Claude security directory

Dropbox

Published by Dropbox

High risk

The Dropbox connector for Claude connects your Dropbox files directly to Claude, so you can search, organize, save generated content, and create sharing links without switching tools. It respects your existing Dropbox permissions, and Claude only works with files you already have access to.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: The connector can fetch, search, preview, and download Dropbox files and metadata that may contain sensitive personal or business information.
  • Can change or update your information: The connector can create, copy, and move files/folders, changing the structure and contents of your Dropbox.
  • Can permanently delete data: The connector includes a delete capability, which could remove files or folders and may be difficult to recover depending on Dropbox retention settings.
  • Sends your data to outside companies: Creating shared links can expose Dropbox content to anyone with the link (and potentially outside your organization), increasing the chance of unintended disclosure.
  • Stores long-lived access tokens: Operating on Dropbox typically requires OAuth tokens that may be stored for ongoing access, increasing impact if credentials are compromised.

Available capabilities

This add-on exposes 19 tools or capabilities.

  • check_job_status
  • copy
  • create_file
  • create_file_request
  • create_folder
  • create_shared_link
  • delete
  • download_link
  • fetch
  • file_preview
  • get_file_metadata
  • get_file_request
  • get_shared_link_metadata
  • list_file_requests
  • list_folder
  • list_shared_links
  • move
  • search
  • who_am_i

The interactive security report will load automatically.