata, it helps users locate specific documentation, media, or project files within their organizational stack. Authentication is managed through an OAuth flow, with credentials stored securely in the system keyring. Users start by generating an authorization URL, completing the browser-based login, and submitting the one-time code to finalize the connection. Once authorized, the server supports granular lookups for file details using unique identifiers.
Our verdict
With a security score of 63/100, this server holds a medium risk rating. While it benefits from being maintained by the official Dropbox organization and utilizes secure system keyring storage for OAuth tokens, it lacks a restricted read-only mode for its operations. Given these factors, it is suitable for users within an enterprise environment where Dropbox Dash is already the primary indexing tool, though administrators should be mindful of the current lack of an editorial security review.
- Maintained directly by the official Dropbox organization.
- Zero direct dependencies reduce the supply-chain surface area.
- Includes OAuth authentication support for secure session handling.
- Uses system keyring for secure local token persistence.
- Lacks a dedicated read-only mode for file access.
- Not yet subjected to an independent editorial security review.
- No publicly defined homepage link in the repository.
Tools
| Tool | Description | Risk |
|---|---|---|
| dash_get_auth_url | Start Dropbox OAuth; returns the authorization URL. | low |
| dash_authenticate | Complete OAuth using the one-time authorization code. | medium |
| dash_company_search | Search company content indexed by Dropbox Dash. | low |
| dash_get_file_details | Fetch detailed metadata (and optional content snippet) for a result UUID. | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›What prerequisites are needed to run the Dropbox Dash MCP server?
You need Python 3.10 or higher, network access to Dropbox APIs, and a Dropbox app created via the developer portal with 'files.metadata.read' and 'files.content.read' permissions enabled.
›How do I authenticate the server?
First call 'dash_get_auth_url' to obtain an authorization URL, then complete the OAuth flow in your browser and pass the resulting code to the 'dash_authenticate' tool.
›Where are my Dropbox access tokens stored?
Tokens are stored securely in your system's keyring, such as the macOS Keychain, Windows Credential Manager, or Linux Secret Service, or alternatively in a local JSON file at ~/.mcp-server-dash/dropbox_token.json.
›How can I filter search results when using the server?
The 'dash_company_search' tool supports filtering by file type, specific connector sources like GitHub or Jira, and a modification date range using ISO 8601 formatted timestamps.
›Can I clear my stored authentication token if it expires?
Yes, you can remove the stored token by running the server command with the '--clear-token' flag.
›What is the maximum number of results the search tool can return?
The 'max_results' argument allows you to request between 1 and 100 items, with a default limit of 20 results per search.
Badge
Maintain this server? Add the live badge to your README.