The API Report CardAPI Index
Dropbox Business

Dropbox Business API

dropbox.com

Dropbox ships a first-class public REST API (v2) with OAuth 2.0, granular scopes, webhooks, and official SDKs in six languages. Signup is self-serve from the App Console. Business and Team scopes require app review; until approved an app is capped at about 50 users.

Last verified: July 2026Software & Data Tools
API GRADE
A
VERIFIED JUL 2026

SCORECARD

ExistenceGOODPublic REST API v2 split across RPC, content upload/download, and long-poll notification hosts.
AccessGOODSelf-serve app creation in the App Console; Team scopes need Dropbox review, with a 50-user cap until approved.
CoverageGOODFiles, sharing, file requests, properties, Paper, and team admin are covered; webhooks only say something changed, so you pull deltas.
AuthGOODOAuth 2.0 with PKCE, refresh tokens, granular per-object scopes, and short-lived 4-hour access tokens.
Docs & DXGOODFull docs, an interactive API explorer, and official SDKs for Python, Java, JS, Swift, .NET, and Obj-C; no formal sandbox.
StabilityGOODAPI v2 has been stable for years, with a published migration guide for the one big break from v1.
Supergood: Dropbox Business shipped a real API. Most vendors don't; we ship near-native APIs for the rest.

Frequently asked questions

Dropbox Business scores A on the API Report Card. Dropbox ships a first-class public REST API (v2) with OAuth 2.0, granular scopes, webhooks, and official SDKs in six languages. Signup is self-serve from the App Console. Business and Team scopes require app review; until approved an app is capped at about 50 users.

Tried to integrate with Dropbox Business?
SOURCES
All endpoint-specific errors return HTTP 409 with a tagged-union error in the body, which breaks naive HTTP-status-based error handling dropbox.com
Rate limits are not published as a single hard number; developers must discover thresholds by hitting 429s, with `Retry-After` jitter required dropbox.com
Long-running async job pattern (`/files/copy_batch` → `/files/copy_batch/check`) requires polling and adds latency and code complexity developers.dropbox.com
Production use of Business/Team scopes requires Dropbox app review/approval, gating high-trust enterprise scenarios behind a manual process dropbox.com
Webhook notifications include only the account and the fact that something changed, apps must follow up with `/files/list_folder/continue` to discover what changed dropbox.com
Upload session pattern (start / append / finish) is required for files >150 MB and adds non-trivial state management for large-file uploads dropbox.com
Dropbox Sign API rate limits are separate from Dropbox API limits and have their own per-month/per-day caps that count many incidental endpoints help.dropbox.com
Short-lived (~4h) access tokens require refresh-token plumbing; legacy long-lived tokens have been phased out, breaking older integrations developers.dropbox.com
Documentation is split across www.dropbox.com/developers, developers.dropbox.com, dropbox.tech, and per-product subdomains (Sign, DocSend), discoverability suffers dropbox.com
No GraphQL; no native gRPC; all integrations are HTTP REST/JSON + webhooks dropbox.com
Polling-heavy integrations (real-time mirroring, AV scanning, DLP) routinely hit rate limits per Dropbox's own guidance developers.dropbox.com
API v1 → v2 migration in 2016–2017 broke many integrations and is still cited as a trust event in older threads dropbox.tech
Pricing perceived as expensive vs. Google Workspace / Microsoft 365 bundle (where storage is included with productivity apps) g2.com
Selective Sync / Smart Sync historically caused local-cache and disk-usage issues on macOS and Windows dropboxforum.com
Per-seat pricing forces 3-seat minimum on team plans, painful for very small teams dropbox.com
Compliance gap perception vs. Box for life-sciences, federal, and the most regulated workloads (Box has FedRAMP, broader GxP coverage) gartner.com
Web app performance lags vs. Google Drive for very large file lists and search trustradius.com
Some customers cite forced migrations / sunsetting of features (Mailbox, Carousel, Dropbox Spaces) eroding trust en.wikipedia.org
Dropbox Sign rebrand from HelloSign confused customers and broke some marketing/SEO links sign.dropbox.com
AI/Dash positioning seen as late vs. Google's Gemini-in-Drive and Microsoft Copilot-in-OneDrive dropbox.com
Customer support response times on lower-tier plans frequently criticized in G2/TrustRadius reviews trustradius.com