dbx-mcp-server

A Model Context Protocol (MCP) server that provides integration with Dropbox, allowing MCP-compatible clients to interact with Dropbox through a set of powerful tools.

Important Disclaimer: This project is not affiliated with, endorsed by, or sponsored by Dropbox. It is an independent integration that works with Dropbox's public API.

Quick Start

Clone the repository
Run npm install to install dependencies
Run npm run build to build the project
Run npm run setup
Configure your MCP client to use the server

Prerequisites

Choose "Scoped access" API
Choose the access type your app needs
Name your app and click "Create app"
Under "Permissions", select the desired permissions for the actions you will be using, for example:
- files.metadata.read
- files.content.read
- files.content.write
- sharing.write
- account_info.read
Add http://localhost as your redirect URI
Note your App key and App secret

Installation

Clone the repository

git clone https://github.com/your-username/dbx-mcp-server.git
cd dbx-mcp-server

Install dependencies and build
```
npm install
npm run build
```
Run the setup script
```
npm run setup
```

Add to MCP settings

Add the following to your MCP settings file:

{
  "mcpServers": {
    "dbx": {
      "command": "node",
      "args": ["/path/to/dbx-mcp-server/build/index.js"]
    }
  }
}

Authentication

The server uses OAuth 2.0 with PKCE for secure authentication with Dropbox.

Environment Variables

Required:

DROPBOX_APP_KEY: Your Dropbox app's key
DROPBOX_APP_SECRET: Your Dropbox app's secret
DROPBOX_REDIRECT_URI: OAuth redirect URI
TOKEN_ENCRYPTION_KEY: 32+ character key for token encryption

Optional:

TOKEN_REFRESH_THRESHOLD_MINUTES: Minutes before expiration to refresh token (default: 5)
MAX_TOKEN_REFRESH_RETRIES: Maximum number of refresh attempts (default: 3)
TOKEN_REFRESH_RETRY_DELAY_MS: Delay between refresh attempts in ms (default: 1000)

Available Tools

File Operations

list_files: List files in a directory
upload_file: Upload a file
download_file: Download a file
safe_delete_item: Safely delete with recycle bin support
create_folder: Create a new folder
copy_item: Copy a file or folder
move_item: Move or rename a file/folder

Metadata and Search

get_file_metadata: Get file/folder metadata
search_file_db: Search files and folders
get_sharing_link: Create sharing links
get_file_content: Get file contents

Account Operations

get_account_info: Get account information

Required Dropbox Permissions

Below is a mapping of server actions to the minimum Dropbox OAuth scopes (permissions) required:

Server Action	Required Dropbox Scopes
list_files	`files.metadata.read`
upload_file	`files.content.write`, `files.metadata.write`
download_file	`files.content.read`
safe_delete_item	`files.metadata.write`
create_folder	`files.metadata.write`
copy_item	`files.content.write`, `files.metadata.write`
move_item	`files.content.write`, `files.metadata.write`
get_file_metadata	`files.metadata.read`
search_file_db	`files.metadata.read`
get_sharing_link	`sharing.write`
get_file_content	`files.content.read`
get_account_info	`account_info.read`

Additional Scopes (if needed):

sharing.read: View sharing settings and collaborators
file_requests.read / file_requests.write: For file request features
contacts.read / contacts.write: For accessing Dropbox contacts

For more details on Dropbox scopes, see the Dropbox Permissions Documentation.

Usage Examples

// List files in root directory
await mcp.useTool("dbx-mcp-server", "list_files", { path: "" });

// Upload a file
await mcp.useTool("dbx-mcp-server", "upload_file", {
  path: "/test.txt",
  content: Buffer.from("Hello World").toString("base64"),
});

// Search for files
await mcp.useTool("dbx-mcp-server", "search_file_db", {
  query: "report",
  path: "/Documents",
  max_results: 10,
});

Development

Built with:

TypeScript
Model Context Protocol SDK
Dropbox SDK v10.34.0
Dropbox API v2

License

MIT License

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Dropbox Integration Server