Dropbox

Overview

Connect your users to Dropbox for cloud file storage, file sharing, and document collaboration.

Property	Value
Provider ID	dropbox
Category	Storage
PKCE	Supported
Token refresh	Automatic
Redirect URI	Shown in Developer Portal

Step 1: Create a Dropbox OAuth App

Go to the Dropbox App Console

Navigate to dropbox.com/developers/apps and sign in.

Create a new app

Click Create app, choose Scoped access, select Full Dropbox or App folder, and enter a name.

Configure the redirect URI

Under the Settings tab, add the Alter callback URL from the Developer Portal to Redirect URIs.

Get credentials

Copy the App key (Client ID) and App secret (Client Secret).

Warning

Never share the application secret publicly. Store it securely and only enter it in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add Dropbox provider

Go to OAuth Providers > Add Provider > Dropbox.

Enter credentials

• Client ID: Paste your Dropbox App key
• Client Secret: Paste your Dropbox App secret

Select scopes

Choose the scopes the application needs.

Save

Click Save. The provider is now active.

Available Scopes

Scope	Description
account_info.read	Read basic account information
files.metadata.read	Read file and folder metadata
files.metadata.write	Modify file and folder metadata
files.content.read	Download and read file contents
files.content.write	Upload and modify file contents
sharing.read	Read sharing settings and shared folders
sharing.write	Manage sharing settings and shared folders
account_info.write	Modify basic account information
file_requests.read	Read file requests
file_requests.write	Create and manage file requests
files.permanent_delete	Permanently delete files and folders
contacts.read	Read the account’s contacts
contacts.write	Manage the account’s contacts
backup.read	View Dropbox Backup status and contents
backup.write	Manage Dropbox Backup
dash/content.read	Read Dropbox Dash indexed content
dash/content.write	Manage Dropbox Dash indexed content
sessions.list	List team members’ active sessions and linked devices
sessions.modify	Revoke team members’ device sessions
files.team_metadata.read	Read metadata for team-owned files and folders
files.team_metadata.write	Modify metadata for team-owned files and folders
events.read	Read the team’s event (audit) log
events.write	Write to the team’s event log
groups.read	Read the team’s groups and their membership
groups.write	Manage the team’s groups and their membership
members.read	Read the team’s member list and profiles
members.write	Add and manage team members
members.delete	Remove members from the team
team_info.read	Read the team’s information and settings
team_info.write	Manage the team’s information and settings
team_data.member	Access data belonging to team members
team_data.team_space	Access the team’s shared team space
team_data.content.read	Read content across the team’s Dropbox
team_data.content.write	Modify content across the team’s Dropbox
team_data.governance.read	Read the team’s data-governance settings and legal holds
team_data.governance.write	Manage the team’s data-governance settings and legal holds

Notes

• Dropbox uses short-lived access tokens with refresh tokens. Alter Vault handles automatic token refresh.
• The files.content.read and files.content.write scopes must be enabled in the application’s Permissions tab in the Dropbox App Console.
• The team scopes (events.*, groups.*, members.*, sessions.*, team_info.*, team_data.*, files.team_metadata.*) are only granted to a Dropbox Business app created with the Team member management / Team member file access permission; a standard Full Dropbox or App folder app cannot request them.
• See the Dropbox API documentation for more details.

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
files/copy_v2	write	POST	/2/files/copy_v2
files/create_folder_v2	write	POST	/2/files/create_folder_v2
files/delete_v2	delete	POST	/2/files/delete_v2
files/download	read	POST	/2/files/download
files/get_metadata	read	POST	/2/files/get_metadata
files/get_temporary_link	read	POST	/2/files/get_temporary_link
files/list_folder	read	POST	/2/files/list_folder
files/list_folder_continue	read	POST	/2/files/list_folder/continue
files/move_v2	write	POST	/2/files/move_v2
files/search_v2	read	POST	/2/files/search_v2
files/upload	write	POST	/2/files/upload
sharing/create_shared_link_with_settings	admin	POST	/2/sharing/create_shared_link_with_settings
sharing/list_shared_links	read	POST	/2/sharing/list_shared_links
users/get_current_account	read	POST	/2/users/get_current_account
users/get_space_usage	read	POST	/2/users/get_space_usage