Guides · storage · Popular APIs

Dropbox API app (App Console and production approval)

Create a scoped app in the Dropbox App Console (App folder or Full Dropbox). Development apps link up to 500 users; once 50 users link you have two weeks to get production approval or new links freeze.

Researched · not yet run liveLast researched 25 October 2026 · Dropbox · provider site

Researched, not yet run live. Built from the provider’s official pages (linked below). A person hasn’t walked this flow end to end yet, so check each step against the source.

Who owns what

Apps are owned by a Dropbox account and registered in the App Console.

  • Dropbox account developer owned by the person

Have ready

  • App icon for the production application [1]Needed for: Apply for production status

Steps

Steps marked “human step” are ones only you can do: verapli never signs in, submits, pays or accepts terms for you.

  1. Create the app

    In the App Console create an app with scoped access, choose App folder (least privilege) or Full Dropbox, and name it.

    • verapli co-pilot
    • Human step: You press submit

    Where: https://www.dropbox.com/developers/apps/create

  2. Set scopes and redirect URIs

    On the Permissions tab tick only needed scopes and Submit; add OAuth redirect URIs on Settings; copy the App key and App secret.

    • verapli co-pilot
    • Human step: You press submit
    • After: Create the app

    verapli captures DROPBOX_APP_SECRET here by plain code: encrypted in your browser, never shown to AI.

    Where: https://www.dropbox.com/developers/apps

  3. Enable additional usersoptional

    New apps link only your account; click Enable additional users on the app info page (development limit 500 users).

    • verapli co-pilot
    • Human step: You press submit
    • After: Create the app

    Where: https://www.dropbox.com/developers/apps

  4. Apply for production statusoptional

    From the app info page apply for production, describing API usage and uploading an icon; follow the branding guidelines. Apply once you approach 50 linked users (or request early review with evidence).

    • Guided by hand
    • Human step: The provider reviews it
    • After: Set scopes and redirect URIs, Enable additional users
    The provider says
    Requests aren't reviewed until 50 users have linked; you then have two weeks to apply and be approved before linking new users is frozen. [1]
    If something goes wrong (1)
    • New users can no longer link the app: Two weeks passed after 50 linked users without approval; get production approval (unlinking users does not lift the freeze). [1]

    Where: https://www.dropbox.com/developers/apps

Terms and gotchas

Plain-English summary, not legal advice. Each card links its source.

Can get you bannedThe rules say

Two weeks after 50 users link a development app, linking new users is frozen until production approval. [1]

Can cost moneyThe rules say

Apps that don't follow the branding guidelines and terms are rejected; the app name can't change after approval. [1]

What you end up with

Env varSecretFormatWhat it is
DROPBOX_APP_KEYnot secretopaque id stringApp key (client_id)
DROPBOX_APP_SECRETsecretopaque secret stringApp secret (client_secret)

For agents

The same entry as JSON: /api/v1/entries/dropbox/app · requirements /api/v1/requirements/dropbox/app · terms /api/v1/terms/dropbox/app.

Remote MCP (read-only, no auth)
claude mcp add --transport http verapli https://verapli.com/mcp

> "What do I need for Dropbox API app (App Console and production approval), and how long will it take?"
  → tools/call requirements { "provider_id": "dropbox/app" }

Sources

  1. DBX Platform developer guide Create apps in the App Console; scopes on Permissions tab; App folder vs Full Dropbox; new apps link only your account; Enable additional users; development apps up to 500 users; production application from app info page following branding guidelines and terms, with API usage details and app icon; not reviewed until 50 linked users; two weeks after 50 users or linking freezes; name can't change after approval; Request early review field. · accessed 25 October 2026 · official
  2. OAuth Short-lived access tokens; token_access_type=offline for refresh tokens; PKCE (S256) for apps that can't keep a secret; app key/secret = client_id/client_secret. · accessed 25 October 2026 · official

Provider rules change. This page is generated from verapli registry version 2026.1025.316; spotted something out of date? Tell us. Dropbox is not affiliated with verapli.