Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Manage Dropbox files securely with OAuth 2.0 PKCE via CLI or MCP server, supporting upload, download, search, delete, and account info operations.
Manage Dropbox files securely with OAuth 2.0 PKCE via CLI or MCP server, supporting upload, download, search, delete, and account info operations.
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Manage Dropbox files via MCP server and CLI. Swift-native implementation using SwiftyDropbox SDK with OAuth 2.0 PKCE and secure Keychain token storage.
# Clone and build Dropbook git clone https://github.com/RyanLisse/Dropbook.git cd Dropbook make build
Option 1: OAuth Login with Keychain (Recommended) Use the interactive OAuth flow with secure Keychain storage: export DROPBOX_APP_KEY="your_dropbox_app_key" export DROPBOX_APP_SECRET="your_dropbox_app_secret" make login # or: swift run dropbook login This will: Generate PKCE code verifier and challenge (SHA256, RFC 7636) Open an authorization URL with state parameter (CSRF protection) Prompt you to paste the authorization code Exchange code for access and refresh tokens Save tokens to macOS Keychain (hardware-backed encryption) Fall back to ~/.dropbook/auth.json if Keychain unavailable Enable automatic token refreshing Security Features (RFC 9700 compliant): PKCE with S256 challenge method State parameter for CSRF protection Keychain storage with kSecAttrAccessibleWhenUnlocked CryptoKit for cryptographic operations Option 2: Environment Variables (Legacy) export DROPBOX_APP_KEY="your_dropbox_app_key" export DROPBOX_APP_SECRET="your_dropbox_app_secret" export DROPBOX_ACCESS_TOKEN="your_dropbox_access_token" Note: Manual tokens don't support automatic refreshing. Use OAuth login for production use.
Clear stored tokens from both Keychain and file storage: make logout # or: swift run dropbook logout
Start the MCP server: make mcp # or: ./.build/debug/dropbook mcp
ToolDescriptionlist_directoryList files and folders in a Dropbox directorysearchSearch for files by name or contentuploadUpload a file to DropboxdownloadDownload a file from DropboxdeleteDelete a file or folder (moves to trash)get_account_infoGet account name and emailread_fileRead contents of a text file list_directory List files and folders in a Dropbox directory. Parameters: path (string, optional): Directory path. Default: "/" Response: { "files": [ {"type": "file", "name": "doc.pdf", "path": "/Docs/doc.pdf", "size": 1024}, {"type": "folder", "name": "Projects", "path": "/Projects"} ] } search Search for files by name or content. Parameters: query (string, required): Search term path (string, optional): Path to search within. Default: "/" Response: { "count": 2, "results": [ {"matchType": "filename", "metadata": {"name": "report.pdf", "path": "/Docs/report.pdf"}} ] } upload Upload a file to Dropbox. Parameters: localPath (string, required): Absolute path to local file remotePath (string, required): Destination in Dropbox overwrite (boolean, optional): Replace if exists. Default: false Response: { "uploaded": true, "name": "file.txt", "path": "/Uploads/file.txt", "size": 5000 } download Download a file from Dropbox. Parameters: remotePath (string, required): File path in Dropbox localPath (string, required): Local destination path Response: { "downloaded": true, "to": "/tmp/report.pdf" } delete Delete a file or folder from Dropbox (moves to trash). Parameters: path (string, required): Path to delete in Dropbox Response: { "deleted": true, "path": "/Docs/old-file.pdf" } get_account_info Get Dropbox account information. Parameters: None Response: { "name": "Ryan Lisse", "email": "user@example.com" } read_file Read and return the contents of a text file from Dropbox. Parameters: path (string, required): Path to file in Dropbox Response: Returns the file contents as text. Only works with UTF-8 encoded text files.
# Authentication make login # OAuth login with Keychain storage make logout # Clear stored tokens # File operations make list # List root directory swift run dropbook list /path # Search files swift run dropbook search "query" [path] # Upload file swift run dropbook upload /local/path /remote/path [--overwrite] # Download file swift run dropbook download /remote/path /local/path # Start MCP server make mcp
The project includes a .mcp.json file that configures the MCP server: { "mcpServers": { "dropbox": { "command": "/path/to/Dropbook/.build/debug/dropbook", "args": ["mcp"], "env": { "DROPBOX_APP_KEY": "${DROPBOX_APP_KEY}", "DROPBOX_APP_SECRET": "${DROPBOX_APP_SECRET}" } } } } Enable project MCP servers in Claude Code settings.json: { "enableAllProjectMcpServers": true }
{ "mcpServers": { "dropbox": { "command": "/path/to/dropbook/.build/debug/dropbook", "args": ["mcp"], "env": { "DROPBOX_APP_KEY": "${DROPBOX_APP_KEY}", "DROPBOX_APP_SECRET": "${DROPBOX_APP_SECRET}" } } } }
ErrorCauseSolutionnotConfiguredMissing env varsSet DROPBOX_APP_KEY, DROPBOX_APP_SECRETinvalidArgumentsMissing required paramsCheck tool parametersnotFoundPath doesn't existUse list_directory to verify pathsitemNotFoundNo token in KeychainRun make login to authenticate
Dropbook/ โโโ Sources/ โ โโโ DropbookCore/ # Business logic (actor-based) โ โ โโโ Auth/ # Keychain & file token storage โ โ โโโ Config/ # Configuration management โ โ โโโ Models/ # Domain models โ โ โโโ Services/ # DropboxService actor โ โโโ DropbookCLI/ # CLI adapter โ โ โโโ Commands/ # Login, logout, file commands โ โโโ DropbookMCP/ # MCP server โโโ dropbox-skill/ # Skill documentation โโโ Makefile # Build automation โโโ .mcp.json # MCP server configuration โโโ Package.swift
For large-scale operations like backups, syncing, or bulk transfers, use rclone - a powerful cloud sync tool with native Dropbox support.
brew install rclone
# Interactive setup (opens browser for OAuth) rclone authorize dropbox # Save the token output to config mkdir -p ~/.config/rclone cat > ~/.config/rclone/rclone.conf << 'EOF' [dropbox] type = dropbox token = {"access_token":"...paste token here..."} EOF
# Full backup with progress rclone copy dropbox: /Volumes/TimeCapsule/Dropbox-Backup \ --progress \ --transfers 4 \ --checkers 8 \ --retries 10 \ --log-file /tmp/dropbox-backup.log # Sync (mirror - deletes files not in source) rclone sync dropbox: /Volumes/Backup/Dropbox --progress # Check what would be copied (dry run) rclone copy dropbox: /Volumes/Backup --dry-run
# List remote contents rclone lsd dropbox: # List directories rclone ls dropbox: # List all files rclone size dropbox: # Calculate total size # Copy operations rclone copy dropbox:folder /local/path # Download folder rclone copy /local/path dropbox:folder # Upload folder # Sync (bidirectional) rclone bisync dropbox: /local/path --resync # Mount as filesystem (macOS - requires macFUSE) rclone mount dropbox: /mnt/dropbox --vfs-cache-mode full
FlagDescription--progressShow real-time transfer progress--transfers 4Number of parallel transfers--checkers 8Number of parallel checkers--retries 10Retry failed operations--low-level-retries 20Retry low-level errors--log-file pathWrite logs to file--dry-runShow what would be done--checksumVerify with checksums
Dropbox has strict API rate limits. If you see too_many_requests errors: # Use bandwidth limiting rclone copy dropbox: /backup --bwlimit 1M # Or add delays between operations rclone copy dropbox: /backup --tpslimit 2 rclone handles rate limits automatically with exponential backoff.
Use OAuth login - Secure Keychain storage with automatic token refresh Use MCP for agents - More reliable for programmatic access Use rclone for bulk ops - Better for backups and large transfers Validate paths first - Use list_directory before operations Handle errors gracefully - Check responses for error fields Respect rate limits - Add delays between bulk operations Use absolute paths - Always provide full paths for file operations
Keychain Storage: Tokens stored with hardware-backed encryption PKCE: Proof Key for Code Exchange prevents authorization code interception State Parameter: CSRF protection for OAuth flow Token Refresh: Automatic refresh before expiration CryptoKit: Modern Swift cryptographic library
SwiftyDropbox (v10.2.4+): Official Dropbox Swift SDK MCP (swift-sdk): Model Context Protocol SDK CryptoKit: Apple's cryptographic framework rclone (optional): For bulk operations and backups (brew install rclone)
Dropbook GitHub CLAUDE.md - Full project documentation Dropbox API Docs rclone Dropbox Docs - Bulk sync and backup RFC 7636 - PKCE RFC 9700 - OAuth 2.0 Security Best Practices
Code helpers, APIs, CLIs, browser automation, testing, and developer operations.
Largest current source with strong distribution and engagement signals.