Dropbox Integration: Cloud Storage for Agents

Agents can browse, download, upload, and share files in Dropbox. OAuth credentials are injected automatically.

Overview

OneCLI connects AI agents to Dropbox through OAuth. Agents can browse files and folders, download and upload content, and manage sharing. The gateway injects OAuth credentials into requests to the Dropbox API automatically.

Setup

1. Go to Connections

   Open the OneCLI dashboard and navigate to Connections > Dropbox.

2. Authorize

   Click Connect Dropbox. You’ll be redirected to Dropbox to authorize OneCLI. Review the requested permissions and click Allow.

   OneCLI requests read access to account info, file metadata, and file content by default. Write access for uploading, organizing, and sharing is optional.

3. Verify

   After authorization, you’ll be redirected back to the dashboard. The connection will show as Connected with your Dropbox email.

What agents can do

Area	Description
File metadata (read)	List files and folders, view names, sizes, and modification dates
File content (read)	Download and read file content
File content (write)	Upload new files and update existing content
Organize files (write)	Move, rename, and delete files and folders
Sharing (read)	View shared folders and links
Sharing (write)	Create shared links and share folders with others

Use cases

• Document processing agents that read files from Dropbox and extract information
• Backup agents that upload generated reports or exports
• File organization agents that sort and rename files based on content
• Collaboration agents that share files and manage folder permissions

Self-hosted setup

For self-hosted deployments, configure your own Dropbox OAuth app:

1. Create an app in the Dropbox App Console
2. Set the environment variables DROPBOX_CLIENT_ID and DROPBOX_CLIENT_SECRET

Controlling access with rules

Use OneCLI’s rules engine to control what agents can do. For example, allow reading files but block uploads and deletions, or rate-limit API calls. Rules are evaluated before credential injection.