Configure the Dropbox MCP Server

Overview

Dropbox operates an official hosted MCP server at mcp.dropbox.com, exposing tools for browsing folders, reading file content and metadata, searching, and creating shared links and file requests. Access is authorized through OAuth via a Dropbox app you register yourself.

1. Configure Dropbox

Go to the Dropbox App Console and create a new app. Choose Scoped access, then select Full Dropbox or App folder depending on whether the server needs access to the entire account or team space, or just a single sandboxed folder.
On the app’s Permissions tab, enable the scopes your agents need — for example files.metadata.read, files.content.read, and sharing.read for a read-oriented deployment, plus files.content.write and sharing.write if you also want write and share-link tools.
On the Settings tab, add your gateway’s OAuth redirect URI — found in the Overview tab for your gateway in the Dtwo UI — and copy the generated App key and App secret.

2. Add the MCP server to your gateway config

Go to your gateway in the Dtwo UI and open Configuration → Advanced. In the mcp_servers section add the following entry:

  - name: dropbox
    description: "Dropbox's official hosted MCP server for files, search, and sharing."
    url: https://mcp.dropbox.com/mcp
    transport_type: streamablehttp
    authentication:
      type: oauth
      grant_type: authorization_code
      scopes:
        - files.metadata.read
        - files.content.read
        - sharing.read
      client_id: "<CLIENT_ID>"
      client_secret: "<CLIENT_SECRET>"
      authorization_url: "https://www.dropbox.com/oauth2/authorize"
      token_url: "https://api.dropboxapi.com/oauth2/token"
      redirect_uri: "<CALLBACK_URL>"

Replace the placeholder values:

<CLIENT_ID> and <CLIENT_SECRET> — the App key and App secret from the app you created in step 1.
<CALLBACK_URL> — the same OAuth redirect URI you set in step 1, found in the Overview tab for your gateway in the Dtwo UI.

Make sure the scopes you add here match the ones you enabled in step 1.2 exactly — a mismatch will cause the OAuth authorization to fail.

3. Deploy and verify

Save the configuration and deploy the gateway.

Then, in your AI client, ask it to authorize Dropbox via the gateway. This opens the Dropbox login screen — sign in as the user whose permissions the agent should inherit, and approve the consent prompt. Once authorized, confirm the server’s tools appear and run a quick call to make sure the connection works.

If the tools don’t appear after you authorize, refresh the tool list in your AI client — some clients don’t pick it up automatically.