Dropbox Api

Dropbox provides a clean REST API for cloud file storage — straightforward file upload/download, folder management, and sharing link creation. For agents: upload generated documents, download files for processing, create shared links for temporary file access, and manage folder structures. The API uses a content endpoint for file upload (separate from the API endpoint — a common first-time gotcha). Dropbox Business API extends to team member management. OAuth2 with long-lived refresh tokens enables persistent agent access. Confidence is docs-derived.

REST API at api.dropboxapi.com/2. File upload: POST https://content.dropboxapi.com/2/files/upload (body = raw file bytes; Dropbox-API-Arg: {path: "/folder/file.txt", mode: "add"}). File download: POST /files/download (Dropbox-API-Arg: {path}). List folder: POST /files/list_folder ({path: ""}). Create folder: POST /files/create_folder_v2 ({path: "/new-folder"}). Delete: POST /files/delete_v2 ({path}). Copy: POST /files/copy_v2 ({from_path, to_path}). Create shared link: POST /sharing/create_shared_link_with_settings ({path, settings: {requested_visibility: "public"}}). Search: POST /files/search_v2 ({query, options: {path: "/"}}). Team API: POST /team/members/list for Business accounts.

OAuth2: Authorization: Bearer {access_token}. App key + App secret from Dropbox App Console. OAuth2 flows: authorization_code (user consent) or long-lived refresh token for offline access. Scopes: files.content.read, files.content.write, sharing.write, etc. HTTPS enforced. Dropbox-API-Arg header for content endpoints (JSON-encoded params). App permissions: Dropbox App Console → Permissions tab — grant required scopes. Refresh token: exchange with POST /oauth2/token (grant_type=refresh_token) — valid indefinitely until revoked.

Standard HTTP status codes with JSON error bodies ({error_summary, error: {.tag, ...}}). Upload conflict: mode "add" auto-renames on conflict; mode "overwrite" replaces. 409 for path conflict on create folder. File size limits: standard upload up to 150MB; larger files use sessions upload (upload_session/start → append → finish). Content endpoint URL: content.dropboxapi.com vs. api.dropboxapi.com — mixing them causes 400. Dropbox uptime at status.dropbox.com. Rate limiting: 1000 req/min for most API calls. OAuth token: does not expire if refresh token is used correctly.

dropbox.com/developers covers REST API reference (v2), OAuth2 guide, SDK documentation, and App Console setup. Getting started: create Dropbox account, create app in App Console, get access token (short-lived for testing), first file upload in under 10 minutes. Official SDKs: dropbox-sdk-python, dropbox-sdk-java, Dropbox.NET. Postman collection available. Community via Dropbox Developer Community and Stack Overflow. Clean API documentation with good code examples.