canonical: https://jentic.com/apis/dropbox.com/dropbox-api-v2

# Dropbox API v2

Jentic publishes the only available OpenAPI specification for Dropbox API v2, keeping it validated and agent-ready. Store, sync, and share files across devices through programmatic access to Dropbox cloud storage. Upload and download files, organize folder hierarchies, control sharing permissions, and track file revisions across 78 endpoints. The API handles both small file operations via RPC-style calls and large file transfers through chunked upload sessions.

## For AI agents

Upload, download, and organize files in Dropbox cloud storage. Share files with configurable permissions and track revision history across folders.

## Scope

Does not handle e-signatures, fax, or document editing - use for cloud file storage, sync, and sharing only.

## Capabilities

- Upload files up to 150 MB in a single call or use chunked upload sessions for larger files
- Search across an entire Dropbox account by filename, content, or file extension with pagination
- Generate temporary download links with configurable expiry for secure file distribution
- Lock and unlock files to prevent concurrent editing conflicts in shared folders
- Track and restore previous file versions with full revision history
- Configure shared link permissions including password protection and expiry dates
- Tag files with custom metadata for organization and filtering

## Use cases

### AI Agent File Storage Integration

AI agents store and retrieve generated artifacts - reports, images, code outputs - directly in Dropbox via Jentic. The agent searches for the upload operation by intent, receives the schema, and executes the upload without browsing documentation. Chunked upload sessions handle files over 150 MB automatically, and the agent can verify completion status through job polling endpoints.

Example prompt: Upload a 5 MB report PDF to /reports/2026/monthly-summary.pdf using the /2/files/upload endpoint and verify the file metadata in the response

### Secure File Sharing with External Partners

Share files and folders with external collaborators through configurable shared links. Set password protection, expiry dates, and access levels (view-only or edit) per link. The API supports creating shared links for individual files or entire folders, listing existing links, and modifying or revoking access at any time.

Example prompt: Create a shared link for /contracts/agreement.pdf with a password and 7-day expiry using /2/sharing/create_shared_link_with_settings

### Document Version Control and Recovery

Track file changes over time with automatic versioning and restore any previous state. The API stores revision history for files, allowing retrieval of metadata for past versions and restoration of overwritten or deleted content. File locking prevents concurrent edits in team environments, reducing merge conflicts on shared documents.

Example prompt: List all revisions of /docs/proposal.docx using /2/files/list_revisions and restore the version from two days ago with /2/files/restore

### Automated Folder Synchronization and Backup

Monitor folder contents for changes using long-poll cursors and synchronize local systems with Dropbox in near real-time. The list_folder/continue endpoint with a cursor tracks incremental changes (adds, edits, deletions) without re-scanning entire directories. Batch operations move or copy hundreds of files in a single API call for efficient migrations.

Example prompt: Get a cursor for /project-files using /2/files/list_folder, then poll for changes with /2/files/list_folder/continue to detect new or modified files

## Key endpoints

| Method | Path | Description |
| --- | --- | --- |
| POST | /2/files/list_folder | List contents of a folder with pagination support |
| POST | /2/files/get_metadata | Get metadata for a file or folder by path |
| POST | /2/files/search_v2 | Search for files and folders by name or content |
| POST | /2/files/create_folder_v2 | Create a new folder at the specified path |
| POST | /2/files/delete_v2 | Delete a file or folder at a given path |
| POST | /2/files/copy_v2 | Copy a file or folder to a new location |
| POST | /2/sharing/create_shared_link_with_settings | Create a shared link with custom permissions |
| POST | /2/files/upload_session/start | Begin a chunked upload session for large files |

## Key resources

- **Files** — Upload, download, copy, move, delete, search, and manage metadata for files and folders
- **Sharing** — Create shared links, add folder members, configure access policies, and manage shared content
- **Users** — Retrieve account information, space usage, and feature availability
- **File Requests** — Create and manage file request links for collecting files from others
- **File Properties** — Add, update, and search custom metadata properties on files

## Why Jentic

- **Setup:** Wiring the Dropbox API by hand means running its OAuth 2.0 flow, mapping file and sharing scopes, and routing calls across its separate API, content, and notify hosts. Through Jentic you install once, import Dropbox from the API Directory, store the credentials once, and your agent calls it.
- **Permission scoping:** Dropbox names the target file or folder in the request body and governs access through OAuth scopes like files.content.read and sharing.write, so you limit the agent to the operations it needs, such as listing a folder or creating a shared link. You grant only the matching scopes, so a destructive call like delete is not included unless you add it.
- **Credential handling:** Your Dropbox OAuth client secret and refresh token are stored once, encrypted, by your own Jentic One instance and exchanged for scoped access tokens at execution time. Raw secrets and refresh tokens never enter the agent's prompt, logs, or context.
- **Discovery method:** Agents search Jentic by intent such as 'upload a file to Dropbox' or 'create a shared link', and Jentic returns the matching operation with its input schema, including headers like Dropbox-API-Arg, so the agent calls the right endpoint without browsing the reference docs.

## Related APIs

- **Box Platform API** — Enterprise-focused content management with advanced governance, metadata, and workflow automation
- **Google Cloud Storage** — Object storage for large-scale data with multi-region redundancy and lifecycle policies
- **Google Drive API** — File storage and collaboration integrated with Google Workspace
- **Dropbox Sign API** — Electronic signature requests and document signing workflows

## FAQ

### Why is there no official OpenAPI spec for Dropbox API v2?

Dropbox does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call Dropbox API v2 via structured tooling. It is validated against the live API and kept up to date. Get started with Jentic One, the self-hosted execution layer.

### What authentication does the Dropbox API v2 use?

The Dropbox API v2 uses OAuth 2.0 for authentication. Apps obtain an access token through the OAuth flow and include it as a Bearer token in the Authorization header. Through Jentic, OAuth tokens are stored encrypted in your Jentic One instance - agents receive scoped access without handling raw tokens directly.

### Can I upload files larger than 150 MB with the Dropbox API v2?

Yes. Files up to 150 MB can be uploaded in a single call. For larger files, use the chunked upload session endpoints: start a session with /2/files/upload_session/start, append chunks with /2/files/upload_session/append_v2, and finalize with /2/files/upload_session/finish. Sessions support files up to 350 GB.

### How do I search for files in Dropbox through Jentic?

Search Jentic for the intent 'search for files in Dropbox' to load the /2/files/search_v2 operation schema. This endpoint searches by filename, file content, or extension across the entire account. Pass a query string and optional filters (file type, path, modification date) to narrow results. Install the SDK with pip install jentic to get started.

### What are the rate limits for the Dropbox API v2?

Dropbox enforces per-app and per-user rate limits. Individual apps are limited to roughly 1,000 calls per user per 5 minutes for most endpoints. Write-heavy endpoints like upload and batch operations have lower limits. The API returns HTTP 429 with a Retry-After header when limits are exceeded.

### Can I track file changes in real-time with the Dropbox API v2?

The API supports near-real-time change detection through cursor-based polling. Call /2/files/list_folder to get an initial cursor, then use /2/files/list_folder/continue to receive only new changes. For immediate notification, the long-poll endpoint at https://notify.dropboxapi.com/2/files/list_folder/longpoll blocks until changes occur or times out after a configurable interval.

### Can I limit what my agent is allowed to do with the Dropbox API v2?

Yes. Because Jentic One is self-hosted, you set the rules that decide which Dropbox operations and credentials your agent may use. You grant only the OAuth scopes the task needs, such as files.content.read for listing a folder or sharing.write for creating a shared link, so a destructive call like /2/files/delete_v2 is unavailable unless you explicitly add its scope. Since each request names the target file or folder in its body, you can keep the agent confined to specific operations and paths while your stored credentials are exchanged for scoped tokens at execution time.
