# Configure the Dropbox MCP Server

Connect Dropbox's official hosted MCP server to a Dtwo gateway via OAuth.

## Overview

Dropbox operates an official hosted MCP server at `mcp.dropbox.com`, exposing tools for browsing folders, reading file content and metadata, searching, and creating shared links and file requests. Access is authorized through OAuth via a Dropbox app you register yourself.

## 1. Configure Dropbox

1. Go to the <a href="https://www.dropbox.com/developers/apps" target="_blank" rel="noopener noreferrer">Dropbox App Console</a> and create a new app. Choose **Scoped access**, then select **Full Dropbox** or **App folder** depending on whether the server needs access to the entire account or team space, or just a single sandboxed folder.
2. On the app's **Permissions** tab, enable the scopes your agents need — for example `files.metadata.read`, `files.content.read`, and `sharing.read` for a read-oriented deployment, plus `files.content.write` and `sharing.write` if you also want write and share-link tools.
3. On the **Settings** tab, add your gateway's OAuth redirect URI — found in the Overview tab for your gateway in the Dtwo UI — and copy the generated **App key** and **App secret**.

## 2. Add the MCP server to your gateway config

Go to your gateway in the Dtwo UI and open **Configuration → Advanced**. In the `mcp_servers` section add the following entry:

```yaml
  - name: dropbox
    description: "Dropbox's official hosted MCP server for files, search, and sharing."
    url: https://mcp.dropbox.com/mcp
    transport_type: streamablehttp
    authentication:
      type: oauth
      grant_type: authorization_code
      scopes:
        - files.metadata.read
        - files.content.read
        - sharing.read
      client_id: "<CLIENT_ID>"
      client_secret: "<CLIENT_SECRET>"
      authorization_url: "https://www.dropbox.com/oauth2/authorize"
      token_url: "https://api.dropboxapi.com/oauth2/token"
      redirect_uri: "<CALLBACK_URL>"
```

Replace the placeholder values:

- `<CLIENT_ID>` and `<CLIENT_SECRET>` — the App key and App secret from the app you created in step 1.
- `<CALLBACK_URL>` — the same OAuth redirect URI you set in step 1, found in the Overview tab for your gateway in the Dtwo UI.

Make sure the `scopes` you add here match the ones you enabled in step 1.2 exactly — a mismatch will cause the OAuth authorization to fail.

## 3. Deploy and verify

Save the configuration and deploy the gateway.

Then, in your AI client, ask it to authorize Dropbox via the gateway. This opens the Dropbox login screen — sign in as the user whose permissions the agent should inherit, and approve the consent prompt. Once authorized, confirm the server's tools appear and run a quick call to make sure the connection works.

If the tools don't appear after you authorize, refresh the tool list in your AI client — some clients don't pick it up automatically.

---

Having trouble? Email [support@dtwo.ai](mailto:support@dtwo.ai).