Dropbox Business

Access the Dropbox Business API with managed OAuth authentication. Manage team administration including members, groups, team folders, devices, linked apps, and audit logs.

Quick Start

CODEBLOCK0

Base URL

CODEBLOCK1

Replace {endpoint-path} with the actual Dropbox Business API endpoint path. The gateway proxies requests to api.dropboxapi.com and automatically injects your OAuth token.

IMPORTANT: Dropbox Business API uses POST for almost all endpoints, including read operations. Request bodies should be JSON (use null for endpoints with no parameters).

Authentication

All requests require the Maton API key in the Authorization header:

CODEBLOCK2

Environment Variable: Set your API key as MATON_API_KEY:

CODEBLOCK3

Getting Your API Key

1. 1. Sign in or create an account at maton.ai
2. Go to maton.ai/settings
3. Copy your API key

Connection Management

Manage your Dropbox Business OAuth connections at https://ctrl.maton.ai.

List Connections

CODEBLOCK4

Create Connection

CODEBLOCK5

Response:
CODEBLOCK6

Open the returned url in a browser to complete OAuth authorization.

Delete Connection

CODEBLOCK7

Specifying Connection

If you have multiple Dropbox Business connections, specify which one to use with the Maton-Connection header:

CODEBLOCK8

If omitted, the gateway uses the default (oldest) active connection.

API Reference

Team Information

Get Team Info

Retrieves information about the team including license usage and policies.

CODEBLOCK9

Response:
CODEBLOCK10

Get Team Features

Query team feature availability.

CODEBLOCK11

Response:
CODEBLOCK12

Get Authenticated Admin

Get info about the currently authenticated admin.

CODEBLOCK13

Response:
CODEBLOCK14

Team Members

List Members

CODEBLOCK15

List Members (V2)

Returns members with roles information (recommended).

CODEBLOCK16

Response:
CODEBLOCK17

Continue Listing Members

CODEBLOCK18

Get Member Info

CODEBLOCK19

Get Member Info (V2)

Returns member with roles information (recommended).

CODEBLOCK20

Response:
CODEBLOCK21

Member Selectors:

• - INLINECODE7
• INLINECODE8
• INLINECODE9

Add Member

CODEBLOCK22

Suspend Member

CODEBLOCK23

Unsuspend Member

CODEBLOCK24

Remove Member

CODEBLOCK25

Check Remove Job Status

CODEBLOCK26

Send Welcome Email

Send or resend welcome email to pending members.

CODEBLOCK27

Set Member Profile (V2)

Update member profile information.

CODEBLOCK28

Delete Profile Photo (V2)

CODEBLOCK29

Set Profile Photo (V2)

CODEBLOCK30

Set Admin Permissions (V2)

Change a member's admin role.

CODEBLOCK31

Secondary Emails

Add Secondary Emails

CODEBLOCK32

Delete Secondary Emails

CODEBLOCK33

Resend Verification Emails

CODEBLOCK34

Groups

List Groups

CODEBLOCK35

Response:
CODEBLOCK36

Get Group Info

CODEBLOCK37

Create Group

CODEBLOCK38

Add Members to Group

CODEBLOCK39

Remove Members from Group

CODEBLOCK40

List Group Members

CODEBLOCK41

Response:
CODEBLOCK42

Update Group

CODEBLOCK43

Note: System-managed groups (like "Everyone at...") cannot be updated.

Delete Group

CODEBLOCK44

Check Group Job Status

For async group operations.

CODEBLOCK45

Team Folders

List Team Folders

CODEBLOCK46

Response:
CODEBLOCK47

Get Team Folder Info

CODEBLOCK48

Create Team Folder

CODEBLOCK49

Rename Team Folder

CODEBLOCK50

Archive Team Folder

CODEBLOCK51

Permanently Delete Team Folder

CODEBLOCK52

Activate Team Folder

Activate an archived team folder.

CODEBLOCK53

Update Sync Settings

CODEBLOCK54

Response:
CODEBLOCK55

Namespaces

List Namespaces

CODEBLOCK56

Response:
CODEBLOCK57

Devices

List All Members' Devices

CODEBLOCK58

Response:
CODEBLOCK59

List Member Devices

CODEBLOCK60

Revoke Device Session

CODEBLOCK61

Revoke Device Sessions (Batch)

CODEBLOCK62

Linked Apps

List Members' Linked Apps

CODEBLOCK63

Response:
CODEBLOCK64

List All Team Linked Apps

CODEBLOCK65

Revoke Linked App

CODEBLOCK66

Member Space Limits

Get Custom Quotas

CODEBLOCK67

Set Custom Quotas

CODEBLOCK68

List Excluded Users

List users excluded from automatic backup.

CODEBLOCK69

Sharing Allowlist

List Sharing Allowlist

CODEBLOCK70

Response:
CODEBLOCK71

Add to Sharing Allowlist

CODEBLOCK72

Continue Listing Allowlist

CODEBLOCK73

Audit Log (Team Log)

Get Events

CODEBLOCK74

Response:
CODEBLOCK75

Event Categories:

• - apps - Third-party app events
• INLINECODE11 - Comment events
• INLINECODE12 - Device events
• INLINECODE13 - Domain events
• INLINECODE14 - File and folder events
• INLINECODE15 - File request events
• INLINECODE16 - Group events
• INLINECODE17 - Login events
• INLINECODE18 - Member events
• INLINECODE19 - Paper events
• INLINECODE20 - Password events
• INLINECODE21 - Report events
• INLINECODE22 - Sharing events
• INLINECODE23 - Showcase events
• INLINECODE24 - SSO events
• INLINECODE25 - Team folder events
• INLINECODE26 - Policy events
• INLINECODE27 - Team profile events
• INLINECODE28 - Two-factor auth events

Continue Getting Events

CODEBLOCK76

Member File Access

To access files on behalf of a team member, use the Dropbox-API-Select-User header with the member's teammemberid. This allows admin applications to access member files, shared folders, and file requests.

List Member's Files

CODEBLOCK77

List Member's Shared Folders

CODEBLOCK78

List Member's File Requests

CODEBLOCK79

Note: The Dropbox-API-Select-User header requires the team_data.member scope. Use this to operate on user-level endpoints (files, sharing, etc.) on behalf of team members.

Pagination

Dropbox Business uses cursor-based pagination. List endpoints return a cursor and has_more field.

Initial Request:
CODEBLOCK80

Response:
CODEBLOCK81

Continue with cursor:
CODEBLOCK82

Code Examples

JavaScript

CODEBLOCK83

Python

CODEBLOCK84

Notes

• - POST for Everything: Dropbox Business API uses POST for almost all endpoints, including read operations
• JSON Body Required: Even for endpoints with no parameters, send null as the request body
• Tag Format: Many fields use .tag to indicate the type (e.g., {".tag": "email", "email": "..."})
• Member Selectors: Use .tag with email, team_member_id, or external_id to identify members
• Async Operations: Some operations (like group member changes, member removal) may be async; check corresponding jobstatus endpoints
• Select-User Header: Use Dropbox-API-Select-User with teammember_id to access user-level endpoints (files, sharing) on behalf of members
• System-Managed Groups: Groups like "Everyone at..." are system-managed and cannot be modified or deleted
• V2 Endpoints: Use V2 versions of endpoints (e.g., members/list_v2, members/get_info_v2) for enhanced responses with roles information
• Deprecated Endpoints: The reports endpoints (team/reports/get_activity, get_devices, get_membership, get_storage) are deprecated
• IMPORTANT: When piping curl output to jq or other commands, environment variables like $MATON_API_KEY may not expand correctly in some shell environments

Error Handling

Status	Meaning
400	Bad request or invalid parameters
401

Invalid API key or expired token | | 403 | Permission denied (requires team admin) | | 404 | Resource not found | | 409 | Conflict (e.g., member already exists) | | 429 | Rate limited | | 4xx/5xx | Passthrough error from Dropbox API |

Response Error Format

CODEBLOCK85

Resources

• - Dropbox Business API Documentation
• Team Administration Guide
• Team Files Guide
• Authentication Types
• Maton Community
• Maton Support