{ "data": { "a": { "slug": "dropbox-api", "name": "Dropbox API + MCP", "vendor": "Dropbox", "vendorUrl": "https://www.dropbox.com/developers", "kind": "http-api", "category": "file-storage", "summary": "HTTP API v2 for a user's or team's Dropbox, files, folders, upload sessions to about 2 TiB, shared links with passwords and expiry, file requests and change cursors.", "url": "https://www.anchorterminal.com/tools/dropbox-api", "markdownUrl": "https://www.anchorterminal.com/tools/dropbox-api.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/dropbox-api.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/dropbox-api.json", "dns": "dropbox-api.grade.anchorterminal.com", "repo": "https://github.com/dropbox/dropbox-sdk-python", "license": "MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.dropboxapi.com/2", "packages": [ { "registry": "npm", "name": "dropbox" }, { "registry": "pypi", "name": "dropbox" } ], "auth": "oauth", "authNotes": "OAuth 2.0 with scoped short-lived access tokens and a refresh token when you ask for offline access. Apps are either App folder (one sandbox folder) or Full Dropbox. RPC endpoints take JSON on api.dropboxapi.com; upload and download endpoints on content.dropboxapi.com take the arguments in a Dropbox-API-Arg header and the bytes in the body. The remote MCP server signs in with Dropbox OAuth and dynamic client registration, and team admins can block app connections.", "pricing": "byo-plan", "pricingNotes": "The API and the MCP server cost nothing beyond the Dropbox plan of the account they act on, and a free Basic account works. Basic users can only create public links and can't set link expiry or passwords. Business teams may carry a monthly data transport call limit that upload and download calls count against, and the developer terms let Dropbox cap API calls at its discretion (https://www.dropbox.com/developers/reference/data-transport-limit; https://www.dropbox.com/developers/reference/tos).", "priceSummary": "Your plan", "where": "hosted", "x402": { "level": "no", "endpoints": [] }, "toolCount": 25, "popularity": { "githubStars": 980, "npmWeekly": 281737, "pypiWeekly": 398388, "asOf": "2026-09-30" }, "docsUrl": "https://docs.dropboxapi.com", "llmsTxt": "https://docs.dropboxapi.com/llms.txt", "capabilities": [ "storage.drive", "storage.share" ], "tags": [ "hosted", "closed-source", "mcp", "oauth", "byo-plan", "typescript", "python", "webhooks" ], "lastRelease": "2026-10-31", "graded": true, "anchor": { "graded": true, "score": 64.9, "grade": "B", "agentReady": false, "rank": 447, "ranked": true, "rankOf": 1510, "categoryRank": 10, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 77, "maintenance": 90, "payments": 35, "reliability": 60, "schema": 91, "security": 78, "transparency": 65 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -6, "negativeNotes": [ "2026-10-07, -3. A patch release of the listing's own `dropbox` Python package removed public API with no notice. v12.2.3 (7 October 2026) replaced the BulkSuspend types taken by team_members_bulk_suspend (added on 29 July, not marked preview) with MembersSuspendBatch ones, so existing callers break. v12.2.4 (22 October 2026) also removed sharing_remove_file_member, but the SDK had warned at runtime since 2016 that it was deprecated and named remove_file_member_2, which counts as notice, so it isn't part of the term. https://github.com/dropbox/dropbox-sdk-python (clone, tags v12.2.2 and v12.2.3)", "2026-10-22, -3. Python SDK v12.2.4 fixed a flaw in its own token refresh. After a 401 expired_access_token, the retry loop refreshed without the scope given to Dropbox(scope=...), \"so the new token carried every scope of the original grant\" (commit 4a3cd1f, 21 October 2026). No advisory was found in OSV or the repository on 1 November 2026; GitHub's advisory pages couldn't be read. A released fix of a described flaw with no advisory, as medplum took. https://github.com/dropbox/dropbox-sdk-python/commit/4a3cd1f77020061df45fbbff5193ef021d7fcc23" ], "verdict": "Typed Stone spec of 276 routes with per-route OAuth scopes and error unions, updated 31 October 2026, and a paid bug bounty with SOC 2 and ISO 27001 reports. No numeric rate limits are published, the MCP server is still beta, and October patch releases of the Python SDK removed public methods without dated notice.", "bestFor": "An agent acting on a person's or team's existing Dropbox files, especially a solo user on the free plan.", "strengths": [ "Typed Stone spec of 276 routes with per-route OAuth scopes and error unions, updated 31 October 2026", "Granular OAuth scopes and App folder apps that see one folder", "Official hosted MCP server with OAuth and dynamic client registration, no app to register", "New docs at docs.dropboxapi.com with llms.txt and a Markdown version of every page", "Paid bug bounty on Intigriti, SOC 2 reports and ISO 27001, 27017 and 27018 certificates in the trust centre" ], "weaknesses": [ "MCP server is beta, extracts at most 5 MB per file and can be blocked by team admins", "Link expiry and passwords aren't available to Basic accounts", "No numeric rate limits published; the performance guide says Dropbox doesn't publish exact limits", "Content endpoints want arguments in a Dropbox-API-Arg header, which trips up generic HTTP tooling", "Python SDK patch releases v12.2.3 and v12.2.4 (October 2026) removed public types and a method with no dated notice" ], "agentNotes": [ "Use files/upload under 150 MiB and upload_session above it; append in multiples of 4 MiB and finish within 7 days", "For a link that just needs to work for a few hours, call files/get_temporary_link rather than creating a shared link you then have to revoke", "Set expires on create_shared_link_with_settings only on a paid account; a Basic account gets an error", "On a 429 wait the Retry-After seconds; too_many_write_operations means write contention, so serialise writes to the namespace", "Pin the dropbox Python package and use v12.2.4 or later if you pass scope= to Dropbox(); earlier versions widened the token on refresh" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 64.9 } ], "editorialScores": { "ergonomics": 77, "maintenance": 90, "payments": 35, "reliability": 60, "schema": 91, "security": 78, "transparency": 61 }, "provenanceScore": 68, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl -X POST https://api.dropboxapi.com/2/files/list_folder \\\n -H \"Authorization: Bearer $DROPBOX_ACCESS_TOKEN\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"path\":\"\",\"limit\":50}'", "claudeCode": "claude mcp add --transport http dropbox https://mcp.dropbox.com/mcp", "config": { "mcpServers": { "dropbox": { "url": "https://mcp.dropbox.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/storage.drive", "tool": "https://letme.dev/dropbox-api" }, "area": "everyday", "provenance": { "legalEntity": "Dropbox, Inc.", "domain": "dropbox.com", "domainRegistered": "1995-06-28", "domainNote": "dropbox.com was registered in 1995, long before Dropbox was founded, so the domain was bought later.", "endpointOnVendorDomain": false, "terms": "https://www.dropbox.com/developers/reference/tos", "privacy": "https://www.dropbox.com/privacy", "statusPage": "https://status.dropbox.com", "changelog": "", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "The Developer Terms and Conditions (effective 2025-03-01) put the agreement with Dropbox, Inc. for organisations in the United States, Canada and Mexico and with Dropbox International Unlimited Company elsewhere. They let Dropbox cap API calls at its discretion and require a production-status request before an app can go beyond development.", "API hosts sit on dropboxapi.com and the MCP server on mcp.dropbox.com.", "www.dropbox.com/.well-known/security.txt serves a plain-text page with disclosure contacts (Intigriti bug bounty and disclosure programme, bugbounty@dropbox.com) but none of the RFC 9116 fields.", "The status page lists 12 components, the MCP Server and the API among them. In the 90 days to 1 November 2026 its history has one partial incident touching the API (21 August 2026) and announced maintenance on 22 September and 13 October.", "The HTTP documentation page and the sharing guide on dropbox.com returned 429 to our fetches on 2026-09-30, so the API facts here come from the Stone spec in dropbox/dropbox-api-spec on GitHub." ], "score": 68 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/dropbox-api.json", "live": { "slug": "dropbox-api", "probe": { "target": "https://api.dropboxapi.com/2", "method": "get", "lastAt": "2026-11-07T22:55:55.24968507Z", "lastOk": true, "lastStatus": 404, "lastMs": 116, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 113, "p95ms24h": 196, "samples24h": 244, "samples30d": 7956, "days": [ { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 233, "ok": 233 } ] }, "vendorStatus": { "page": "https://status.dropbox.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T22:56:52.782988284Z" }, "versions": [ { "registry": "github", "name": "dropbox/dropbox-sdk-python", "version": "v12.2.4", "released": "2026-10-22", "seenAt": "2026-11-06T23:22:42.924114714Z" }, { "registry": "npm", "name": "dropbox", "version": "10.66.0", "seenAt": "2026-11-06T23:22:42.387836863Z" }, { "registry": "pypi", "name": "dropbox", "version": "12.2.4", "released": "2026-10-22", "seenAt": "2026-11-06T23:22:42.618920281Z" } ], "githubStars": 984, "npmWeekly": 291903, "pypiWeekly": 794623, "securityTxt": { "url": "https://dropbox.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-11-07T16:01:05.350882113Z" }, "llmsTxt": { "url": "https://docs.dropboxapi.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:19.667257317Z" }, "domain": { "domain": "dropbox.com", "registered": "1995-06-28", "source": "https://rdap.verisign.com/com/v1/domain/dropbox.com", "checkedAt": "2026-11-01T14:27:04.919774876Z" }, "pages": [ { "url": "https://www.dropbox.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:28:09.505515513Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "87f38cd110ac" }, { "url": "https://www.dropbox.com/developers/reference/tos", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:28:06.50270438Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3049088f7ced" } ], "mcpTools": { "url": "https://mcp.dropbox.com/mcp", "checkedAt": "2026-11-07T01:43:57.749785319Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:43:57.749785319Z" }, "github": { "repo": "dropbox/dropbox-sdk-python", "checkedAt": "2026-11-02T08:45:22.258926086Z", "stars": 984, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-31T00:05:12Z", "openIssues": 18, "openPRs": 2, "issuesOpened90d": 2, "issuesClosed90d": 5, "prsMerged90d": 38, "ci": { "branch": "main", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-10-31T00:06:33Z" }, "replies": { "sampled": 25, "unanswered": 5, "medianDays": 34 } }, "updatedAt": "2026-11-07T22:56:52.782988284Z" } }, "answer": "Google Cloud Storage scores 76.7 (BB) on agent readiness against Dropbox API + MCP's 64.9 (B), and leads in 4 of 7 scored categories. Dropbox API + MCP leads on schema \u0026 documentation and payments \u0026 pricing.", "b": { "slug": "google-cloud-storage", "name": "Google Cloud Storage", "vendor": "Google Cloud", "vendorUrl": "https://cloud.google.com/storage", "kind": "http-api", "category": "file-storage", "summary": "Google Cloud Storage is Google Cloud's object store for buckets and objects, reached through JSON and XML REST APIs, a gRPC Storage Control API, the gcloud CLI, client libraries and a generally available remote MCP server.", "url": "https://www.anchorterminal.com/tools/google-cloud-storage", "markdownUrl": "https://www.anchorterminal.com/tools/google-cloud-storage.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/google-cloud-storage.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/google-cloud-storage.json", "dns": "google-cloud-storage.grade.anchorterminal.com", "transports": [ "streamable-http" ], "remoteUrl": "https://storage.googleapis.com/storage/mcp", "packages": [ { "registry": "npm", "name": "@google-cloud/storage" }, { "registry": "pypi", "name": "google-cloud-storage" } ], "auth": "oauth", "authNotes": "Google OAuth 2.0 access tokens for user or service-account identities, scoped by IAM roles on the project, bucket or managed folder, with HMAC keys for the XML API's S3-style access, and V4 signed URLs that carry a signature, not the secret. The MCP server uses the same Google authentication, with its own IAM permissions per MCP method.", "pricing": "usage", "pricingNotes": "Pay per GB-month stored, per 1,000 operations and per GB of egress, by location and class. Standard in a single region is $0.005 per 1,000 Class A and $0.0004 per 1,000 Class B operations; a dual-region example bills $0.022 per GB-month. Always Free gives 5 GB-months of Standard storage, 5,000 Class A and 50,000 Class B operations in three US regions. Failed 4xx and 5xx operations are generally not charged.", "priceSummary": "$0.005 / 1k req", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on Cloud Storage or its pricing page (checked 2026-11-06).", "endpoints": [] }, "toolCount": 9, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.cloud.google.com/storage/docs/apis", "openapi": "https://storage.googleapis.com/$discovery/rest?version=v1", "capabilities": [ "storage.object", "storage.presigned", "storage.s3", "storage.share" ], "tags": [ "hosted", "usage", "free-tier", "mcp", "remote-mcp", "oauth", "iam", "google-cloud", "object-storage", "signed-urls", "sla", "grpc" ], "lastRelease": "2026-11-04", "graded": true, "anchor": { "graded": true, "score": 76.7, "grade": "BB", "agentReady": true, "rank": 41, "ranked": true, "rankOf": 1510, "categoryRank": 4, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 85, "maintenance": 88, "payments": 30, "reliability": 80, "schema": 81, "security": 85, "transparency": 85 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "IAM per bucket and MCP method, signed URLs, preconditions for safe retries and a 99.95 per cent multi-region SLA make it a well-governed object store for agents. The nine-tool MCP server has no read-only or destructive annotations, reads stop at 8 MiB, and a person must set up a project and billing first.", "bestFor": "Agents on Google Cloud that store and share files and datasets. amazon-s3, azure-blob-storage and cloudflare-r2 are the closest listings; teams outside Google Cloud with S3 tooling may prefer S3-compatible stores.", "strengths": [ "Generally available MCP server since 20 April 2026, with IAM permissions per MCP method", "Preconditions and a documented retry strategy make writes safe to retry", "SLA of 99.95 per cent a month for multi-region Standard storage", "Signed URLs share objects without sharing credentials", "Cloud Audit Logs cover admin and data access" ], "weaknesses": [ "MCP tools carry no read-only or destructive annotations and deletes need no confirmation", "read_object stops at 8 MiB through MCP", "A high-severity multi-product incident affected Cloud Storage on 20 August 2026", "Project and billing setup needs a person in a browser" ], "agentNotes": [ "Grant the agent's service account only Storage Object Viewer or Creator on the bucket it needs", "Send ifGenerationMatch on writes and deletes so a retry can't overwrite a newer object", "Use a V4 signed URL to share an object rather than changing bucket access", "Read objects over 8 MiB through the JSON API with Range, not the MCP read_object tool", "Confirm with the user before delete_bucket or delete_object" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 76.7 } ], "editorialScores": { "ergonomics": 85, "maintenance": 88, "payments": 30, "reliability": 80, "schema": 81, "security": 85, "transparency": 73 }, "provenanceScore": 97, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install google-cloud-storage", "http": "curl -H \"Authorization: Bearer $(gcloud auth print-access-token)\" \"https://storage.googleapis.com/storage/v1/b?project=PROJECT_ID\"" }, "letme": { "capability": "https://letme.dev/storage.object", "tool": "https://letme.dev/google-cloud-storage" }, "sameCompany": [ "gemini-api", "vertex-ai", "gemini-embedding", "vertex-ai-tuning", "cloud-run-gpus", "google-model-armor", "google-imagen", "google-veo", "google-lyria", "google-speech-to-text", "google-cloud-tts", "gemini-live", "google-adk", "google-memory-bank", "google-secret-manager", "google-cloud-document-ai", "google-weather-api", "chrome-devtools-mcp", "google-maps-platform", "google-cloud-translation", "google-calendar-api", "firebase-cloud-messaging", "google-drive-api", "gemini-enterprise", "gemini-cli", "google-search-console", "google-ads-api", "google-forms", "google-sheets-api", "gmail-api", "google-people-api" ], "area": "everyday", "unitPrices": [ { "item": "Class A operation, Standard, regional", "unit": "1k-requests", "usd": 0.005, "note": "Flat namespace; $0.0065 with hierarchical namespace" }, { "item": "Class B operation, Standard, regional", "unit": "1k-requests", "usd": 0.0004, "note": "Flat namespace; $0.0005 with hierarchical namespace" }, { "item": "Standard storage, dual-region example", "unit": "gb-month", "usd": 0.022, "note": "Per the pricing page's Iowa and Oregon dual-region example; regional rates vary by location" } ], "provenance": { "legalEntity": "Google LLC (Google Cloud EMEA Limited and other regional entities by billing address)", "domain": "google.com", "domainRegistered": "1997-09-15", "endpointOnVendorDomain": true, "terms": "https://cloud.google.com/terms", "privacy": "https://policies.google.com/privacy", "statusPage": "https://status.cloud.google.com", "changelog": "https://docs.cloud.google.com/storage/docs/release-notes", "securityTxt": "valid", "checked": "2026-11-06", "notes": [ "Legal entity, terms, privacy and security.txt follow the Google Cloud provenance in data/tools/google-secret-manager.json (checked 1 November 2026); not re-read for this listing.", "status.cloud.google.com/robots.txt allows all; its incidents.json was read on 6 November 2026.", "The API lives at storage.googleapis.com and the docs at docs.cloud.google.com, both Google domains." ], "score": 97 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/google-cloud-storage.json", "live": { "slug": "google-cloud-storage", "probe": { "target": "https://storage.googleapis.com/storage/mcp", "method": "get", "lastAt": "2026-11-07T22:55:59.189450942Z", "lastOk": true, "lastStatus": 405, "lastMs": 77, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 46, "p95ms24h": 121, "samples24h": 244, "samples30d": 246, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 233, "ok": 233 } ] }, "versions": [ { "registry": "npm", "name": "@google-cloud/storage", "version": "8.4.0", "seenAt": "2026-11-06T23:29:10.718971869Z" }, { "registry": "pypi", "name": "google-cloud-storage", "version": "3.17.1", "released": "2026-10-15", "seenAt": "2026-11-06T23:29:11.680918026Z" } ], "npmWeekly": 26901222, "pypiWeekly": 39461441, "securityTxt": { "url": "https://google.com/.well-known/security.txt", "state": "valid", "expires": "2030-04-01T00:00:00z", "checkedAt": "2026-11-07T16:01:22.068349931Z" }, "pages": [ { "url": "https://docs.cloud.google.com/storage/docs/release-notes", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:05:53.84257971Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "2d3b4b4b1622" } ], "updatedAt": "2026-11-07T22:55:59.189450942Z" } }, "edges": [ { "by": 20, "category": "reliability", "leads": "google-cloud-storage", "name": "Reliability", "reasons": { "a": "Statuspage at status.dropbox.com with 12 components, the API and the MCP Server among them (20). history.atom, read on 1 November 2026, covers the 90 days from 3 August. One incident touches the API, \"Dropbox is not working as expected for some users\" on 21 August 2026 (13:18 to 15:12 UTC, Desktop Application, Mobile Application and API), partial and so minor. Website routes for some customers on 9 September, telephone support during an AWS outage on 3 and 4 September and Dropbox Protect on 25 and 26 August don't touch the API, and the 22 September and 13 October windows were announced maintenance. Minor incidents only (20). The performance guide says \"Dropbox does not publish exact rate limits\" (0). The guide says rate-limited responses always carry Retry-After in seconds and that the retries count against the limit, the error guide gives exponential backoff when the header is missing, and too_many_write_operations flags namespace write contention (15). No SLA found (0). The API is GA and the MCP server in open beta per its help page, updated 30 September 2026 (5). The 1 October reading of 12 rested on a window we could only partly read.", "b": "Google Cloud's status dashboard with a per-product incident feed (20). In the 90 days from 8 August, Cloud Storage appears in a high-severity incident on 20 August across 27 products (about 3 hours 40 minutes of timeouts and errors), a medium incident on 8 to 9 October with elevated upload and write errors, and a medium regional incident in europe-west2 on 20 October. One major outage (10). The request-rate guide gives numbers, no ramp-up needed below 1,000 writes or 5,000 reads a second per bucket, with gradual ramping above (15). The retry strategy page lists retryable responses, idempotent operations and preconditions that make writes safe to retry, and the client libraries back off exponentially (15). SLA with monthly uptime of 99.95 per cent for multi-region Standard and 99.9 per cent regional (10). Generally available, and the MCP server since 20 April 2026 (10). 20 + 10 + 15 + 15 + 10 + 10 = 80." }, "scores": { "a": 60, "b": 80 } }, { "by": 20, "category": "transparency", "leads": "google-cloud-storage", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service; the SDKs and the Stone spec are MIT (18). Privacy policy (posted 30 May 2025, deletion starts 30 days after an account is deleted) and developer terms (effective 1 March 2025) with named contracting entities; no DPA read (18). Deprecated routes marked in the spec, and the certificate change that broke old SDKs in January 2026 was announced on 26 June 2024, though the spec dropped the deprecated remove_file_member route on 21 October 2026 with no removal date given (15). The trust centre links a Dropbox sub-processor list, which returned only its title to our reader, and the privacy policy says data is stored in the United States and other locations (10).", "b": "Closed service under the Google Cloud terms; client libraries are Apache-2.0 (18). Google's privacy policy, the Cloud Data Processing Addendum and a sub-processor list last modified 19 October 2026 apply, per the Secret Manager listing's 1 November check (22). Dated notices in release notes and a deprecated read_text MCP tool that names its replacement; Google Cloud's deprecation policy wasn't re-read today (15). Sub-processors are listed with locations, and each bucket is created in a chosen location (18). 18 + 22 + 15 + 18 = 73." }, "scores": { "a": 65, "b": 85 } }, { "by": 10, "category": "schema", "leads": "dropbox-api", "name": "Schema \u0026 documentation", "reasons": { "a": "No OpenAPI, but the whole API is a public Stone spec, 276 routes with typed arguments, results and error unions, updated by a bot on 31 October 2026 (25). Docs at docs.dropboxapi.com with llms.txt indexes and a Markdown version of any page (10). Route descriptions say what a call does and how it fails, download_transform_output for example names the errors for an expired or foreign handle (16). Typed fields with length limits and unions in place of free-form JSON (15). 173 examples in files.stone alone and a typed error for every route (15). API v2, deprecated routes marked in the spec, but no human-written changelog beyond the developer blog (10).", "b": "The JSON API is described by a public Google API Discovery document, storage v1 revision 20261103 (25). docs.cloud.google.com/llms.txt and /storage/llms.txt return 404 (0). The reference explains each method and the docs say when to use XML, JSON or gRPC and that gsutil is legacy (14). Typed resources with enums for storage classes and predefined ACLs (14). Samples in every client library and an error reference with HTTP codes and reasons (13). API version v1 and dated release notes, the latest on 4 November 2026 (15). 25 + 0 + 14 + 14 + 13 + 15 = 81." }, "scores": { "a": 91, "b": 81 } }, { "by": 8, "category": "ergonomics", "leads": "google-cloud-storage", "name": "Agent ergonomics", "reasons": { "a": "About 25 MCP tools, with no toolsets or read-only subset we could find (15). list_folder takes a limit and returns a cursor for list_folder/continue, and search takes max_results (20). Typed error tags such as path/not_found and retry_after an agent can act on (18). Upload sessions resume by offset, and writes can be conditional on a revision; MCP annotations unchecked (12). Official SDKs in Python, JavaScript, Java, .NET and Swift, but content endpoints take their arguments in a Dropbox-API-Arg header (12).", "b": "Graded as an API with a nine-tool MCP server. The fields parameter selects partial responses, and Range reads fetch part of an object (22). maxResults and pageToken paging, prefix and delimiter filters and match globs (20). JSON errors with code, message and reason, and a documented retry table (16). Generation and metageneration preconditions make retries safe; the MCP reference gives no read-only or destructive annotations (14). Client libraries in many languages with retries on by default, but every call needs Google auth and a project (13). 22 + 20 + 16 + 14 + 13 = 85." }, "scores": { "a": 77, "b": 85 } }, { "by": 7, "category": "security", "leads": "google-cloud-storage", "name": "Security \u0026 auth", "reasons": { "a": "OAuth 2.0 with granular scopes per route (files.metadata.read, files.content.write, sharing.write and so on), short-lived access tokens with refresh tokens, and App folder apps limited to one folder (30). Read-only scopes and App folder access, and team admins can block app connections, but no documented confirmation for deletes (15). The MCP server reads file contents from shared folders into the model, and we found no prompt-injection guidance (3). Business teams get an audit log through the team_log routes; personal accounts see linked apps only (12). A paid bug bounty and a separate disclosure programme on Intigriti, named in www.dropbox.com/.well-known/security.txt, which lacks the RFC 9116 Contact and Expires fields. The trust centre lists Dropbox SOC 1, 2 and 3 reports for October 2024 to September 2025 and ISO 27001, 27017, 27018, 27701 and 22301 certificates (18 of 20, as dropbox-sign on the same programme). The 1 October note of 13 hadn't read the certifications.", "b": "IAM roles on project, bucket and managed folder, V4 signed URLs, and an IAM permission per MCP method (mcp.tools.call plus the storage permission, such as storage.objects.delete for delete_object) (30). Read-only roles such as Storage Object Viewer, grantable down to a managed folder, soft delete with a pausable hard-deletion window and retention locks, but no confirmation step on delete_bucket or delete_object (17). read_object returns stored content to the model with no untrusted-content guidance on the MCP page (5). Cloud Audit Logs with Admin Activity and Data Access entries (15). google.com security.txt is valid to 2030-04-01 with a VRP policy link, per the Secret Manager listing's 1 November check, and Google Cloud publishes security bulletins; Cloud Storage's place in the SOC 2 scope wasn't read today (18). 30 + 17 + 5 + 15 + 18 = 85." }, "scores": { "a": 78, "b": 85 } }, { "by": 5, "category": "payments", "leads": "dropbox-api", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402 (0). The API and MCP server cost nothing beyond the account's plan, and plan prices are public (15). A free Basic account works with the API and the MCP server (20). A person signs in through OAuth, and production apps need Dropbox's approval (0).", "b": "No x402, MPP or L402 (0). Per-operation and per-GB prices public without login, though the regional storage table draws by script (20). Always Free covers 5 GB-months and small operation counts in three US regions, but a Google Cloud billing account is needed; whether a card is required wasn't confirmed today (10). A person creates the project and billing account in a browser (0). 0 + 20 + 10 + 0 = 30." }, "scores": { "a": 35, "b": 30 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Dropbox", "b": "Google Cloud", "name": "Vendor" }, { "a": "https://api.dropboxapi.com/2", "b": "https://storage.googleapis.com/storage/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "Streamable HTTP", "name": "Transports" }, { "a": "OAuth", "b": "OAuth", "name": "Auth" }, { "a": "Your plan", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "none", "name": "Licence" }, { "a": "25", "b": "9", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-31", "b": "2026-11-04", "name": "Last release" }, { "a": "2025-03-01", "b": "2026-09-02", "name": "Terms last updated" }, { "a": "2027-01-01", "b": "2026-10-01", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "yes", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "980 stars, 282k npm/wk, 398k PyPI/wk", "b": "none", "name": "Popularity" }, { "a": "3/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Google Cloud Storage scores 76.7 (BB) on agent readiness against Dropbox API + MCP's 64.9 (B), and leads in 4 of 7 scored categories. Dropbox API + MCP leads on schema \u0026 documentation and payments \u0026 pricing.", "question": "Which is better for AI agents, Dropbox API + MCP or Google Cloud Storage?" }, { "answer": "Both use an OAuth sign-in.", "question": "Do Dropbox API + MCP and Google Cloud Storage need an API key?" }, { "answer": "Yes. Dropbox API + MCP has a hosted endpoint at https://api.dropboxapi.com/2 and Google Cloud Storage at https://storage.googleapis.com/storage/mcp.", "question": "Can an agent call Dropbox API + MCP and Google Cloud Storage without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 91 against 81", "Payments \u0026 pricing, 35 against 30" ], "also": null, "goodFor": "An agent acting on a person's or team's existing Dropbox files, especially a solo user on the free plan.", "slug": "dropbox-api", "watchFor": "MCP server is beta, extracts at most 5 MB per file and can be blocked by team admins" }, { "aheadOn": [ "Reliability, 80 against 60", "Agent ergonomics, 85 against 77", "Security \u0026 auth, 85 against 78", "Transparency \u0026 trust, 85 against 65" ], "also": [ "Agent-ready, a grade of BB or better", "No incidents deducted, where Dropbox API + MCP loses 6 points for them" ], "goodFor": "Agents on Google Cloud that store and share files and datasets. amazon-s3, azure-blob-storage and cloudflare-r2 are the closest listings; teams outside Google Cloud with S3 tooling may prefer S3-compatible stores.", "slug": "google-cloud-storage", "watchFor": "MCP tools carry no read-only or destructive annotations and deletes need no confirmation" } ], "history": { "dropbox-api": [ { "causes": [ "evidence", "event" ], "date": "2026-11-01", "delta": -3.5, "from": 68.4, "fromGrade": "B", "to": 64.9, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.2, "from": 68.2, "fromGrade": "B", "to": 68.4, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": 0, "from": 68.2, "fromGrade": "B", "to": 68.2, "toGrade": "B" } ], "google-cloud-storage": null }, "job": { "capability": "storage.share", "name": "File sharing" }, "others": [ { "json": "https://www.anchorterminal.com/compare/amazon-s3-vs-dropbox-api.json", "title": "Amazon S3 vs Dropbox API + MCP", "url": "https://www.anchorterminal.com/compare/amazon-s3-vs-dropbox-api" }, { "json": "https://www.anchorterminal.com/compare/azure-blob-storage-vs-dropbox-api.json", "title": "Azure Blob Storage vs Dropbox API + MCP", "url": "https://www.anchorterminal.com/compare/azure-blob-storage-vs-dropbox-api" }, { "json": "https://www.anchorterminal.com/compare/backblaze-b2-vs-dropbox-api.json", "title": "Backblaze B2 vs Dropbox API + MCP", "url": "https://www.anchorterminal.com/compare/backblaze-b2-vs-dropbox-api" }, { "json": "https://www.anchorterminal.com/compare/box-api-vs-google-cloud-storage.json", "title": "Box API + MCP vs Google Cloud Storage", "url": "https://www.anchorterminal.com/compare/box-api-vs-google-cloud-storage" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-r2-vs-dropbox-api.json", "title": "Cloudflare R2 vs Dropbox API + MCP", "url": "https://www.anchorterminal.com/compare/cloudflare-r2-vs-dropbox-api" }, { "json": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-dropbox-api.json", "title": "DigitalOcean Spaces vs Dropbox API + MCP", "url": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-dropbox-api" }, { "json": "https://www.anchorterminal.com/compare/dropbox-api-vs-tigris.json", "title": "Dropbox API + MCP vs Tigris", "url": "https://www.anchorterminal.com/compare/dropbox-api-vs-tigris" }, { "json": "https://www.anchorterminal.com/compare/fast-io-vs-google-cloud-storage.json", "title": "Fastio vs Google Cloud Storage", "url": "https://www.anchorterminal.com/compare/fast-io-vs-google-cloud-storage" }, { "json": "https://www.anchorterminal.com/compare/google-cloud-storage-vs-google-drive-api.json", "title": "Google Cloud Storage vs Google Drive API + MCP", "url": "https://www.anchorterminal.com/compare/google-cloud-storage-vs-google-drive-api" }, { "json": "https://www.anchorterminal.com/compare/google-cloud-storage-vs-onlyoffice-mcp.json", "title": "Google Cloud Storage vs ONLYOFFICE Apps MCP Server", "url": "https://www.anchorterminal.com/compare/google-cloud-storage-vs-onlyoffice-mcp" }, { "json": "https://www.anchorterminal.com/compare/amazon-s3-vs-google-cloud-storage.json", "title": "Amazon S3 vs Google Cloud Storage", "url": "https://www.anchorterminal.com/compare/amazon-s3-vs-google-cloud-storage" }, { "json": "https://www.anchorterminal.com/compare/azure-blob-storage-vs-google-cloud-storage.json", "title": "Azure Blob Storage vs Google Cloud Storage", "url": "https://www.anchorterminal.com/compare/azure-blob-storage-vs-google-cloud-storage" }, { "json": "https://www.anchorterminal.com/compare/backblaze-b2-vs-google-cloud-storage.json", "title": "Backblaze B2 vs Google Cloud Storage", "url": "https://www.anchorterminal.com/compare/backblaze-b2-vs-google-cloud-storage" }, { "json": "https://www.anchorterminal.com/compare/bunny-storage-vs-google-cloud-storage.json", "title": "Bunny Storage vs Google Cloud Storage", "url": "https://www.anchorterminal.com/compare/bunny-storage-vs-google-cloud-storage" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-r2-vs-google-cloud-storage.json", "title": "Cloudflare R2 vs Google Cloud Storage", "url": "https://www.anchorterminal.com/compare/cloudflare-r2-vs-google-cloud-storage" }, { "json": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-google-cloud-storage.json", "title": "DigitalOcean Spaces vs Google Cloud Storage", "url": "https://www.anchorterminal.com/compare/digitalocean-spaces-vs-google-cloud-storage" }, { "json": "https://www.anchorterminal.com/compare/google-cloud-storage-vs-tigris.json", "title": "Google Cloud Storage vs Tigris", "url": "https://www.anchorterminal.com/compare/google-cloud-storage-vs-tigris" }, { "json": "https://www.anchorterminal.com/compare/google-cloud-storage-vs-wasabi-hot-cloud-storage.json", "title": "Google Cloud Storage vs Wasabi Hot Cloud Storage", "url": "https://www.anchorterminal.com/compare/google-cloud-storage-vs-wasabi-hot-cloud-storage" }, { "json": "https://www.anchorterminal.com/compare/box-api-vs-dropbox-api.json", "title": "Box API + MCP vs Dropbox API + MCP", "url": "https://www.anchorterminal.com/compare/box-api-vs-dropbox-api" }, { "json": "https://www.anchorterminal.com/compare/dropbox-api-vs-fast-io.json", "title": "Dropbox API + MCP vs Fastio", "url": "https://www.anchorterminal.com/compare/dropbox-api-vs-fast-io" }, { "json": "https://www.anchorterminal.com/compare/dropbox-api-vs-google-drive-api.json", "title": "Dropbox API + MCP vs Google Drive API + MCP", "url": "https://www.anchorterminal.com/compare/dropbox-api-vs-google-drive-api" }, { "json": "https://www.anchorterminal.com/compare/dropbox-api-vs-onedrive-sharepoint.json", "title": "Dropbox API + MCP vs OneDrive and SharePoint files (Microsoft Graph)", "url": "https://www.anchorterminal.com/compare/dropbox-api-vs-onedrive-sharepoint" }, { "json": "https://www.anchorterminal.com/compare/dropbox-api-vs-onlyoffice-mcp.json", "title": "Dropbox API + MCP vs ONLYOFFICE Apps MCP Server", "url": "https://www.anchorterminal.com/compare/dropbox-api-vs-onlyoffice-mcp" }, { "json": "https://www.anchorterminal.com/compare/google-cloud-storage-vs-onedrive-sharepoint.json", "title": "Google Cloud Storage vs OneDrive and SharePoint files (Microsoft Graph)", "url": "https://www.anchorterminal.com/compare/google-cloud-storage-vs-onedrive-sharepoint" } ], "panel": null, "scores": [ { "by": 20, "dropbox-api": 60, "edge": "google-cloud-storage", "google-cloud-storage": 80, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 10, "dropbox-api": 91, "edge": "dropbox-api", "google-cloud-storage": 81, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 8, "dropbox-api": 77, "edge": "google-cloud-storage", "google-cloud-storage": 85, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 7, "dropbox-api": 78, "edge": "google-cloud-storage", "google-cloud-storage": 85, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 5, "dropbox-api": 35, "edge": "dropbox-api", "google-cloud-storage": 30, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 2, "dropbox-api": 90, "edge": "dropbox-api", "google-cloud-storage": 88, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 20, "dropbox-api": 65, "edge": "google-cloud-storage", "google-cloud-storage": 85, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Google Cloud Storage scores 76.7 (BB) on agent readiness against Dropbox API + MCP's 64.9 (B), and leads in 4 of 7 scored categories. Dropbox API + MCP leads on schema \u0026 documentation and payments \u0026 pricing. Both do file sharing.", "tasks": null, "tutorials": [], "verdicts": { "dropbox-api": "Typed Stone spec of 276 routes with per-route OAuth scopes and error unions, updated 31 October 2026, and a paid bug bounty with SOC 2 and ISO 27001 reports. No numeric rate limits are published, the MCP server is still beta, and October patch releases of the Python SDK removed public methods without dated notice.", "google-cloud-storage": "IAM per bucket and MCP method, signed URLs, preconditions for safe retries and a 99.95 per cent multi-region SLA make it a well-governed object store for agents. The nine-tool MCP server has no read-only or destructive annotations, reads stop at 8 MiB, and a person must set up a project and billing first." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/dropbox-api-vs-google-cloud-storage", "json": "https://www.anchorterminal.com/compare/dropbox-api-vs-google-cloud-storage.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/dropbox-api-vs-google-cloud-storage.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/dropbox-api-vs-google-cloud-storage.min.md" }, "markdown": "Google Cloud Storage scores 76.7 (BB) on agent readiness against Dropbox API + MCP's 64.9 (B), and leads in 4 of 7 scored categories. Dropbox API + MCP leads on schema \u0026 documentation and payments \u0026 pricing. Both do file sharing.\n\n- Dropbox API + MCP: grade B, 64.9/100, rank #447 of 1510. Markdown https://www.anchorterminal.com/tools/dropbox-api.md · JSON https://www.anchorterminal.com/api/v1/tools/dropbox-api.json\n- Google Cloud Storage: grade BB, 76.7/100, rank #41 of 1510. Markdown https://www.anchorterminal.com/tools/google-cloud-storage.md · JSON https://www.anchorterminal.com/api/v1/tools/google-cloud-storage.json\n- Best file storage and sharing APIs for AI agents: https://www.anchorterminal.com/best/file-storage/index.md\n- All 105 storage comparisons: https://www.anchorterminal.com/compare/file-storage/index.md\n\n## Which one, for what\n\n### Dropbox API + MCP (B)\n\nGood for: An agent acting on a person's or team's existing Dropbox files, especially a solo user on the free plan.\n\nAhead on:\n- Schema \u0026 documentation, 91 against 81\n- Payments \u0026 pricing, 35 against 30\n\nWatch for: MCP server is beta, extracts at most 5 MB per file and can be blocked by team admins\n\n### Google Cloud Storage (BB)\n\nGood for: Agents on Google Cloud that store and share files and datasets. amazon-s3, azure-blob-storage and cloudflare-r2 are the closest listings; teams outside Google Cloud with S3 tooling may prefer S3-compatible stores.\n\nAhead on:\n- Reliability, 80 against 60\n- Agent ergonomics, 85 against 77\n- Security \u0026 auth, 85 against 78\n- Transparency \u0026 trust, 85 against 65\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- No incidents deducted, where Dropbox API + MCP loses 6 points for them\n\nWatch for: MCP tools carry no read-only or destructive annotations and deletes need no confirmation\n\n\n## Why the edge\n\n### Reliability: Google Cloud Storage +20\n\n- Dropbox API + MCP (60): Statuspage at status.dropbox.com with 12 components, the API and the MCP Server among them (20). history.atom, read on 1 November 2026, covers the 90 days from 3 August. One incident touches the API, \"Dropbox is not working as expected for some users\" on 21 August 2026 (13:18 to 15:12 UTC, Desktop Application, Mobile Application and API), partial and so minor. Website routes for some customers on 9 September, telephone support during an AWS outage on 3 and 4 September and Dropbox Protect on 25 and 26 August don't touch the API, and the 22 September and 13 October windows were announced maintenance. Minor incidents only (20). The performance guide says \"Dropbox does not publish exact rate limits\" (0). The guide says rate-limited responses always carry Retry-After in seconds and that the retries count against the limit, the error guide gives exponential backoff when the header is missing, and too_many_write_operations flags namespace write contention (15). No SLA found (0). The API is GA and the MCP server in open beta per its help page, updated 30 September 2026 (5). The 1 October reading of 12 rested on a window we could only partly read.\n- Google Cloud Storage (80): Google Cloud's status dashboard with a per-product incident feed (20). In the 90 days from 8 August, Cloud Storage appears in a high-severity incident on 20 August across 27 products (about 3 hours 40 minutes of timeouts and errors), a medium incident on 8 to 9 October with elevated upload and write errors, and a medium regional incident in europe-west2 on 20 October. One major outage (10). The request-rate guide gives numbers, no ramp-up needed below 1,000 writes or 5,000 reads a second per bucket, with gradual ramping above (15). The retry strategy page lists retryable responses, idempotent operations and preconditions that make writes safe to retry, and the client libraries back off exponentially (15). SLA with monthly uptime of 99.95 per cent for multi-region Standard and 99.9 per cent regional (10). Generally available, and the MCP server since 20 April 2026 (10). 20 + 10 + 15 + 15 + 10 + 10 = 80.\n\n### Transparency \u0026 trust: Google Cloud Storage +20\n\n- Dropbox API + MCP (65): Closed service; the SDKs and the Stone spec are MIT (18). Privacy policy (posted 30 May 2025, deletion starts 30 days after an account is deleted) and developer terms (effective 1 March 2025) with named contracting entities; no DPA read (18). Deprecated routes marked in the spec, and the certificate change that broke old SDKs in January 2026 was announced on 26 June 2024, though the spec dropped the deprecated remove_file_member route on 21 October 2026 with no removal date given (15). The trust centre links a Dropbox sub-processor list, which returned only its title to our reader, and the privacy policy says data is stored in the United States and other locations (10).\n- Google Cloud Storage (85): Closed service under the Google Cloud terms; client libraries are Apache-2.0 (18). Google's privacy policy, the Cloud Data Processing Addendum and a sub-processor list last modified 19 October 2026 apply, per the Secret Manager listing's 1 November check (22). Dated notices in release notes and a deprecated read_text MCP tool that names its replacement; Google Cloud's deprecation policy wasn't re-read today (15). Sub-processors are listed with locations, and each bucket is created in a chosen location (18). 18 + 22 + 15 + 18 = 73.\n\n### Schema \u0026 documentation: Dropbox API + MCP +10\n\n- Dropbox API + MCP (91): No OpenAPI, but the whole API is a public Stone spec, 276 routes with typed arguments, results and error unions, updated by a bot on 31 October 2026 (25). Docs at docs.dropboxapi.com with llms.txt indexes and a Markdown version of any page (10). Route descriptions say what a call does and how it fails, download_transform_output for example names the errors for an expired or foreign handle (16). Typed fields with length limits and unions in place of free-form JSON (15). 173 examples in files.stone alone and a typed error for every route (15). API v2, deprecated routes marked in the spec, but no human-written changelog beyond the developer blog (10).\n- Google Cloud Storage (81): The JSON API is described by a public Google API Discovery document, storage v1 revision 20261103 (25). docs.cloud.google.com/llms.txt and /storage/llms.txt return 404 (0). The reference explains each method and the docs say when to use XML, JSON or gRPC and that gsutil is legacy (14). Typed resources with enums for storage classes and predefined ACLs (14). Samples in every client library and an error reference with HTTP codes and reasons (13). API version v1 and dated release notes, the latest on 4 November 2026 (15). 25 + 0 + 14 + 14 + 13 + 15 = 81.\n\n### Agent ergonomics: Google Cloud Storage +8\n\n- Dropbox API + MCP (77): About 25 MCP tools, with no toolsets or read-only subset we could find (15). list_folder takes a limit and returns a cursor for list_folder/continue, and search takes max_results (20). Typed error tags such as path/not_found and retry_after an agent can act on (18). Upload sessions resume by offset, and writes can be conditional on a revision; MCP annotations unchecked (12). Official SDKs in Python, JavaScript, Java, .NET and Swift, but content endpoints take their arguments in a Dropbox-API-Arg header (12).\n- Google Cloud Storage (85): Graded as an API with a nine-tool MCP server. The fields parameter selects partial responses, and Range reads fetch part of an object (22). maxResults and pageToken paging, prefix and delimiter filters and match globs (20). JSON errors with code, message and reason, and a documented retry table (16). Generation and metageneration preconditions make retries safe; the MCP reference gives no read-only or destructive annotations (14). Client libraries in many languages with retries on by default, but every call needs Google auth and a project (13). 22 + 20 + 16 + 14 + 13 = 85.\n\n### Security \u0026 auth: Google Cloud Storage +7\n\n- Dropbox API + MCP (78): OAuth 2.0 with granular scopes per route (files.metadata.read, files.content.write, sharing.write and so on), short-lived access tokens with refresh tokens, and App folder apps limited to one folder (30). Read-only scopes and App folder access, and team admins can block app connections, but no documented confirmation for deletes (15). The MCP server reads file contents from shared folders into the model, and we found no prompt-injection guidance (3). Business teams get an audit log through the team_log routes; personal accounts see linked apps only (12). A paid bug bounty and a separate disclosure programme on Intigriti, named in www.dropbox.com/.well-known/security.txt, which lacks the RFC 9116 Contact and Expires fields. The trust centre lists Dropbox SOC 1, 2 and 3 reports for October 2024 to September 2025 and ISO 27001, 27017, 27018, 27701 and 22301 certificates (18 of 20, as dropbox-sign on the same programme). The 1 October note of 13 hadn't read the certifications.\n- Google Cloud Storage (85): IAM roles on project, bucket and managed folder, V4 signed URLs, and an IAM permission per MCP method (mcp.tools.call plus the storage permission, such as storage.objects.delete for delete_object) (30). Read-only roles such as Storage Object Viewer, grantable down to a managed folder, soft delete with a pausable hard-deletion window and retention locks, but no confirmation step on delete_bucket or delete_object (17). read_object returns stored content to the model with no untrusted-content guidance on the MCP page (5). Cloud Audit Logs with Admin Activity and Data Access entries (15). google.com security.txt is valid to 2030-04-01 with a VRP policy link, per the Secret Manager listing's 1 November check, and Google Cloud publishes security bulletins; Cloud Storage's place in the SOC 2 scope wasn't read today (18). 30 + 17 + 5 + 15 + 18 = 85.\n\n### Payments \u0026 pricing: Dropbox API + MCP +5\n\n- Dropbox API + MCP (35): No x402, MPP or L402 (0). The API and MCP server cost nothing beyond the account's plan, and plan prices are public (15). A free Basic account works with the API and the MCP server (20). A person signs in through OAuth, and production apps need Dropbox's approval (0).\n- Google Cloud Storage (30): No x402, MPP or L402 (0). Per-operation and per-GB prices public without login, though the regional storage table draws by script (20). Always Free covers 5 GB-months and small operation counts in three US regions, but a Google Cloud billing account is needed; whether a card is required wasn't confirmed today (10). A person creates the project and billing account in a browser (0). 0 + 20 + 10 + 0 = 30.\n\n## Score by category\n\n| Category | Weight | Dropbox API + MCP | Google Cloud Storage | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 60 | 80 | Google Cloud Storage +20 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 91 | 81 | Dropbox API + MCP +10 |\n| Agent ergonomics | 13% (16.2 this run) | 77 | 85 | Google Cloud Storage +8 |\n| Security \u0026 auth | 14% (17.5 this run) | 78 | 85 | Google Cloud Storage +7 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 35 | 30 | Dropbox API + MCP +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 90 | 88 | Dropbox API + MCP +2 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 65 | 85 | Google Cloud Storage +20 |\n| Negative events | ≤15 | -6 | 0 | |\n| **Total** | | **64.9 · B** | **76.7 · BB** | |\n\n## Facts side by side\n\n| Fact | Dropbox API + MCP | Google Cloud Storage |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Dropbox | Google Cloud |\n| Hosted endpoint | `https://api.dropboxapi.com/2` | `https://storage.googleapis.com/storage/mcp` |\n| Transports | HTTP, Streamable HTTP | Streamable HTTP |\n| Auth | OAuth | OAuth |\n| Pricing | Your plan | Pay per use |\n| x402 | no | no |\n| Licence | MIT | none |\n| Tools exposed | 25 | 9 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-31 | 2026-11-04 |\n| Terms last updated | 2025-03-01 | 2026-09-02 |\n| Privacy policy last updated | 2027-01-01 | 2026-10-01 |\n| Customer content may train models | not found in the text | yes |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | yes | not found in the text |\n| Popularity | 980 stars, 282k npm/wk, 398k PyPI/wk | none |\n| Agent reviews | 3/5 (2) | none |\n\n## How the scores have moved\n\n### Dropbox API + MCP\n\n- -3.5 on 1 November 2026: new evidence, negative event\n- +0.2 on 27 October 2026: checklist\n- no change on 8 October 2026: checklist\n\n### Google Cloud Storage\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Dropbox API + MCP.** Typed Stone spec of 276 routes with per-route OAuth scopes and error unions, updated 31 October 2026, and a paid bug bounty with SOC 2 and ISO 27001 reports. No numeric rate limits are published, the MCP server is still beta, and October patch releases of the Python SDK removed public methods without dated notice.\n\n**Google Cloud Storage.** IAM per bucket and MCP method, signed URLs, preconditions for safe retries and a 99.95 per cent multi-region SLA make it a well-governed object store for agents. The nine-tool MCP server has no read-only or destructive annotations, reads stop at 8 MiB, and a person must set up a project and billing first.\n\n## Before you call either\n\n### Dropbox API + MCP\n\n1. Use files/upload under 150 MiB and upload_session above it; append in multiples of 4 MiB and finish within 7 days\n2. For a link that just needs to work for a few hours, call files/get_temporary_link rather than creating a shared link you then have to revoke\n3. Set expires on create_shared_link_with_settings only on a paid account; a Basic account gets an error\n4. On a 429 wait the Retry-After seconds; too_many_write_operations means write contention, so serialise writes to the namespace\n5. Pin the dropbox Python package and use v12.2.4 or later if you pass scope= to Dropbox(); earlier versions widened the token on refresh\n\n### Google Cloud Storage\n\n1. Grant the agent's service account only Storage Object Viewer or Creator on the bucket it needs\n2. Send ifGenerationMatch on writes and deletes so a retry can't overwrite a newer object\n3. Use a V4 signed URL to share an object rather than changing bucket access\n4. Read objects over 8 MiB through the JSON API with Range, not the MCP read_object tool\n5. Confirm with the user before delete_bucket or delete_object\n\n## Questions\n\n### Which is better for AI agents, Dropbox API + MCP or Google Cloud Storage?\n\nGoogle Cloud Storage scores 76.7 (BB) on agent readiness against Dropbox API + MCP's 64.9 (B), and leads in 4 of 7 scored categories. Dropbox API + MCP leads on schema \u0026 documentation and payments \u0026 pricing.\n\n### Do Dropbox API + MCP and Google Cloud Storage need an API key?\n\nBoth use an OAuth sign-in.\n\n### Can an agent call Dropbox API + MCP and Google Cloud Storage without installing anything?\n\nYes. Dropbox API + MCP has a hosted endpoint at https://api.dropboxapi.com/2 and Google Cloud Storage at https://storage.googleapis.com/storage/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/dropbox-api-vs-google-cloud-storage.json, and with the fewest tokens: https://www.anchorterminal.com/compare/dropbox-api-vs-google-cloud-storage.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"dropbox-api\", \"b\": \"google-cloud-storage\"}`. From a terminal: `anchor compare dropbox-api google-cloud-storage`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/dropbox-api.json and https://www.anchorterminal.com/api/v1/tools/google-cloud-storage.json\n\n## Other comparisons with Dropbox API + MCP or Google Cloud Storage\n\n- [Amazon S3 vs Dropbox API + MCP](https://www.anchorterminal.com/compare/amazon-s3-vs-dropbox-api.md)\n- [Azure Blob Storage vs Dropbox API + MCP](https://www.anchorterminal.com/compare/azure-blob-storage-vs-dropbox-api.md)\n- [Backblaze B2 vs Dropbox API + MCP](https://www.anchorterminal.com/compare/backblaze-b2-vs-dropbox-api.md)\n- [Box API + MCP vs Google Cloud Storage](https://www.anchorterminal.com/compare/box-api-vs-google-cloud-storage.md)\n- [Cloudflare R2 vs Dropbox API + MCP](https://www.anchorterminal.com/compare/cloudflare-r2-vs-dropbox-api.md)\n- [DigitalOcean Spaces vs Dropbox API + MCP](https://www.anchorterminal.com/compare/digitalocean-spaces-vs-dropbox-api.md)\n- [Dropbox API + MCP vs Tigris](https://www.anchorterminal.com/compare/dropbox-api-vs-tigris.md)\n- [Fastio vs Google Cloud Storage](https://www.anchorterminal.com/compare/fast-io-vs-google-cloud-storage.md)\n- [Google Cloud Storage vs Google Drive API + MCP](https://www.anchorterminal.com/compare/google-cloud-storage-vs-google-drive-api.md)\n- [Google Cloud Storage vs ONLYOFFICE Apps MCP Server](https://www.anchorterminal.com/compare/google-cloud-storage-vs-onlyoffice-mcp.md)\n- [Amazon S3 vs Google Cloud Storage](https://www.anchorterminal.com/compare/amazon-s3-vs-google-cloud-storage.md)\n- [Azure Blob Storage vs Google Cloud Storage](https://www.anchorterminal.com/compare/azure-blob-storage-vs-google-cloud-storage.md)\n- [Backblaze B2 vs Google Cloud Storage](https://www.anchorterminal.com/compare/backblaze-b2-vs-google-cloud-storage.md)\n- [Bunny Storage vs Google Cloud Storage](https://www.anchorterminal.com/compare/bunny-storage-vs-google-cloud-storage.md)\n- [Cloudflare R2 vs Google Cloud Storage](https://www.anchorterminal.com/compare/cloudflare-r2-vs-google-cloud-storage.md)\n- [DigitalOcean Spaces vs Google Cloud Storage](https://www.anchorterminal.com/compare/digitalocean-spaces-vs-google-cloud-storage.md)\n- [Google Cloud Storage vs Tigris](https://www.anchorterminal.com/compare/google-cloud-storage-vs-tigris.md)\n- [Google Cloud Storage vs Wasabi Hot Cloud Storage](https://www.anchorterminal.com/compare/google-cloud-storage-vs-wasabi-hot-cloud-storage.md)\n- [Box API + MCP vs Dropbox API + MCP](https://www.anchorterminal.com/compare/box-api-vs-dropbox-api.md)\n- [Dropbox API + MCP vs Fastio](https://www.anchorterminal.com/compare/dropbox-api-vs-fast-io.md)\n- [Dropbox API + MCP vs Google Drive API + MCP](https://www.anchorterminal.com/compare/dropbox-api-vs-google-drive-api.md)\n- [Dropbox API + MCP vs OneDrive and SharePoint files (Microsoft Graph)](https://www.anchorterminal.com/compare/dropbox-api-vs-onedrive-sharepoint.md)\n- [Dropbox API + MCP vs ONLYOFFICE Apps MCP Server](https://www.anchorterminal.com/compare/dropbox-api-vs-onlyoffice-mcp.md)\n- [Google Cloud Storage vs OneDrive and SharePoint files (Microsoft Graph)](https://www.anchorterminal.com/compare/google-cloud-storage-vs-onedrive-sharepoint.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Dropbox API + MCP vs Google Cloud Storage", "url": "" } ], "description": "Google Cloud Storage scores 76.7 (BB) to Dropbox's 64.9 (B) for file sharing. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Dropbox API + MCP B 64.9", "Google Cloud Storage BB 76.7", "scores" ], "h1": "Dropbox API + MCP vs Google Cloud Storage", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/dropbox-api-vs-google-cloud-storage", "published": "2026-10-01", "section": "tools", "title": "Dropbox vs Google Cloud Storage for AI agents (2026) | Anchor Terminal", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/dropbox-api-vs-google-cloud-storage" }, "tokens": { "markdown": 4900, "slim": 2880 }, "version": 1 }