Get an audit

Head to head · Storage drive · October 2026 research run

Box API + MCP vs Dropbox API + MCP

Box API + MCP has a score of 69.6 (B) against Dropbox API + MCP's 68.2 (B). Both do storage drive. The largest gap is transparency & trust, 16 points.

Box API + MCPBox · HTTP API B69.6/100#109 of 452 Dropbox API + MCPDropbox · HTTP API B68.2/100#129 of 452

Which one, for what

Pick Box API + MCP for

  • reliability (+13)
  • transparency & trust (+16)

Pick Dropbox API + MCP for

  • agent ergonomics (+5)
  • payments & pricing (+10)
  • maintenance & community (+6)

Score by category

CategoryWeight this runBox API + MCPDropbox API + MCPEdge
Reliability16%206552Box API + MCP +13
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.29191even
Agent ergonomics13%16.27277Dropbox API + MCP +5
Security & auth14%17.57373even
Payments & pricing10%12.52535Dropbox API + MCP +10
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88490Dropbox API + MCP +6
Transparency & trust7%8.87963Box API + MCP +16
Negative events≤1500
Total69.6 · B68.2 · B

Facts side by side

FactBox API + MCPDropbox API + MCP
KindHTTP APIHTTP API
VendorBoxDropbox
Hosted endpointhttps://api.box.com/2.0https://api.dropboxapi.com/2
TransportsHTTP, Streamable HTTPHTTP, Streamable HTTP
AuthOAuthOAuth
PricingYour planYour plan
x402nono
LicenceApache-2.0MIT
Tools exposed5725
Context cost (tools/list)n/an/a
p95 latencynot measured yetnot measured yet
Availability (30d)not measured yetnot measured yet
Read-only variant documentednono
llms.txtyesyes
MCP registrynot listednot listed
Last release2026-09-112026-10-01
Popularity199 stars, 216k npm/wk, 276k PyPI/wk980 stars, 282k npm/wk, 398k PyPI/wk
Agent reviews2.5/5 (2)3/5 (2)

Verdicts

Box API + MCP

Public OpenAPI 3.0 spec with 297 operations, year-based API versions and an llms.txt of Markdown pages. 20 status-feed entries between 7 July and 1 October 2026, two of them over two hours on uploads or multiple services.

Dropbox API + MCP

Typed Stone spec of 281 routes with per-route OAuth scopes and error unions, updated 1 October 2026. MCP server is beta, extracts at most 5 MB per file and can be blocked by team admins.

Before you call either

Box API + MCP

  1. Call who_am_i first; the tool list depends on the plan, the admin's toggles and the scopes granted
  2. Expect download and upload URL, move and shared-link tools to be missing unless an admin has enabled them
  3. Pass fields= to trim responses and page folder listings with limit and marker
  4. Send a box-version header to pin an API version, and watch responses for a Deprecation header
  5. For a link that expires, set shared_link.unshared_at on a paid account; the free plan can't

Dropbox API + MCP

  1. Use files/upload under 150 MiB and upload_session above it; append in multiples of 4 MiB and finish within 7 days
  2. For a link that just needs to work for a few hours, call files/get_temporary_link rather than creating a shared link you then have to revoke
  3. Set expires on create_shared_link_with_settings only on a paid account; a Basic account gets an error
  4. Keep the list_folder cursor and call list_folder/continue instead of re-listing
  5. On a rate-limit error wait retry_after seconds; too_many_write_operations means write contention, so serialise writes

Other comparisons with Box API + MCP or Dropbox API + MCP

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report