Summary
A complete Dropbox file surface, gated behind a Dropbox app you own.
Because you register the app and choose its scopes, the permission ceiling is yours to set: grant only files.metadata.read and the write calls cannot fire at all. The setup script runs the OAuth flow once, and the resulting tokens are stored encrypted under the key you provide.
What it is
An independent Dropbox integration server, not affiliated with Dropbox, covering files, sharing and account info over the public Dropbox API.
What you get
- A folder listing and an account-wide file search (list_files, search_file_db)
- File contents, file metadata and a download to local disk (get_file_content, get_file_metadata, download_file)
- Uploads, new folders, copies and moves (upload_file, create_folder, copy_item, move_item)
- A shareable link for any item (get_sharing_link)
- A guarded delete (safe_delete_item) and the connected account's details (get_account_info)
- OAuth with PKCE, and tokens encrypted with a key you supply
Requirements
A Dropbox app you register yourself with scoped access, the permissions you plan to use, and http://localhost as its redirect URI. Its app key and secret, that redirect URI, and a key of your own for encrypting stored tokens go in the environment, then build with npm run build and npm run setup.