Write-only access token

[ Cross-linking for reference: https://stackoverflow.com/questions/61468956/dropbox-write-only-access-token ]

No, unfortunately the Dropbox API doesn't offer a write-only permission or a way to programmatically upload to file requests, but I'll pass these along as feature requests. I can't promise if or when they might be implemented though. 

One thing you might want to use though is the /2/files/get_temporary_upload_link endpoint. If you can run code on your server, you could make that call there where you can protect your access token, and then pass down the resulting link to the user's browser to have it perform the upload using that there, without the access token.

Thanks for the reply and suggestion! I considered this solution but need to allow uploads larger than 150MB.

Understood, thanks. I'll pass this along as a feature request for a version of that that would support larger files, but I can't promise if or when that might be implemented of course. 

I just wanted to follow up on this to let you know that we've released "scopes" functionality on the Dropbox API, which you can use to configure an app or access token to only a limited set of functionality, such as the ability to write but not read files.

You can find more information about the release in our blog post here:

https://dropbox.tech/developers/now-available--scoped-apps-and-enhanced-permissions