# Dropbox: L1 · Needs a person

As of 12 Oct 2026, an AI agent can't use Dropbox on its own: Arkose puzzle on the sign-up form.

Source: https://agentdrives.com/tools/dropbox?via=md · driven 12 Oct 2026 by AgentDrives's agent · Same level in 2 drives in a row · Rules of 15 Oct 2026 (https://agentdrives.com/method/rules?via=md) · license CC BY 4.0

A person has to sign up: L1 · Needs a person. Sign-up stops first: the web form shows an Arkose Labs puzzle after "Agree and sign up," so our agent never reached verification, a key, or a first call. Even without an account, Dropbox's agent surface holds up: public API docs, an llms.txt file, an official MCP server, and headless OAuth client registration through DCR all worked. The Standard trial checkout asks for a card, PayPal, or IBAN; no account was ever created, so cancelling and deleting were never tested.

_Written and checked by our agents from this drive's record. How we write: https://agentdrives.com/method?via=md#notes_

L1 · Needs a person: There is an API, CLI or MCP server, but an agent can't get in on its own: a person has to sign up, verify or make the key. What it does once a person sets it up shows next to the level.

- Find: Some docs for agents (llms.txt and an MCP server)
- Access: Can't sign up
- Use: Work not reached
- Pay: Payment not reached
- Leave: Leaving not reached
- Next: let an agent sign up on its own
- With an account set up by a person: not measured yet.

## Level history

- 6 Oct 2026: L1 · Needs a person
- 12 Oct 2026: L1 · Needs a person

## Part scores

- Agent-ready setup: llms.txt found, OpenAPI not found, MCP server found, CLI not found
- Not measured in this drive: Holds up, Docs match

## Who gets in

- Agents on a server: Stopped by a CAPTCHA on the sign-up form.
- Signed agents: The sign-up page opens. The CAPTCHA on the form stops them too.
- Agents in a person's browser: Not measured yet.

Sign-up page checked 13 Oct 2026. Signed agents: the ones Cloudflare verifies.

## Checkpoints

- **Docs**: Headless: HTTP API reference and /llms.txt fetched headless; no OpenAPI, no markdown pages
- **Sign up**: Needs a human: No API sign-up; web form shows an Arkose Labs puzzle after 'Agree and sign up'.
- **Verify**: Not reached: not reached: sign-up stopped at the Arkose puzzle
- **Key**: Not reached: DCR at /oauth2/register gave a client id headless (201), but a token needs a signed-in user at /oauth2/authorize or the App Console; no account
- **First call**: Not reached: no token; unauthenticated list_folder answers 400 'Invalid authorization value'
- **First action**: Not reached: not reached: no token
- **Pay**: Not reached: No 402/x402/MPP/UCP/registry listing; we paid nothing. Free Basic plan (2 GB); the 30-day Standard trial checkout asks for payment details (card, PayPal or IBAN). No billing API in the HTTP API docs.
- **Cancel**: Not reached: not tested: no plan or trial was started; trial page says 'Cancel anytime'
- **Delete**: Not reached: no account was created (sign-up wall); robots.txt disallows /account*

## Does Dropbox have an MCP server, and can an agent connect to it?

Yes. Dropbox has an official MCP server. The server is hosted and signs an agent in with OAuth.

A new agent can't get in on its own: in the drive of 12 Oct 2026, our agent stopped at sign up (it needs a person).

## How does an AI agent get a Dropbox API key?

Not reached: in the drive of 12 Oct 2026, sign-up stopped our agent first (it needs a person). DCR at /oauth2/register gave a client id headless (201), but a token needs a signed-in user at /oauth2/authorize or the App Console; no account

## Paying the agent way

Payment not reached.

What would let agents pay on their own:
- Accept x402 or MPP on your API: Answer an unpaid call with 402 and a payment challenge, so an agent pays per call or buys credits without an account or a card.
- List your plans on Stripe Projects: Agents buy a plan with `stripe projects add`, paid with a token under a spend cap the owner sets (projects.dev).
- Let a trial start without a card: An agent can try the product before anyone hands it a card; take the card when it buys.
Ways to pay checked 12 Oct 2026.

## What an agent can do

- Read Dropbox's API docs and llms.txt without an account
- Register an OAuth client for the MCP server headless (DCR)

## What it cannot do

- Create an account: Arkose Labs puzzle on the web sign-up form; no API sign-up
- Any file, sharing, restore or search action: needs an account and a token
- Start a trial: the trial checkout asks for a card, PayPal or IBAN

## Tips for the owner

1. Let verified agents sign up without a puzzle
2. Publish a device authorization endpoint
3. Support CIMD for MCP client registration
4. Offer a trial without a card
5. Serve markdown docs and an OpenAPI file

Is this your product? Claim it free and reply next to the result, or get a Drive ($49) for your private report: https://agentdrives.com/pricing?via=md#drive. Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).

## Also in File storage

- [Cloudinary](https://agentdrives.com/tools/cloudinary.md?via=md): L4 · Runs on its own · [Dropbox vs Cloudinary](https://agentdrives.com/compare/cloudinary-vs-dropbox?via=md)
- [Backblaze B2](https://agentdrives.com/tools/backblaze.md?via=md): L1 · Needs a person · [Dropbox vs Backblaze B2](https://agentdrives.com/compare/backblaze-vs-dropbox?via=md)
- [Box](https://agentdrives.com/tools/box.md?via=md): L1 · Needs a person · [Dropbox vs Box](https://agentdrives.com/compare/box-vs-dropbox?via=md)
- [Pinata](https://agentdrives.com/tools/pinata.md?via=md): L1 · Needs a person · [Dropbox vs Pinata](https://agentdrives.com/compare/dropbox-vs-pinata?via=md)

## Tips for agent builders

- Have a human create the account: sign-up shows an Arkose puzzle
- For MCP use DCR at https://www.dropbox.com/oauth2/register with a public client and PKCE; it assigns fixed localhost/127.0.0.1 redirect URIs
- robots.txt disallows /home* and /account*: a robots-respecting browser agent cannot use the web file browser or settings