Agent Readiness Score
dropbox.com
32 — Limited. Agents will struggle to discover or use this site without human help.
HonestClaw measured how well dropbox.com's site and APIs work for AI agents — across 9 dimensions and 45 automated checks.
Dimensions
Discoverability6.6/24
Content Accessibility10.6/24
Bot Access Control0/12
Protocol & Capability Discovery13.5/41
Authentication & Credentials8.5/19
Documentation Quality5.5/10
Structured Data I/O0/13
Observable State & Reliability2/15
Agent Safety & Trust7.6/11
Checks
Discoverability
Subdomain sweepsubdomain-sweepNo agent-relevant conventional subdomain (api.*, docs.*) is live.Not detected
Canonical domaincanonical-domainRoot and www converge on www.dropbox.com, with a matching canonical tag.Cross-verified
robots.txtrobots-txtrobots.txt at https://dropbox.com/robots.txt declares a sitemap. Declared sitemap https://www.dropbox.com/sitemapindex.xml resolves as valid XML.Cross-verified
sitemap.xmlsitemap-xmlhttps://www.dropbox.com/sitemapindex.xml is a valid sitemap (10 location(s)), but without lastmod or non-homepage URLs.Parseable
API existenceapi-existenceNo API endpoint found at common paths (only HTML pages or 404s).Not detected
API catalogapi-catalogNo RFC 9727 API Catalog found at /.well-known/api-catalog.Not detected
API versioningapi-versioningVersioning is mentioned at https://www.dropbox.com/enterprise/extended-version-history, but not on a page dedicated to documenting it. (source: docs)Detected
Content Accessibility
llms.txtllms-txtA curated llms.txt index is published at https://www.dropbox.com/llms.txt: 829 links across 17 sections.Cross-verified
Freshness signalsfreshness-signalsNo freshness signals found (no Last-Modified, ETag, or sitemap lastmod).Not detected
Crawl-cost estimatecrawl-cost-estimateInformational — not scoredNo crawl-cost signals found (no sitemap URL inventory or Crawl-delay directive).Not detected
llms-full.txtllms-full-txtNo llms-full.txt file found (HTML pages at .txt paths do not qualify).Not detected
Raw content extractabilityraw-content-extractabilityModerate-to-strong main content (59% of visible text) is extractable from raw HTML on the homepage.Useful
ai.txtai-txtNo ai.txt file found (HTML pages at .txt paths do not qualify).Not detected
Markdown twinmarkdown-twinNo markdown twin found alongside probed docs HTML surfaces.Not detected
Bot Access Control
AI bot rulesai-bot-rulesrobots.txt is readable but declares no AI-bot-specific rules.Not detected
Content signalscontent-signalsrobots.txt is readable but declares no Content-Signal line.Not detected
RSL licensingrslrobots.txt is readable but declares no RSL License directive.Not detected
TDM reservationtdmrepNo TDMRep policy found at /.well-known/tdmrep.json.Not detected
Protocol & Capability Discovery
MCP descriptormcp-descriptorInformational — not scoredNo MCP descriptor found at the standard locations an agent would check.Not detected
Link headerslink-headersNo RFC 8288 Link headers found on any probed response.Not detected
OpenAPI specificationopenapi-specNo OpenAPI/Swagger specification found.Not detected
A2A Agent Carda2a-agent-cardNo A2A Agent Card found at the standard well-known locations.Not detected
DNS-AIDdns-aidNo DNS-AID index found at _index._agents.dropbox.com.Not detected
.well-known indexwell-known-indexNo non-owned /.well-known/ descriptors found.Not detected
MCP Server Cardmcp-server-cardNo MCP Server Card found at the standard locations an agent would check.Not detected
GraphQL surfacegraphql-surfaceNo GraphQL transport surface found at conventional paths (GET-only; no introspection issued).Not detected
MCP supportmcp-supportThe endpoint https://mcp.dropbox.com/mcp returned an MCP-specific protocol or authorization response (HTTP 401).Cross-verified
Auth discoveryauth-discoveryA drivable auth-discovery descriptor is published.Useful
SDK availabilitysdk-availabilitySDK libraries page at https://www.dropbox.com/developers/documentation/communitysdks?_tk=pilot_lp&_ad=sdk8&_camp=comm: 13 GitHub repos, 0 registry links, 0 install commands (13 pointers).Cross-verified
Rate limit documentationrate-limit-docsNo rate limit documentation found at the standard docs locations an agent would check.Not detected
WebMCPwebmcpInformational — not scoredWebMCP browser probing is not yet available in this scanner release.Couldn't verify
Authentication & Credentials
Credential managementcredential-managementNo credential management documentation found at the standard docs locations an agent would check.Not detected
Programmatic auth flowprogrammatic-auth-flowA programmatic auth flow is documented at https://www.dropbox.com/developers/reference/auth-types, naming a non-interactive grant and a token endpoint. To reach the top level, it would need scopes and token expiry/refresh documented.Useful
Sandbox environmentsandbox-environmentNo sandbox or test environment documentation found at the standard docs locations an agent would check.Not detected
Auth documentationauth-documentationAuthentication is fully documented at https://www.dropbox.com/developers/reference/auth-types, naming complete method(s) and how they are sent, corroborated across surfaces or covering multiple methods.Cross-verified
Documentation Quality
API reference depthapi-reference-depthAPI reference content is mentioned at https://www.dropbox.com/developers/reference, but not on a dedicated reference page.Detected
Changelog presencechangelog-presenceA changelog is published at https://dash.dropbox.com/release-notes with multiple recent dated entries, indicating it is actively maintained.Cross-verified
Structured Data I/O
Structured data I/Ostructured-data-ioNo published structured-data contract found (no typed spec response schemas).Not detected
Machine-readable pricingmachine-readable-pricingNo machine-readable pricing endpoint found (HTML pricing pages do not qualify).Not detected
Data export APIdata-export-apiNo data export or bulk API documentation found at the standard docs locations an agent would check.Not detected
Observable State & Reliability
Status & health endpointsstatus-and-healthHealth/status endpoint found at https://dropbox.com/health (HTTP 200).Detected
Retry & idempotencyretry-and-idempotencyNo retry or idempotency documentation found at the standard docs locations an agent would check.Not detected
Webhook documentationwebhook-documentationA webhook documentation page exists at https://www.dropbox.com/developers/reference/webhooks, but it doesn't list specific event types with their payload shape.Parseable
Error documentationerror-documentationNo error documentation found at the standard docs locations an agent would check.Not detected
Machine payments (x402/MPP)x402-or-mpp-supportInformational — not scoredNo machine-payment signal observed (no HTTP 402, no payment-required response header, and no /.well-known/x402.json manifest). Payment support cannot be ruled out from an unauthenticated probe.Couldn't verify
Agent Safety & Trust
security.txtsecurity-txtsecurity.txt at https://dropbox.com/.well-known/security.txt uses RFC 9116 field names but has no Contact line.Parseable
Org identity signalsorg-identityHomepage exposes three org-identity signal types (legal_name, address, social).Useful
Metadata consistencymetadata-consistencyHomepage metadata (canonical, Open Graph, schema) is present and consistent.Cross-verified
Legal policy pageslegal-pagesBoth privacy and terms policies are discoverable with substantive content.Useful