Adobe Acrobat Sign vs Dropbox Sign

Adobe Acrobat Sign

The REST API has OAuth 2.0 scopes that can be limited to one user, a group or the account, Retry-After on throttled calls and a free Developer Edition. Adobe calls its own SDKs obsolete, the newest dated API change is November 2025, and API plans are sold through sales with no public price.

Dropbox Sign

A public OpenAPI 3.0.3 spec, llms.txt, six official SDKs and a free test mode let an agent build the whole flow before paying. Production sends need a paid plan from $900 a year, the API key has full account access, and no idempotency keys were found in the reviewed documentation.

Adobe Acrobat Sign

1. Call the base URI endpoint first and cache api_access_point. Each account lives on one shard such as api.na1.adobesign.com, and other hosts answer INVALID_API_ACCESS_POINT
2. Request only the scopes the task needs, with the :self modifier. :account lets the token act for every user in the account
3. On 429 wait the seconds in Retry-After or retryAfter. Retrying sooner resets the timer on accounts created after 20 May 2025
4. Don't poll. An identical GET repeated past the plan's threshold returns 429. Subscribe to webhooks, or send If-None-Match with the ETag
5. Create agreements in DRAFT state, check them, then move to IN_PROCESS. No idempotency key exists, so check before re-sending a failed POST /agreements

Dropbox Sign

1. Send test_mode=true while building. Test requests are free, watermarked and not legally binding, and are limited to 10 requests a minute
2. Don't blind-retry a send after a timeout. No idempotency key exists, so list requests by metadata or title first to check whether it was created
3. Authenticate with HTTP Basic, the API key as username and an empty password. Keep the key out of URLs, although the docs show that form
4. Answer every webhook with HTTP 200 and the body Hello API Event Received, and verify event_hash. Ten consecutive failures clear the callback URL
5. Treat a 200 from cancel as queued only. Confirmation arrives later as a signature_request_canceled event