DRACOON API

{
  "service_type": "platform",
  "base_url": "https://dracoon.team",
  "auth_method": "oauth2",
  "auth_config": {
    "flows_supported": ["authorization_code", "password", "client_credentials"],
    "token_endpoint": "/oauth/token",
    "notes": "DRACOON uses OAuth 2.0 for API authentication. The web app itself is an Angular SPA that authenticates via the same OAuth endpoints exposed by the DRACOON core service. Exact endpoints depend on the tenant host (dracoon.team is a generic marketing/host entry point; actual API base is typically https://<tenant>.dracoon.team/api/v4)."
  },
  "endpoints": [
    {
      "name": "Authentication / OAuth token",
      "path": "/oauth/token",
      "method": "POST",
      "description": "OAuth 2.0 token endpoint used by clients to obtain access tokens."
    },
    {
      "name": "Nodes (files & folders)",
      "path": "/api/v4/nodes",
      "method": "GET/POST/PUT/DELETE",
      "description": "Core resource for file and folder management (list, upload, download, move, copy, delete)."
    },
    {
      "name": "Users",
      "path": "/api/v4/users",
      "method": "GET/POST/PUT/DELETE",
      "description": "User management and administration."
    },
    {
      "name": "Rooms (data rooms)",
      "path": "/api/v4/nodes/rooms",
      "method": "GET/POST/PUT/DELETE",
      "description": "Data room (collaboration space) management."
    },
    {
      "name": "Shares",
      "path": "/api/v4/shares",
      "method": "GET/POST/PUT/DELETE",
      "description": "Sharing and permission management."
    },
    {
      "name": "Groups",
      "path": "/api/v4/groups",
      "method": "GET/POST/PUT/DELETE",
      "description": "Group and role management."
    },
    {
      "name": "Events / Audit",
      "path": "/api/v4/events",
      "method": "GET",
      "description": "Audit log and event history."
    },
    {
      "name": "Settings / Config",
      "path": "/api/v4/settings",
      "method": "GET/PUT",
      "description": "Tenant and system configuration."
    }
  ],
  "pricing_model": {
    "type": "subscription",
    "details": {
      "notes": "DRACOON is a commercial enterprise file-sharing and collaboration platform sold via subscription. Pricing is quote-based and depends on tenant size, storage, users, and chosen edition (e.g. cloud or on-premises). Free trials are commonly offered. Exact public price list is not exposed on this page."
    }
  },
  "rate_limits": {
    "notes": "DRACOON documents API rate limits in its developer documentation, but the exact limits are not visible on this page. Typical enterprise-grade throttling applies; check https://dracoon.team or the DRACOON developer portal for current values."
  },
  "capabilities": [
    "Enterprise file sharing and sync (EFSS)",
    "Data rooms for secure collaboration with external parties",
    "Granular permission and role management",
    "End-to-end encryption of files and data rooms",
    "OAuth 2.0-based authentication and API access",
    "REST API v4 for full programmatic control (files, users, rooms, shares, groups, audit)",
    "Web, desktop, and mobile clients",
    "Microsoft 365 / Office Online integration",
    "On-premises and cloud deployment options",
    "Audit logging and compliance features (GDPR-oriented, German-hosted option)",
    "Recycle bin / versioning",
    "Single Sign-On (SAML / OIDC) support (edition-dependent)"
  ],
  "raw_analysis": "DRACOON is a German enterprise file-sharing and collaboration platform (EFSS) positioned for secure file storage, sharing, and data-room collaboration with strong compliance/GDPR focus. It is a mature commercial product with cloud (dracoon.team and regional clouds) and on-premises deployments. The service exposes a documented REST API (commonly versioned as v4 at the tenant host, e.g. https://<tenant>.dracoon.team/api/v4), authenticated via OAuth 2.0. The URL provided (https://dracoon.team) resolves to an Angular single-page application shell (dw-root, CSP headers, runtime/main JS bundles) rather than an API endpoint — the real API surface lives on tenant-specific subdomains and is described in the DRACOON developer documentation (the user-supplied description references 'REST Web Services for DRACOON' grouped by tags, which matches Swagger/OpenAPI style docs). Pricing is subscription/quote-based enterprise licensing with freemium-style trials but no self-serve public pricing on this page. Rate limits and exact endpoint paths should be sourced from the official developer portal. Capabilities center on secure file sharing, data rooms, granular permissions, encryption, SSO, and broad client support including Microsoft 365 integration."
}

3/3 tests passed

{
  "overall": 68,
  "dimensions": {
    "token_efficiency": 8.0,
    "first_try_success": 6.0,
    "response_parseability": 8.5,
    "error_clarity": 7.0,
    "doc_quality": 7.0,
    "auth_simplicity": 6.5,
    "latency": 10.0,
    "consistency": 8.0
  },
  "pricing_normalized": {
    "model": "subscription",
    "public_pricing": false,
    "quote_based": true,
    "free_trial": true,
    "notes": "No public price list; pricing depends on tenant size, storage, users, and edition (cloud vs on-prem). Quote-based enterprise sales motion — hard for an agent to quote a concrete price."
  },
  "issues": [
    "Pricing is quote-based and not publicly listed, making it hard for agents to give users a concrete cost answer.",
    "robots_txt and llms_txt checks returned the SPA HTML shell rather than the expected plain-text assets, indicating those resources are not properly served/parseable.",
    "Auth flow relies on OAuth 2.0 with tenant/edition-dependent SSO (SAML/OIDC); setup complexity varies by edition, no mention of self-serve instant provisioning.",
    "No 'Sign in with Notlogin'-style frictionless onboarding; enterprise deployment likely requires IT involvement.",
    "Edition-dependent feature matrix (SSO, audit, encryption) adds ambiguity for agents to describe capabilities accurately."
  ],
  "recommendations": [
    "Publish at least indicative pricing tiers or a pricing calculator so agents can answer cost questions.",
    "Serve a real /llms.txt and /robots.txt (plain text, not the SPA shell) to improve machine readability and crawler control.",
    "Add a self-serve trial signup with instant API key provisioning to raise first-try success.",
    "Surface API v4 documentation with structured OpenAPI/Swagger spec for strong parseability and agent-driven integration.",
    "Clarify edition-by-edition capability matrix (encryption, SSO, audit) in a single canonical doc page.",
    "Highlight security headers and status/uptime page to reinforce consistency and trust signals."
  ]
}