Examples / Documents and e-signature / Dropbox

Dropbox webhooks

File and folder changes for linked accounts. The payload lists accounts, not files; call list_folder/continue to find the changes.

Events

file change notification

Signature

Header X-Dropbox-Signature: HMAC-SHA256 of the raw body with the app secret, hex encoded. The first GET has a challenge query parameter; echo it as text/plain.

✓ A bin checks Dropbox signatures: add the app secret under Signature verification (Dropbox).

Check a Dropbox signature with the free tool (use the GitHub preset).

Retries

Dropbox retries a few times with backoff.

See a retry schedule in the calculator.

Docs

www.dropbox.com/developers/reference/webhooks

Checked 2026-10-08. Report a change.

Sample request from Dropboxillustrative, shortened

Content-Typeapplication/jsonX-Dropbox-Signature9a3f…c7d0

{
  "list_folder": { "accounts": [ "dbid:AAH4f99T0taONIb-OurWxbNQ6ywGRopQngc" ] },
  "delta": { "users": [ 12345678 ] }
}

Receive Dropbox webhooks with webhooks.xyz

Create a bin. Paste its URL into Dropbox. Each request shows at once with its headers and body. Add your secret, and each request gets a verified or failed mark. Add your server as a destination, and deliveries retry when it is down. Request an invite.

More in documents and e-signature: Box, DocuSign Connect.