Overview

Dropbox requires each customer to host their own OAuth app. You can still use our Merge Demo OAuth app for testing purposes, but before you launch into production, you must use your own Dropbox OAuth app.

Below are instructions on how to get your Dropbox OAuth app set up with Merge.

Instructions

Step 1: Create a developer account

1. Sign up for a developer account at https://www.dropbox.com/developers.

2. Click Create apps to sign up.

Step 2: Set up your Dropbox OAuth app

1. Once you're done signing up, navigate to Developers Apps.

2. Click Create app.

3. Choose Scoped access and Full Dropbox, so that your app has access to all files and folders.

   

4. On the Settings page for the app, set the following items:

   • Click Enable additional teams to enable your end users in teams to link their Dropbox app.

   • Click Enable additional users to enable your end users to link their Dropbox app.

   • Add https://app.merge.dev/oauth/callback to the Redirect URIs field.

     

5. On the Permissions page for the app, enable the permissions listed below. View the table at the bottom of this page for a more granular breakdown of the permission details per use case.

   • account_info.read

   • files.metadata.write

   • files.metadata.read

   • files.content.write

   • files.content.read

   • sharing.write

   • sharing.read

     

6. Click Submit in the modal at the bottom to save your changes.

7. Navigate to Branding and fill in the details of your app.

Step 3: Add your Dropbox app details to Merge

1. On the Merge Dashboard, navigate to the Integrations > File Storage page.

2. Identify the Dropbox integration.

3. Enable the integration using the toggle on the right.

   

4. Click Set up organization-level credentials.

5. Enter the following information in the corresponding fields:

   • OAuth Client Id: OAuth Client ID from your Dropbox app

   • OAuth Client Secret: OAuth Secret from your Dropbox app

   • OAuth Redirect URI: https://app.merge.dev/oauth/callback

     

Step 4 (optional): Apply to become a production app

If you have under 50 users or 5 teams, you don't need your Dropbox app to be in production mode in order to support this integration. However, if you'd like to apply for production, follow the steps below:

1. In your Dropbox App Console, click on the app you want to apply for production.

2. Click Apply for Production.

3. Fill in the following items:

   1. Check the My app will need to link with more than 50 Dropbox users box.

   2. Fill out the subsequent set of questions that appear:

      1. What does your app do: 2-3 sentences about what your app does. You do not have to include Merge.

      2. How does your app use the Dropbox API: Mention how your product uses a third-party integration tool called Merge Unified File Storage API to power your Dropbox integration. In your integration you will:

         • GET all Folder/File, so that our customers can sync and view all their files. This utilizes the /list_folders endpoint.

         • GET all Users and File Permissions, so that our customers don't see files they shouldn't have access to. This utilizes the /list_folder_members and /list_shared_links endpoints.

         • POST File/Folder, so that our customers can create File/Folder. This utilizes the /create_folder and /upload endpoints.

         • Download File, so that we can analyze file content to generate insights for our customers. This utilizes the /download and /export endpoints.

4. Click Submit app once you've filled in the required fields. Dropbox should get back to you within a couple of days.

Notes

Permissions by use case

Team permissions

In our investigation, if we request any of the team scopes, only the Dropbox Business admin can authenticate. This blocks regular users from linking their own accounts. In the future, Merge may support a separate Dropbox Business integration to handle this.