# Facebook setup for PopMCP

You end up pasting the App ID and App Secret of a Meta app that has Facebook Login for Business added and PopMCP's callback URL whitelisted.

- Auth: OAuth authorization
- Setup time: 20 min (plus App Review if non-admins will connect)
- API base URL: https://graph.facebook.com
- Credentials screen: https://developers.facebook.com/apps
- Provider docs: https://developers.facebook.com/docs/pages-api/getting-started

## Approval required before this works

Meta's own access-levels doc states "Business Verification is required to get Advanced Access" and that "in some cases additional App Review on an individual permission and feature basis might be required". Without Advanced Access on the Pages permissions the app only works for people who hold a role on it.

- Typical wait: Meta does not publish an SLA for either step. Developers commonly report Business Verification completing in a few days to about two weeks, and App Review in anywhere from 2 business days to several weeks; a rejection sends the permission back to the start of the queue. Treat any specific figure as a report, not a commitment.
- Cost: No fee. Business Verification requires uploading company registration or similar documents, and Meta must be able to match the business to public records.
- Blocked until approved: With Standard Access only, Meta states that "permissions with Standard Access can only be requested from app users who have a role on the requesting app". Every token minted for anyone else comes back without the Pages scopes, so reading or publishing to a client's or customer's Page fails. pages_show_list, pages_read_engagement, pages_manage_posts, pages_manage_metadata, pages_messaging and read_insights are all affected.
- Works meanwhile: Standard Access is granted automatically, so the full integration can be built and tested end to end against Pages you administer, using accounts added to the app as admins, developers, or testers. Add each teammate's Page under an app role and everything behaves exactly as it will in production.

## Before you begin

- A Facebook account registered as a developer at developers.facebook.com
- Admin (or full task access) on the Facebook Page you want PopMCP to manage
- A Meta Business portfolio to attach the app to
- Business verification plus App Review approval before anyone who is not an app admin, developer or tester can connect
- A public Privacy Policy URL, because App settings / Basic will not save without one

## Get your credentials

### 1. Create a Meta app for your Page

Go to My Apps and click Create app, enter an app name and contact email, then click Next. On the use case screen select Manage everything on your Page, attach a business portfolio, and finish the wizard.

Screen: https://developers.facebook.com/apps/create/

### 2. Whitelist PopMCP's callback URL

In the left nav open Facebook Login for Business and click Settings. Paste the callback URL from PopMCP's connect screen into Valid OAuth Redirect URIs under Client OAuth settings, then click Save changes.

Screen: https://developers.facebook.com/apps

### 3. Add the Page permissions your tools need

Open App review and then Permissions and features. Add `pages_show_list`, `pages_read_engagement`, `pages_manage_posts`, `pages_manage_engagement`, `pages_manage_metadata`, `pages_messaging` and `read_insights`.

Screen: https://developers.facebook.com/apps

### 4. Copy the App ID and App Secret

Open App settings and then Basic. Copy the App ID, click Show next to App secret and re-enter your Facebook password, then paste both values into PopMCP.

Screen: https://developers.facebook.com/apps

### 5. Submit for review and switch the app Live

Complete Verification and Data handling questions, then submit the Page permissions under App review. Once approved, open Go live and switch the app to Live.

Screen: https://developers.facebook.com/apps

## Fields PopMCP asks for

- App ID (clientId) [required]: Your Facebook app's App ID from developers.facebook.com/apps (App settings, Basic). The app needs the Facebook Login product added, and the callback URL above listed under Valid OAuth Redirect URIs.
- App Secret (clientSecret) [required]: Same screen as the App ID (click Show). Stored encrypted, used server-side only, and never sent to the browser or to any tool.

## Callback URL to register

https://app.popmcp.com/api/providers/facebook/callback

## Scopes requested

- public_profile
- pages_show_list
- pages_read_engagement
- pages_read_user_content
- pages_manage_posts
- pages_manage_engagement
- pages_manage_metadata
- pages_manage_cta
- pages_messaging
- read_insights
- business_management
- leads_retrieval
- publish_video

## Verify

Saving the App ID and App Secret opens the Facebook OAuth window. After you approve and pick a Page, the connector shows the Page name with a green Connected badge and the Page tools appear in your tool list.

## Troubleshooting

### "URL Blocked: This redirect failed because the redirect URI is not whitelisted"

Cause: The callback URL is missing from Valid OAuth Redirect URIs, or differs by a trailing slash or http versus https.

Fix: Copy the callback URL straight out of PopMCP into Facebook Login for Business, Settings, and save again. Meta matches the URI character for character.

### Facebook Login for Business is not in the left nav

Cause: Use-case apps expose the settings through the use case instead of as a top-level product.

Fix: Open Use cases, click Customize on Manage everything on your Page, then open Settings. Apps created years ago list it as plain Facebook Login.

### Error 200: "Requires pages_manage_posts permission"

Cause: The permission was never added to the app, or it is added but unapproved and the connecting user is not an app admin, developer or tester.

Fix: Add the permission under App review, and while it is unapproved add the person under App roles as an admin, developer or tester.

### "Error validating application. Invalid application ID" or error 101

Cause: The App ID or App Secret was mistyped, or the secret was rotated after you pasted it.

Fix: Re-copy both values from App settings, Basic, and re-save the PopMCP connection.

### Only your own Page appears and nobody else can connect

Cause: The app is still in Development mode.

Fix: Finish business verification and App Review, then switch the app to Live from Go live.

---

Source: https://www.docs.popmcp.com/docs/integrations/facebook/