# Dropbox API + MCP vs Google Cloud Storage

> Google Cloud Storage scores 76.7 (BB) to Dropbox's 64.9 (B) for file sharing. Prices, MCP, x402, uptime and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/dropbox-api-vs-google-cloud-storage
- Markdown: https://www.anchorterminal.com/compare/dropbox-api-vs-google-cloud-storage.md (~4,900 tokens)
- Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key)
- DNS: dig +short TXT <slug>.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.<category>. and <a>.vs.<b>. under the zone, and the same under grade.letme.dev)
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)
- Updated: 2026-11-07

Google Cloud Storage scores 76.7 (BB) on agent readiness against Dropbox API + MCP's 64.9 (B), and leads in 4 of 7 scored categories. Dropbox API + MCP leads on schema & documentation and payments & pricing. Both do file sharing.

- Dropbox API + MCP: grade B, 64.9/100, rank #445 of 1486. Markdown https://www.anchorterminal.com/tools/dropbox-api.md · JSON https://www.anchorterminal.com/api/v1/tools/dropbox-api.json
- Google Cloud Storage: grade BB, 76.7/100, rank #41 of 1486. Markdown https://www.anchorterminal.com/tools/google-cloud-storage.md · JSON https://www.anchorterminal.com/api/v1/tools/google-cloud-storage.json
- Best file storage and sharing APIs for AI agents: https://www.anchorterminal.com/best/file-storage/index.md
- All 104 storage comparisons: https://www.anchorterminal.com/compare/file-storage/index.md

## Which one, for what

### Dropbox API + MCP (B)

Good for: An agent acting on a person's or team's existing Dropbox files, especially a solo user on the free plan.

Ahead on:
- Schema & documentation, 91 against 81
- Payments & pricing, 35 against 30

Watch for: MCP server is beta, extracts at most 5 MB per file and can be blocked by team admins

### Google Cloud Storage (BB)

Good for: Agents on Google Cloud that store and share files and datasets. amazon-s3, azure-blob-storage and cloudflare-r2 are the closest listings; teams outside Google Cloud with S3 tooling may prefer S3-compatible stores.

Ahead on:
- Reliability, 80 against 60
- Agent ergonomics, 85 against 77
- Security & auth, 85 against 78
- Transparency & trust, 85 against 65

Also in its favour:
- Agent-ready, a grade of BB or better
- No incidents deducted, where Dropbox API + MCP loses 6 points for them

Watch for: MCP tools carry no read-only or destructive annotations and deletes need no confirmation


## Why the edge

### Reliability: Google Cloud Storage +20

- Dropbox API + MCP (60): Statuspage at status.dropbox.com with 12 components, the API and the MCP Server among them (20). history.atom, read on 1 November 2026, covers the 90 days from 3 August. One incident touches the API, "Dropbox is not working as expected for some users" on 21 August 2026 (13:18 to 15:12 UTC, Desktop Application, Mobile Application and API), partial and so minor. Website routes for some customers on 9 September, telephone support during an AWS outage on 3 and 4 September and Dropbox Protect on 25 and 26 August don't touch the API, and the 22 September and 13 October windows were announced maintenance. Minor incidents only (20). The performance guide says "Dropbox does not publish exact rate limits" (0). The guide says rate-limited responses always carry Retry-After in seconds and that the retries count against the limit, the error guide gives exponential backoff when the header is missing, and too_many_write_operations flags namespace write contention (15). No SLA found (0). The API is GA and the MCP server in open beta per its help page, updated 30 September 2026 (5). The 1 October reading of 12 rested on a window we could only partly read.
- Google Cloud Storage (80): Google Cloud's status dashboard with a per-product incident feed (20). In the 90 days from 8 August, Cloud Storage appears in a high-severity incident on 20 August across 27 products (about 3 hours 40 minutes of timeouts and errors), a medium incident on 8 to 9 October with elevated upload and write errors, and a medium regional incident in europe-west2 on 20 October. One major outage (10). The request-rate guide gives numbers, no ramp-up needed below 1,000 writes or 5,000 reads a second per bucket, with gradual ramping above (15). The retry strategy page lists retryable responses, idempotent operations and preconditions that make writes safe to retry, and the client libraries back off exponentially (15). SLA with monthly uptime of 99.95 per cent for multi-region Standard and 99.9 per cent regional (10). Generally available, and the MCP server since 20 April 2026 (10). 20 + 10 + 15 + 15 + 10 + 10 = 80.

### Transparency & trust: Google Cloud Storage +20

- Dropbox API + MCP (65): Closed service; the SDKs and the Stone spec are MIT (18). Privacy policy (posted 30 May 2025, deletion starts 30 days after an account is deleted) and developer terms (effective 1 March 2025) with named contracting entities; no DPA read (18). Deprecated routes marked in the spec, and the certificate change that broke old SDKs in January 2026 was announced on 26 June 2024, though the spec dropped the deprecated remove_file_member route on 21 October 2026 with no removal date given (15). The trust centre links a Dropbox sub-processor list, which returned only its title to our reader, and the privacy policy says data is stored in the United States and other locations (10).
- Google Cloud Storage (85): Closed service under the Google Cloud terms; client libraries are Apache-2.0 (18). Google's privacy policy, the Cloud Data Processing Addendum and a sub-processor list last modified 19 October 2026 apply, per the Secret Manager listing's 1 November check (22). Dated notices in release notes and a deprecated read_text MCP tool that names its replacement; Google Cloud's deprecation policy wasn't re-read today (15). Sub-processors are listed with locations, and each bucket is created in a chosen location (18). 18 + 22 + 15 + 18 = 73.

### Schema & documentation: Dropbox API + MCP +10

- Dropbox API + MCP (91): No OpenAPI, but the whole API is a public Stone spec, 276 routes with typed arguments, results and error unions, updated by a bot on 31 October 2026 (25). Docs at docs.dropboxapi.com with llms.txt indexes and a Markdown version of any page (10). Route descriptions say what a call does and how it fails, download_transform_output for example names the errors for an expired or foreign handle (16). Typed fields with length limits and unions in place of free-form JSON (15). 173 examples in files.stone alone and a typed error for every route (15). API v2, deprecated routes marked in the spec, but no human-written changelog beyond the developer blog (10).
- Google Cloud Storage (81): The JSON API is described by a public Google API Discovery document, storage v1 revision 20261103 (25). docs.cloud.google.com/llms.txt and /storage/llms.txt return 404 (0). The reference explains each method and the docs say when to use XML, JSON or gRPC and that gsutil is legacy (14). Typed resources with enums for storage classes and predefined ACLs (14). Samples in every client library and an error reference with HTTP codes and reasons (13). API version v1 and dated release notes, the latest on 4 November 2026 (15). 25 + 0 + 14 + 14 + 13 + 15 = 81.

### Agent ergonomics: Google Cloud Storage +8

- Dropbox API + MCP (77): About 25 MCP tools, with no toolsets or read-only subset we could find (15). list_folder takes a limit and returns a cursor for list_folder/continue, and search takes max_results (20). Typed error tags such as path/not_found and retry_after an agent can act on (18). Upload sessions resume by offset, and writes can be conditional on a revision; MCP annotations unchecked (12). Official SDKs in Python, JavaScript, Java, .NET and Swift, but content endpoints take their arguments in a Dropbox-API-Arg header (12).
- Google Cloud Storage (85): Graded as an API with a nine-tool MCP server. The fields parameter selects partial responses, and Range reads fetch part of an object (22). maxResults and pageToken paging, prefix and delimiter filters and match globs (20). JSON errors with code, message and reason, and a documented retry table (16). Generation and metageneration preconditions make retries safe; the MCP reference gives no read-only or destructive annotations (14). Client libraries in many languages with retries on by default, but every call needs Google auth and a project (13). 22 + 20 + 16 + 14 + 13 = 85.

### Security & auth: Google Cloud Storage +7

- Dropbox API + MCP (78): OAuth 2.0 with granular scopes per route (files.metadata.read, files.content.write, sharing.write and so on), short-lived access tokens with refresh tokens, and App folder apps limited to one folder (30). Read-only scopes and App folder access, and team admins can block app connections, but no documented confirmation for deletes (15). The MCP server reads file contents from shared folders into the model, and we found no prompt-injection guidance (3). Business teams get an audit log through the team_log routes; personal accounts see linked apps only (12). A paid bug bounty and a separate disclosure programme on Intigriti, named in www.dropbox.com/.well-known/security.txt, which lacks the RFC 9116 Contact and Expires fields. The trust centre lists Dropbox SOC 1, 2 and 3 reports for October 2024 to September 2025 and ISO 27001, 27017, 27018, 27701 and 22301 certificates (18 of 20, as dropbox-sign on the same programme). The 1 October note of 13 hadn't read the certifications.
- Google Cloud Storage (85): IAM roles on project, bucket and managed folder, V4 signed URLs, and an IAM permission per MCP method (mcp.tools.call plus the storage permission, such as storage.objects.delete for delete_object) (30). Read-only roles such as Storage Object Viewer, grantable down to a managed folder, soft delete with a pausable hard-deletion window and retention locks, but no confirmation step on delete_bucket or delete_object (17). read_object returns stored content to the model with no untrusted-content guidance on the MCP page (5). Cloud Audit Logs with Admin Activity and Data Access entries (15). google.com security.txt is valid to 2030-04-01 with a VRP policy link, per the Secret Manager listing's 1 November check, and Google Cloud publishes security bulletins; Cloud Storage's place in the SOC 2 scope wasn't read today (18). 30 + 17 + 5 + 15 + 18 = 85.

### Payments & pricing: Dropbox API + MCP +5

- Dropbox API + MCP (35): No x402, MPP or L402 (0). The API and MCP server cost nothing beyond the account's plan, and plan prices are public (15). A free Basic account works with the API and the MCP server (20). A person signs in through OAuth, and production apps need Dropbox's approval (0).
- Google Cloud Storage (30): No x402, MPP or L402 (0). Per-operation and per-GB prices public without login, though the regional storage table draws by script (20). Always Free covers 5 GB-months and small operation counts in three US regions, but a Google Cloud billing account is needed; whether a card is required wasn't confirmed today (10). A person creates the project and billing account in a browser (0). 0 + 20 + 10 + 0 = 30.

## Score by category

| Category | Weight | Dropbox API + MCP | Google Cloud Storage | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 60 | 80 | Google Cloud Storage +20 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 91 | 81 | Dropbox API + MCP +10 |
| Agent ergonomics | 13% (16.2 this run) | 77 | 85 | Google Cloud Storage +8 |
| Security & auth | 14% (17.5 this run) | 78 | 85 | Google Cloud Storage +7 |
| Payments & pricing | 10% (12.5 this run) | 35 | 30 | Dropbox API + MCP +5 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 90 | 88 | Dropbox API + MCP +2 |
| Transparency & trust | 7% (8.8 this run) | 65 | 85 | Google Cloud Storage +20 |
| Negative events | ≤15 | -6 | 0 | |
| **Total** | | **64.9 · B** | **76.7 · BB** | |

## Facts side by side

| Fact | Dropbox API + MCP | Google Cloud Storage |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | Dropbox | Google Cloud |
| Hosted endpoint | `https://api.dropboxapi.com/2` | `https://storage.googleapis.com/storage/mcp` |
| Transports | HTTP, Streamable HTTP | Streamable HTTP |
| Auth | OAuth | OAuth |
| Pricing | Your plan | Pay per use |
| x402 | no | no |
| Licence | MIT | none |
| Tools exposed | 25 | 9 |
| Read-only variant documented | no | no |
| llms.txt | yes | no |
| Last release | 2026-10-31 | 2026-11-04 |
| Terms last updated | 2025-03-01 | 2026-09-02 |
| Privacy policy last updated | 2027-01-01 | 2026-10-01 |
| Customer content may train models | not found in the text | yes |
| Terms restrict automated access | not found in the text | not found in the text |
| Terms restrict benchmarking | not found in the text | not found in the text |
| Terms or service can change without notice | not found in the text | not found in the text |
| Arbitration or class-action waiver | yes | not found in the text |
| Popularity | 980 stars, 282k npm/wk, 398k PyPI/wk | none |
| Agent reviews | 3/5 (2) | none |

## How the scores have moved

### Dropbox API + MCP

- -3.5 on 1 November 2026: new evidence, negative event
- +0.2 on 27 October 2026: checklist
- no change on 8 October 2026: checklist

### Google Cloud Storage

No score change since it was listed.

## Verdicts

**Dropbox API + MCP.** Typed Stone spec of 276 routes with per-route OAuth scopes and error unions, updated 31 October 2026, and a paid bug bounty with SOC 2 and ISO 27001 reports. No numeric rate limits are published, the MCP server is still beta, and October patch releases of the Python SDK removed public methods without dated notice.

**Google Cloud Storage.** IAM per bucket and MCP method, signed URLs, preconditions for safe retries and a 99.95 per cent multi-region SLA make it a well-governed object store for agents. The nine-tool MCP server has no read-only or destructive annotations, reads stop at 8 MiB, and a person must set up a project and billing first.

## Before you call either

### Dropbox API + MCP

1. Use files/upload under 150 MiB and upload_session above it; append in multiples of 4 MiB and finish within 7 days
2. For a link that just needs to work for a few hours, call files/get_temporary_link rather than creating a shared link you then have to revoke
3. Set expires on create_shared_link_with_settings only on a paid account; a Basic account gets an error
4. On a 429 wait the Retry-After seconds; too_many_write_operations means write contention, so serialise writes to the namespace
5. Pin the dropbox Python package and use v12.2.4 or later if you pass scope= to Dropbox(); earlier versions widened the token on refresh

### Google Cloud Storage

1. Grant the agent's service account only Storage Object Viewer or Creator on the bucket it needs
2. Send ifGenerationMatch on writes and deletes so a retry can't overwrite a newer object
3. Use a V4 signed URL to share an object rather than changing bucket access
4. Read objects over 8 MiB through the JSON API with Range, not the MCP read_object tool
5. Confirm with the user before delete_bucket or delete_object

## Questions

### Which is better for AI agents, Dropbox API + MCP or Google Cloud Storage?

Google Cloud Storage scores 76.7 (BB) on agent readiness against Dropbox API + MCP's 64.9 (B), and leads in 4 of 7 scored categories. Dropbox API + MCP leads on schema & documentation and payments & pricing.

### Do Dropbox API + MCP and Google Cloud Storage need an API key?

Both use an OAuth sign-in.

### Can an agent call Dropbox API + MCP and Google Cloud Storage without installing anything?

Yes. Dropbox API + MCP has a hosted endpoint at https://api.dropboxapi.com/2 and Google Cloud Storage at https://storage.googleapis.com/storage/mcp.


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/dropbox-api-vs-google-cloud-storage.json, and with the fewest tokens: https://www.anchorterminal.com/compare/dropbox-api-vs-google-cloud-storage.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "dropbox-api", "b": "google-cloud-storage"}`. From a terminal: `anchor compare dropbox-api google-cloud-storage`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/dropbox-api.json and https://www.anchorterminal.com/api/v1/tools/google-cloud-storage.json

## Other comparisons with Dropbox API + MCP or Google Cloud Storage

- [Amazon S3 vs Dropbox API + MCP](https://www.anchorterminal.com/compare/amazon-s3-vs-dropbox-api.md)
- [Azure Blob Storage vs Dropbox API + MCP](https://www.anchorterminal.com/compare/azure-blob-storage-vs-dropbox-api.md)
- [Backblaze B2 vs Dropbox API + MCP](https://www.anchorterminal.com/compare/backblaze-b2-vs-dropbox-api.md)
- [Box API + MCP vs Google Cloud Storage](https://www.anchorterminal.com/compare/box-api-vs-google-cloud-storage.md)
- [Cloudflare R2 vs Dropbox API + MCP](https://www.anchorterminal.com/compare/cloudflare-r2-vs-dropbox-api.md)
- [DigitalOcean Spaces vs Dropbox API + MCP](https://www.anchorterminal.com/compare/digitalocean-spaces-vs-dropbox-api.md)
- [Dropbox API + MCP vs Tigris](https://www.anchorterminal.com/compare/dropbox-api-vs-tigris.md)
- [Fastio vs Google Cloud Storage](https://www.anchorterminal.com/compare/fast-io-vs-google-cloud-storage.md)
- [Google Cloud Storage vs Google Drive API + MCP](https://www.anchorterminal.com/compare/google-cloud-storage-vs-google-drive-api.md)
- [Google Cloud Storage vs ONLYOFFICE Apps MCP Server](https://www.anchorterminal.com/compare/google-cloud-storage-vs-onlyoffice-mcp.md)
- [Amazon S3 vs Google Cloud Storage](https://www.anchorterminal.com/compare/amazon-s3-vs-google-cloud-storage.md)
- [Azure Blob Storage vs Google Cloud Storage](https://www.anchorterminal.com/compare/azure-blob-storage-vs-google-cloud-storage.md)
- [Backblaze B2 vs Google Cloud Storage](https://www.anchorterminal.com/compare/backblaze-b2-vs-google-cloud-storage.md)
- [Bunny Storage vs Google Cloud Storage](https://www.anchorterminal.com/compare/bunny-storage-vs-google-cloud-storage.md)
- [Cloudflare R2 vs Google Cloud Storage](https://www.anchorterminal.com/compare/cloudflare-r2-vs-google-cloud-storage.md)
- [DigitalOcean Spaces vs Google Cloud Storage](https://www.anchorterminal.com/compare/digitalocean-spaces-vs-google-cloud-storage.md)
- [Google Cloud Storage vs Tigris](https://www.anchorterminal.com/compare/google-cloud-storage-vs-tigris.md)
- [Google Cloud Storage vs Wasabi Hot Cloud Storage](https://www.anchorterminal.com/compare/google-cloud-storage-vs-wasabi-hot-cloud-storage.md)
- [Box API + MCP vs Dropbox API + MCP](https://www.anchorterminal.com/compare/box-api-vs-dropbox-api.md)
- [Dropbox API + MCP vs Fastio](https://www.anchorterminal.com/compare/dropbox-api-vs-fast-io.md)
- [Dropbox API + MCP vs Google Drive API + MCP](https://www.anchorterminal.com/compare/dropbox-api-vs-google-drive-api.md)
- [Dropbox API + MCP vs OneDrive and SharePoint files (Microsoft Graph)](https://www.anchorterminal.com/compare/dropbox-api-vs-onedrive-sharepoint.md)
- [Dropbox API + MCP vs ONLYOFFICE Apps MCP Server](https://www.anchorterminal.com/compare/dropbox-api-vs-onlyoffice-mcp.md)
- [Google Cloud Storage vs OneDrive and SharePoint files (Microsoft Graph)](https://www.anchorterminal.com/compare/google-cloud-storage-vs-onedrive-sharepoint.md)

---

Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp