dropbox-mcp-server 2.1.0 → 2.2.1

package/dist/index.js

@@ -5,7 +5,7 @@ import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprot
 import { Dropbox } from "dropbox";
 import "dotenv/config";
 // ------------------------------------------------------------------
-// 1. Rate Limiter
+// 1. Rate Limiter (Fixed: Removed dangerous Proxy)
 // ------------------------------------------------------------------
 const MAX_CONCURRENT = 1;
 const MIN_GAP_MS = 1000;
@@ -59,17 +59,6 @@ async function limited(fn) {
         release();
     }
 }
-function throttleClient(client) {
-    return new Proxy(client, {
-        get(target, prop, receiver) {
-            const val = Reflect.get(target, prop, receiver);
-            if (typeof val === "function") {
-                return (...args) => limited(() => val.apply(target, args));
-            }
-            return val;
-        },
-    });
-}
 // ------------------------------------------------------------------
 // 2. Error Handling
 // ------------------------------------------------------------------
@@ -84,165 +73,263 @@ function isNotFoundError(err) {
         return false;
     }
 }
+function isPermissionError(err) {
+    return err?.status === 403;
+}
+function isBadRequestError(err) {
+    return err?.status === 400;
+}
 // ------------------------------------------------------------------
-// 3. MCP Server Initialization
+// 3. Environment & Client
 // ------------------------------------------------------------------
 const DROPBOX_APP_KEY = process.env.DROPBOX_APP_KEY;
 const DROPBOX_REFRESH_TOKEN = process.env.DROPBOX_REFRESH_TOKEN;
 const DROPBOX_SHARED_URL = process.env.DROPBOX_SHARED_URL;
+const DROPBOX_APP_SECRET = process.env.DROPBOX_APP_SECRET; // Highly recommended for token refresh
 if (!DROPBOX_APP_KEY || !DROPBOX_REFRESH_TOKEN) {
-    console.error("Missing DROPBOX_APP_KEY or DROPBOX_REFRESH_TOKEN environment variables.");
+    console.error("Missing required environment variables: DROPBOX_APP_KEY, DROPBOX_REFRESH_TOKEN");
     process.exit(1);
 }
-const rawClient = new Dropbox({
+// Instantiate direct client (no proxy)
+const client = new Dropbox({
     clientId: DROPBOX_APP_KEY,
-    refreshToken: DROPBOX_REFRESH_TOKEN
+    clientSecret: DROPBOX_APP_SECRET, // Needed if your Dropbox app is configured with a secret
+    refreshToken: DROPBOX_REFRESH_TOKEN,
 });
-const client = throttleClient(rawClient);
-const server = new Server({ name: "dropbox-agent-mcp", version: "2.1.0" }, { capabilities: { tools: {} } });
+const server = new Server({ name: "dropbox-agent-mcp", version: "2.0.1" }, { capabilities: { tools: {} } });
+// ------------------------------------------------------------------
+// 4. Helpers (Fixed Pathing & Node 18+ Blobs)
 // ------------------------------------------------------------------
-// 4. Tool Schemas
+import officeParser from 'officeparser';
+import * as fs from 'fs/promises';
+import * as path from 'path';
+import * as os from 'os';
+// ------------------------------------------------------------------
+// 4. Helpers 
+// ------------------------------------------------------------------
+function formatDropboxPath(pathStr) {
+    if (!pathStr || pathStr === "/" || pathStr.trim() === "")
+        return "";
+    return pathStr.startsWith("/") ? pathStr : `/${pathStr}`;
+}
+function isSupportedFile(pathOrName) {
+    const fileName = pathOrName.split('/').pop() || '';
+    const ext = fileName.split('.').pop()?.toLowerCase() || '';
+    if (fileName === ext)
+        return true;
+    const supportedExtensions = [
+        'csv', 'tsv', 'txt', 'json', 'md', 'log',
+        'xml', 'yaml', 'yml', 'html', 'htm', 'css',
+        'js', 'ts', 'py', 'java', 'c', 'cpp', 'h',
+        'pdf', 'docx', 'pptx', 'xlsx', 'xls', 'doc', 'ppt', 'odt', 'odp', 'ods'
+    ];
+    return supportedExtensions.includes(ext);
+}
+async function downloadHelper(identifier) {
+    let result;
+    let fileName;
+    if (identifier.startsWith("http://") || identifier.startsWith("https://")) {
+        const response = await limited(() => client.sharingGetSharedLinkFile({ url: identifier }));
+        result = response.result;
+        fileName = result.name || identifier.split('/').pop();
+    }
+    else if (DROPBOX_SHARED_URL) {
+        const reqPath = formatDropboxPath(identifier);
+        const response = await limited(() => client.sharingGetSharedLinkFile({
+            url: DROPBOX_SHARED_URL,
+            path: reqPath,
+        }));
+        result = response.result;
+        fileName = result.name || identifier;
+    }
+    else {
+        const reqPath = formatDropboxPath(identifier);
+        const response = await limited(() => client.filesDownload({ path: reqPath }));
+        result = response.result;
+        fileName = result.name || identifier;
+    }
+    const fileRef = fileName || identifier;
+    if (!isSupportedFile(fileRef)) {
+        throw new Error(`File "${fileRef}" appears to be an unsupported file format.`);
+    }
+    let fileBuffer;
+    if (result.fileBinary) {
+        fileBuffer = Buffer.from(result.fileBinary);
+    }
+    else if (result.fileBlob) {
+        const arrayBuffer = await result.fileBlob.arrayBuffer();
+        fileBuffer = Buffer.from(arrayBuffer);
+    }
+    else {
+        throw new Error("Download succeeded but no file content was returned.");
+    }
+    const ext = fileRef.split('.').pop()?.toLowerCase() || '';
+    const binaryExtensions = ['pdf', 'docx', 'pptx', 'xlsx', 'xls', 'doc', 'ppt', 'odt', 'odp', 'ods'];
+    if (binaryExtensions.includes(ext)) {
+        const tempFilePath = path.join(os.tmpdir(), `temp_${Date.now()}_${Math.random().toString(36).substring(7)}.${ext}`);
+        try {
+            await fs.writeFile(tempFilePath, fileBuffer);
+            // officeParser is called from the default import
+            const ast = await officeParser.parseOffice(fileBuffer);
+            const result = await ast.to('md');
+            return result.value || "Document parsed, but it appears to be empty.";
+        }
+        catch (error) {
+            throw new Error(`Failed to parse binary document: ${error.message}`);
+        }
+        finally {
+            await fs.unlink(tempFilePath).catch(() => { });
+        }
+    }
+    return fileBuffer.toString('utf-8');
+}
+function parseCsvHeader(headerLine) {
+    const fields = [];
+    let current = '';
+    let insideQuotes = false;
+    for (let i = 0; i < headerLine.length; i++) {
+        const ch = headerLine[i];
+        if (ch === '"') {
+            insideQuotes = !insideQuotes;
+            continue;
+        }
+        if (ch === ',' && !insideQuotes) {
+            fields.push(current.trim());
+            current = '';
+            continue;
+        }
+        current += ch;
+    }
+    fields.push(current.trim());
+    return fields.map(f => f.replace(/^"|"$/g, '').trim());
+}
+// ------------------------------------------------------------------
+// 5. Tool Definitions
 // ------------------------------------------------------------------
 server.setRequestHandler(ListToolsRequestSchema, async () => ({
     tools: [
         {
             name: "list_folder",
-            description: "List folders and files in a specific Dropbox path.",
+            description: "List folders and files. Use '' for root, or '/FolderName' for subfolders.",
             inputSchema: {
                 type: "object",
-                properties: {
-                    path: { type: "string", description: "Path to list, e.g., '' for root or '/Data'" }
-                },
+                properties: { path: { type: "string" } },
                 required: ["path"]
             }
         },
         {
             name: "search_files",
-            description: "Search for files by name, extension, or content across the Dropbox account.",
+            description: "Search for files by name, extension, or content.",
             inputSchema: {
                 type: "object",
-                properties: {
-                    query: { type: "string", description: "The search query (e.g., 'sales report' or '.csv')" }
-                },
+                properties: { query: { type: "string" } },
                 required: ["query"]
             }
         },
         {
             name: "get_file_metadata",
-            description: "Retrieve metadata (size, modified date) for a file to check constraints before downloading.",
+            description: "Retrieve size/modified date for a file.",
             inputSchema: {
                 type: "object",
-                properties: {
-                    path: { type: "string", description: "Exact Dropbox file path" }
-                },
+                properties: { path: { type: "string" } },
                 required: ["path"]
             }
         },
         {
             name: "describe_table",
-            description: "Display the schema (columns/headers) of a tabular file (CSV).",
+            description: "Display the schema (columns/headers) of a CSV or TSV file.",
             inputSchema: {
                 type: "object",
-                properties: {
-                    identifier: { type: "string", description: "Dropbox path or shared link to the table" }
-                },
+                properties: { identifier: { type: "string" } },
                 required: ["identifier"]
             }
         },
         {
             name: "read_data",
-            description: "Download and read data from a file or table. Automatically handles paths and shared links.",
+            description: "Download and read the content of a text file. Truncated if over 100k chars.",
             inputSchema: {
                 type: "object",
-                properties: {
-                    identifier: { type: "string", description: "The Dropbox path (e.g., /data.csv) or shared link URL." }
-                },
+                properties: { identifier: { type: "string" } },
                 required: ["identifier"]
             }
         }
     ]
 }));
 // ------------------------------------------------------------------
-// 5. Tool Execution Logic
+// 6. Tool Handlers (Using direct limited wrapper)
 // ------------------------------------------------------------------
-async function downloadHelper(identifier) {
-    let result;
-    if (identifier.startsWith("http://") || identifier.startsWith("https://")) {
-        const response = await client.sharingGetSharedLinkFile({ url: identifier });
-        result = response.result;
-    }
-    else if (DROPBOX_SHARED_URL) {
-        const response = await client.sharingGetSharedLinkFile({ url: DROPBOX_SHARED_URL, path: identifier });
-        result = response.result;
-    }
-    else {
-        const response = await client.filesDownload({ path: identifier });
-        result = response.result;
-    }
-    if (!result.fileBinary)
-        throw new Error("Download succeeded but no file content was returned.");
-    return Buffer.from(result.fileBinary).toString('utf-8');
-}
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
     try {
         const name = request.params.name;
         const args = request.params.arguments || {};
         if (name === "list_folder") {
-            const path = args.path === "/" ? "" : args.path;
-            const requestArgs = { path };
+            const rawPath = args.path || "";
+            let requestArgs;
             if (DROPBOX_SHARED_URL) {
-                requestArgs.shared_link = { url: DROPBOX_SHARED_URL };
+                requestArgs = {
+                    path: formatDropboxPath(rawPath),
+                    shared_link: { url: DROPBOX_SHARED_URL }
+                };
+            }
+            else {
+                requestArgs = { path: formatDropboxPath(rawPath) };
             }
-            const response = await client.filesListFolder(requestArgs);
-            const entries = response.result.entries.map(e => `[${e['.tag'].toUpperCase()}] ${e.name} (Path: ${e.path_display})`);
-            return { content: [{ type: "text", text: entries.join("\n") || "Folder is empty." }] };
+            const response = await limited(() => client.filesListFolder(requestArgs));
+            const entries = response.result.entries.map((e) => `[${e['.tag'].toUpperCase()}] ${e.name} (Path: ${e.path_display})`);
+            return {
+                content: [{ type: "text", text: entries.join("\n") || "Folder is empty." }]
+            };
         }
         if (name === "search_files") {
-            const response = await client.filesSearchV2({ query: args.query });
-            const matches = response.result.matches.map(m => {
+            const response = await limited(() => client.filesSearchV2({ query: args.query }));
+            const matches = response.result.matches.map((m) => {
                 const meta = m.metadata.metadata;
                 return `[${meta['.tag'].toUpperCase()}] ${meta.name} (Path: ${meta.path_display})`;
             });
-            return { content: [{ type: "text", text: matches.join("\n") || "No matches found." }] };
+            return {
+                content: [{ type: "text", text: matches.join("\n") || "No matches found." }]
+            };
         }
         if (name === "get_file_metadata") {
             let response;
+            const path = formatDropboxPath(args.path || "");
             if (DROPBOX_SHARED_URL) {
-                response = await client.sharingGetSharedLinkMetadata({ url: DROPBOX_SHARED_URL, path: args.path });
+                response = await limited(() => client.sharingGetSharedLinkMetadata({
+                    url: DROPBOX_SHARED_URL,
+                    path: path
+                }));
             }
             else {
-                response = await client.filesGetMetadata({ path: args.path });
+                response = await limited(() => client.filesGetMetadata({ path: path }));
             }
-            return { content: [{ type: "text", text: JSON.stringify(response.result, null, 2) }] };
+            return {
+                content: [{ type: "text", text: JSON.stringify(response.result, null, 2) }]
+            };
         }
         if (name === "read_data") {
-            try {
-                const text = await downloadHelper(args.identifier);
-                return { content: [{ type: "text", text: text.substring(0, 100000) }] };
-            }
-            catch (err) {
-                if (isNotFoundError(err)) {
-                    return { content: [{ type: "text", text: `Error: File not found at ${args.identifier}` }] };
-                }
-                throw err;
-            }
+            const text = await downloadHelper(args.identifier);
+            const truncated = text.length > 100000
+                ? text.substring(0, 100000) + "\n... [WARNING: FILE TRUNCATED TO 100K CHARACTERS]"
+                : text;
+            return { content: [{ type: "text", text: truncated }] };
         }
         if (name === "describe_table") {
-            try {
-                const text = await downloadHelper(args.identifier);
-                const lines = text.split(/\r?\n/).filter(line => line.trim().length > 0);
-                if (lines.length === 0)
-                    return { content: [{ type: "text", text: "File is empty." }] };
-                const headers = lines[0].split(',').map(h => h.trim());
-                const schemaStr = `Columns detected:\n- ${headers.join('\n- ')}\n\nTotal rows: ${lines.length - 1}`;
-                return { content: [{ type: "text", text: schemaStr }] };
+            // Note: This still downloads the full file to read the first line.
+            // Be careful running this on files >50MB as it may cause timeouts.
+            const text = await downloadHelper(args.identifier);
+            const lines = text.split(/\r?\n/).filter(line => line.trim().length > 0);
+            if (lines.length === 0)
+                return { content: [{ type: "text", text: "File is empty." }] };
+            let headers;
+            const firstLine = lines[0];
+            if ((firstLine.match(/,/g) || []).length > 0) {
+                headers = parseCsvHeader(firstLine);
             }
-            catch (err) {
-                if (isNotFoundError(err)) {
-                    return { content: [{ type: "text", text: `Error: File not found at ${args.identifier}` }] };
-                }
-                throw err;
+            else {
+                headers = lines.map((_, i) => `Column ${i + 1}`);
             }
+            const schemaStr = `Columns detected:\n- ${headers.join('\n- ')}\n\nTotal rows: ${lines.length - 1}`;
+            return { content: [{ type: "text", text: schemaStr }] };
         }
         throw new Error(`Unknown tool: ${name}`);
     }
@@ -254,11 +341,11 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
     }
 });
 // ------------------------------------------------------------------
-// 6. Execution
+// 7. Start the Server
 // ------------------------------------------------------------------
 async function run() {
     const transport = new StdioServerTransport();
     await server.connect(transport);
-    console.error("Dropbox MCP Server running on stdio");
+    console.error(`Dropbox MCP Server running on stdio ${DROPBOX_SHARED_URL ? '(shared link mode)' : '(full account mode)'}`);
 }
 run().catch(console.error);

package/index.ts

@@ -6,7 +6,7 @@ import { Dropbox } from "dropbox";
 import "dotenv/config";
 
 // ------------------------------------------------------------------
-// 1. Rate Limiter
+// 1. Rate Limiter (Fixed: Removed dangerous Proxy)
 // ------------------------------------------------------------------
 const MAX_CONCURRENT = 1;
 const MIN_GAP_MS = 1000;
@@ -62,18 +62,6 @@ async function limited<T>(fn: () => Promise<T>): Promise<T> {
     }
 }
 
-function throttleClient<T extends object>(client: T): T {
-    return new Proxy(client, {
-        get(target, prop, receiver) {
-            const val = Reflect.get(target, prop, receiver);
-            if (typeof val === "function") {
-                return (...args: any[]) => limited(() => val.apply(target, args));
-            }
-            return val;
-        },
-    });
-}
-
 // ------------------------------------------------------------------
 // 2. Error Handling
 // ------------------------------------------------------------------
@@ -87,86 +75,202 @@ function isNotFoundError(err: any): boolean {
     }
 }
 
+function isPermissionError(err: any): boolean {
+    return err?.status === 403;
+}
+
+function isBadRequestError(err: any): boolean {
+    return err?.status === 400;
+}
+
 // ------------------------------------------------------------------
-// 3. MCP Server Initialization
+// 3. Environment & Client
 // ------------------------------------------------------------------
 const DROPBOX_APP_KEY = process.env.DROPBOX_APP_KEY;
 const DROPBOX_REFRESH_TOKEN = process.env.DROPBOX_REFRESH_TOKEN;
 const DROPBOX_SHARED_URL = process.env.DROPBOX_SHARED_URL;
+const DROPBOX_APP_SECRET = process.env.DROPBOX_APP_SECRET; // Highly recommended for token refresh
 
 if (!DROPBOX_APP_KEY || !DROPBOX_REFRESH_TOKEN) {
-    console.error("Missing DROPBOX_APP_KEY or DROPBOX_REFRESH_TOKEN environment variables.");
+    console.error("Missing required environment variables: DROPBOX_APP_KEY, DROPBOX_REFRESH_TOKEN");
     process.exit(1);
 }
 
-const rawClient = new Dropbox({
+// Instantiate direct client (no proxy)
+const client = new Dropbox({
     clientId: DROPBOX_APP_KEY,
-    refreshToken: DROPBOX_REFRESH_TOKEN
+    clientSecret: DROPBOX_APP_SECRET, // Needed if your Dropbox app is configured with a secret
+    refreshToken: DROPBOX_REFRESH_TOKEN,
 });
-const client = throttleClient(rawClient);
 
 const server = new Server(
-    { name: "dropbox-agent-mcp", version: "2.1.0" },
+    { name: "dropbox-agent-mcp", version: "2.0.1" },
     { capabilities: { tools: {} } }
 );
 
 // ------------------------------------------------------------------
-// 4. Tool Schemas
+// 4. Helpers (Fixed Pathing & Node 18+ Blobs)
+// ------------------------------------------------------------------
+
+import officeParser from 'officeparser';
+import * as fs from 'fs/promises';
+import * as path from 'path';
+import * as os from 'os';
+
+// ------------------------------------------------------------------
+// 4. Helpers 
+// ------------------------------------------------------------------
+
+function formatDropboxPath(pathStr: string): string {
+    if (!pathStr || pathStr === "/" || pathStr.trim() === "") return "";
+    return pathStr.startsWith("/") ? pathStr : `/${pathStr}`;
+}
+
+function isSupportedFile(pathOrName: string): boolean {
+    const fileName = pathOrName.split('/').pop() || '';
+    const ext = fileName.split('.').pop()?.toLowerCase() || '';
+    if (fileName === ext) return true;
+
+    const supportedExtensions = [
+        'csv', 'tsv', 'txt', 'json', 'md', 'log',
+        'xml', 'yaml', 'yml', 'html', 'htm', 'css',
+        'js', 'ts', 'py', 'java', 'c', 'cpp', 'h',
+        'pdf', 'docx', 'pptx', 'xlsx', 'xls', 'doc', 'ppt', 'odt', 'odp', 'ods'
+    ];
+    return supportedExtensions.includes(ext);
+}
+
+async function downloadHelper(identifier: string): Promise<string> {
+    let result: any;
+    let fileName: string | undefined;
+
+    if (identifier.startsWith("http://") || identifier.startsWith("https://")) {
+        const response = await limited(() => client.sharingGetSharedLinkFile({ url: identifier }));
+        result = response.result;
+        fileName = result.name || identifier.split('/').pop();
+    } else if (DROPBOX_SHARED_URL) {
+        const reqPath = formatDropboxPath(identifier);
+        const response = await limited(() => client.sharingGetSharedLinkFile({
+            url: DROPBOX_SHARED_URL,
+            path: reqPath,
+        }));
+        result = response.result;
+        fileName = result.name || identifier;
+    } else {
+        const reqPath = formatDropboxPath(identifier);
+        const response = await limited(() => client.filesDownload({ path: reqPath }));
+        result = response.result;
+        fileName = result.name || identifier;
+    }
+
+    const fileRef = fileName || identifier;
+    if (!isSupportedFile(fileRef)) {
+        throw new Error(`File "${fileRef}" appears to be an unsupported file format.`);
+    }
+
+    let fileBuffer: Buffer;
+    if (result.fileBinary) {
+        fileBuffer = Buffer.from(result.fileBinary);
+    } else if (result.fileBlob) {
+        const arrayBuffer = await result.fileBlob.arrayBuffer();
+        fileBuffer = Buffer.from(arrayBuffer);
+    } else {
+        throw new Error("Download succeeded but no file content was returned.");
+    }
+
+    const ext = fileRef.split('.').pop()?.toLowerCase() || '';
+    const binaryExtensions = ['pdf', 'docx', 'pptx', 'xlsx', 'xls', 'doc', 'ppt', 'odt', 'odp', 'ods'];
+
+    if (binaryExtensions.includes(ext)) {
+        const tempFilePath = path.join(
+            os.tmpdir(),
+            `temp_${Date.now()}_${Math.random().toString(36).substring(7)}.${ext}`
+        );
+
+        try {
+            await fs.writeFile(tempFilePath, fileBuffer);
+            // officeParser is called from the default import
+            const ast = await officeParser.parseOffice(fileBuffer);
+
+            const result = await ast.to('md');
+            return (result.value as string) || "Document parsed, but it appears to be empty.";
+        } catch (error: any) {
+            throw new Error(`Failed to parse binary document: ${error.message}`);
+        } finally {
+            await fs.unlink(tempFilePath).catch(() => { });
+        }
+    }
+
+    return fileBuffer.toString('utf-8');
+}
+function parseCsvHeader(headerLine: string): string[] {
+    const fields: string[] = [];
+    let current = '';
+    let insideQuotes = false;
+    for (let i = 0; i < headerLine.length; i++) {
+        const ch = headerLine[i];
+        if (ch === '"') {
+            insideQuotes = !insideQuotes;
+            continue;
+        }
+        if (ch === ',' && !insideQuotes) {
+            fields.push(current.trim());
+            current = '';
+            continue;
+        }
+        current += ch;
+    }
+    fields.push(current.trim());
+    return fields.map(f => f.replace(/^"|"$/g, '').trim());
+}
+
+// ------------------------------------------------------------------
+// 5. Tool Definitions
 // ------------------------------------------------------------------
 server.setRequestHandler(ListToolsRequestSchema, async () => ({
     tools: [
         {
             name: "list_folder",
-            description: "List folders and files in a specific Dropbox path.",
+            description: "List folders and files. Use '' for root, or '/FolderName' for subfolders.",
             inputSchema: {
                 type: "object",
-                properties: {
-                    path: { type: "string", description: "Path to list, e.g., '' for root or '/Data'" }
-                },
+                properties: { path: { type: "string" } },
                 required: ["path"]
             }
         },
         {
             name: "search_files",
-            description: "Search for files by name, extension, or content across the Dropbox account.",
+            description: "Search for files by name, extension, or content.",
             inputSchema: {
                 type: "object",
-                properties: {
-                    query: { type: "string", description: "The search query (e.g., 'sales report' or '.csv')" }
-                },
+                properties: { query: { type: "string" } },
                 required: ["query"]
             }
         },
         {
             name: "get_file_metadata",
-            description: "Retrieve metadata (size, modified date) for a file to check constraints before downloading.",
+            description: "Retrieve size/modified date for a file.",
             inputSchema: {
                 type: "object",
-                properties: {
-                    path: { type: "string", description: "Exact Dropbox file path" }
-                },
+                properties: { path: { type: "string" } },
                 required: ["path"]
             }
         },
         {
             name: "describe_table",
-            description: "Display the schema (columns/headers) of a tabular file (CSV).",
+            description: "Display the schema (columns/headers) of a CSV or TSV file.",
             inputSchema: {
                 type: "object",
-                properties: {
-                    identifier: { type: "string", description: "Dropbox path or shared link to the table" }
-                },
+                properties: { identifier: { type: "string" } },
                 required: ["identifier"]
             }
         },
         {
             name: "read_data",
-            description: "Download and read data from a file or table. Automatically handles paths and shared links.",
+            description: "Download and read the content of a text file. Truncated if over 100k chars.",
             inputSchema: {
                 type: "object",
-                properties: {
-                    identifier: { type: "string", description: "The Dropbox path (e.g., /data.csv) or shared link URL." }
-                },
+                properties: { identifier: { type: "string" } },
                 required: ["identifier"]
             }
         }
@@ -174,88 +278,88 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
 }));
 
 // ------------------------------------------------------------------
-// 5. Tool Execution Logic
+// 6. Tool Handlers (Using direct limited wrapper)
 // ------------------------------------------------------------------
-async function downloadHelper(identifier: string) {
-    let result: any;
-    if (identifier.startsWith("http://") || identifier.startsWith("https://")) {
-        const response = await client.sharingGetSharedLinkFile({ url: identifier });
-        result = response.result;
-    } else if (DROPBOX_SHARED_URL) {
-        const response = await client.sharingGetSharedLinkFile({ url: DROPBOX_SHARED_URL, path: identifier });
-        result = response.result;
-    } else {
-        const response = await client.filesDownload({ path: identifier });
-        result = response.result;
-    }
-
-    if (!result.fileBinary) throw new Error("Download succeeded but no file content was returned.");
-    return Buffer.from(result.fileBinary).toString('utf-8');
-}
-
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
     try {
         const name = request.params.name;
         const args = request.params.arguments || {};
 
         if (name === "list_folder") {
-            const path = (args.path as string) === "/" ? "" : (args.path as string);
-            const requestArgs: any = { path };
+            const rawPath = (args.path as string) || "";
+            let requestArgs: any;
+
             if (DROPBOX_SHARED_URL) {
-                requestArgs.shared_link = { url: DROPBOX_SHARED_URL };
+                requestArgs = {
+                    path: formatDropboxPath(rawPath),
+                    shared_link: { url: DROPBOX_SHARED_URL }
+                };
+            } else {
+                requestArgs = { path: formatDropboxPath(rawPath) };
             }
 
-            const response = await client.filesListFolder(requestArgs);
-            const entries = response.result.entries.map(e => `[${e['.tag'].toUpperCase()}] ${e.name} (Path: ${e.path_display})`);
-            return { content: [{ type: "text", text: entries.join("\n") || "Folder is empty." }] };
+            const response = await limited(() => client.filesListFolder(requestArgs));
+            const entries = response.result.entries.map((e: any) =>
+                `[${e['.tag'].toUpperCase()}] ${e.name} (Path: ${e.path_display})`
+            );
+            return {
+                content: [{ type: "text", text: entries.join("\n") || "Folder is empty." }]
+            };
         }
 
         if (name === "search_files") {
-            const response = await client.filesSearchV2({ query: args.query as string });
-            const matches = response.result.matches.map(m => {
-                const meta = (m.metadata as any).metadata;
+            const response = await limited(() => client.filesSearchV2({ query: args.query as string }));
+            const matches = response.result.matches.map((m: any) => {
+                const meta = m.metadata.metadata;
                 return `[${meta['.tag'].toUpperCase()}] ${meta.name} (Path: ${meta.path_display})`;
             });
-            return { content: [{ type: "text", text: matches.join("\n") || "No matches found." }] };
+            return {
+                content: [{ type: "text", text: matches.join("\n") || "No matches found." }]
+            };
         }
 
         if (name === "get_file_metadata") {
             let response;
+            const path = formatDropboxPath((args.path as string) || "");
+
             if (DROPBOX_SHARED_URL) {
-                response = await client.sharingGetSharedLinkMetadata({ url: DROPBOX_SHARED_URL, path: args.path as string });
+                response = await limited(() => client.sharingGetSharedLinkMetadata({
+                    url: DROPBOX_SHARED_URL,
+                    path: path
+                }));
             } else {
-                response = await client.filesGetMetadata({ path: args.path as string });
+                response = await limited(() => client.filesGetMetadata({ path: path }));
             }
-            return { content: [{ type: "text", text: JSON.stringify(response.result, null, 2) }] };
+            return {
+                content: [{ type: "text", text: JSON.stringify(response.result, null, 2) }]
+            };
         }
 
         if (name === "read_data") {
-            try {
-                const text = await downloadHelper(args.identifier as string);
-                return { content: [{ type: "text", text: text.substring(0, 100000) }] };
-            } catch (err: any) {
-                if (isNotFoundError(err)) {
-                    return { content: [{ type: "text", text: `Error: File not found at ${args.identifier}` }] };
-                }
-                throw err;
-            }
+            const text = await downloadHelper(args.identifier as string);
+            const truncated = text.length > 100000
+                ? text.substring(0, 100000) + "\n... [WARNING: FILE TRUNCATED TO 100K CHARACTERS]"
+                : text;
+            return { content: [{ type: "text", text: truncated }] };
         }
 
         if (name === "describe_table") {
-            try {
-                const text = await downloadHelper(args.identifier as string);
-                const lines = text.split(/\r?\n/).filter(line => line.trim().length > 0);
-                if (lines.length === 0) return { content: [{ type: "text", text: "File is empty." }] };
+            // Note: This still downloads the full file to read the first line.
+            // Be careful running this on files >50MB as it may cause timeouts.
+            const text = await downloadHelper(args.identifier as string);
+            const lines = text.split(/\r?\n/).filter(line => line.trim().length > 0);
+            if (lines.length === 0) return { content: [{ type: "text", text: "File is empty." }] };
 
-                const headers = lines[0].split(',').map(h => h.trim());
-                const schemaStr = `Columns detected:\n- ${headers.join('\n- ')}\n\nTotal rows: ${lines.length - 1}`;
-                return { content: [{ type: "text", text: schemaStr }] };
-            } catch (err: any) {
-                if (isNotFoundError(err)) {
-                    return { content: [{ type: "text", text: `Error: File not found at ${args.identifier}` }] };
-                }
-                throw err;
+            let headers: string[];
+            const firstLine = lines[0];
+            if ((firstLine.match(/,/g) || []).length > 0) {
+                headers = parseCsvHeader(firstLine);
+            } else {
+                headers = lines.map((_, i) => `Column ${i + 1}`);
             }
+
+            const schemaStr = `Columns detected:\n- ${headers.join('\n- ')}\n\nTotal rows: ${lines.length - 1}`;
+            return { content: [{ type: "text", text: schemaStr }] };
         }
 
         throw new Error(`Unknown tool: ${name}`);
@@ -268,12 +372,12 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 });
 
 // ------------------------------------------------------------------
-// 6. Execution
+// 7. Start the Server
 // ------------------------------------------------------------------
 async function run() {
     const transport = new StdioServerTransport();
     await server.connect(transport);
-    console.error("Dropbox MCP Server running on stdio");
+    console.error(`Dropbox MCP Server running on stdio ${DROPBOX_SHARED_URL ? '(shared link mode)' : '(full account mode)'}`);
 }
 
 run().catch(console.error);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dropbox-mcp-server",
-  "version": "2.1.0",
+  "version": "2.2.1",
   "type": "module",
   "bin": {
     "dropbox-mcp-server": "dist/index.js"
@@ -13,7 +13,11 @@
     "@modelcontextprotocol/sdk": "^1.0.0",
     "dotenv": "^16.4.5",
     "dropbox": "^10.34.0",
-    "dropbox-mcp-server": "^2.0.0"
+    "dropbox-mcp-server": "^2.0.0",
+    "fs": "^0.0.1-security",
+    "officeparser": "^7.3.0",
+    "os": "^0.1.2",
+    "path": "^0.12.7"
   },
   "devDependencies": {
     "typescript": "^5.9.3"