Facebook MCP
Overview
Description from the maker (original English)
Facebook Pages MCP server for the Meta Graph API — publishing, insights, moderation, messaging
PopNx MCP’s three pillars
These three are never merged into one score: opinions, measurements and popularity are different things.
- User voiceiNo reviews yetReviews open together with accounts in a later step
- Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
- UsageiEarly↓ 507/wk · ★ –
What you can do with it
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
- Connection: Runs on your computer
- Transport: stdio
- Category: Marketing & social media
- You need to fill in: FB_SYSTEM_TOKEN, FB_ACCESS_TOKEN, FB_PAGE_TOKEN, FB_APP_SECRET, FB_CONFIRM_TOKEN, FB_HTTP_TOKEN
Install
Pick the AI app you use, then copy the settings.
Before you install
- Basic checks: 1 of 1 passed
- Runs on your computer with your user’s permissions (files, network, apps).
- You fill in yourself:
FB_SYSTEM_TOKEN,FB_ACCESS_TOKEN,FB_PAGE_TOKEN,FB_APP_ID,FB_APP_SECRET,FB_PAGE_ID,FB_API_VERSION,FB_ADS_API_VERSION,FB_REQUEST_TIMEOUT_MS,FB_HOST_CONCURRENCY,FB_MAX_RESULT_CHARS,FB_WRITE_MODE,FB_CONFIRM_TOKEN,FB_MEDIA_DIR,FB_JOURNAL_PATH,FB_ACTIVITY_STATE_PATH,FB_EXPORT_DIR,FB_TOOL_PACKAGES,FB_PACKAGES_DENY,FB_PACKAGES_READONLY,FB_TRANSPORT,FB_HTTP_TOKEN,FB_HTTP_PORT,FB_AD_ACCOUNT_ID,FB_ADS_BUDGET_CEILING,FB_ADS_CAMPAIGN_SPEND_CAP_MAX,FB_LOG_LEVEL
Values marked secret are keys to your account. Never share them or paste them into a chat.
You need
- npmNode.js installed (for the npx command)
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json
{
"mcpServers": {
"facebook": {
"command": "npx",
"args": [
"-y",
"@ivanbaev/facebook-mcp"
],
"env": {
"FB_SYSTEM_TOKEN": "your-value",
"FB_ACCESS_TOKEN": "your-value",
"FB_PAGE_TOKEN": "your-value",
"FB_APP_ID": "your-value",
"FB_APP_SECRET": "your-value",
"FB_PAGE_ID": "your-value",
"FB_API_VERSION": "your-value",
"FB_ADS_API_VERSION": "your-value",
"FB_REQUEST_TIMEOUT_MS": "your-value",
"FB_HOST_CONCURRENCY": "your-value",
"FB_MAX_RESULT_CHARS": "your-value",
"FB_WRITE_MODE": "your-value",
"FB_CONFIRM_TOKEN": "your-value",
"FB_MEDIA_DIR": "your-value",
"FB_JOURNAL_PATH": "your-value",
"FB_ACTIVITY_STATE_PATH": "your-value",
"FB_EXPORT_DIR": "your-value",
"FB_TOOL_PACKAGES": "your-value",
"FB_PACKAGES_DENY": "your-value",
"FB_PACKAGES_READONLY": "your-value",
"FB_TRANSPORT": "your-value",
"FB_HTTP_TOKEN": "your-value",
"FB_HTTP_PORT": "your-value",
"FB_AD_ACCOUNT_ID": "your-value",
"FB_ADS_BUDGET_CEILING": "your-value",
"FB_ADS_CAMPAIGN_SPEND_CAP_MAX": "your-value",
"FB_LOG_LEVEL": "your-value"
}
}
}
}Run this in your terminal
claude mcp add facebook --env FB_SYSTEM_TOKEN=your-value --env FB_ACCESS_TOKEN=your-value --env FB_PAGE_TOKEN=your-value --env FB_APP_ID=your-value --env FB_APP_SECRET=your-value --env FB_PAGE_ID=your-value --env FB_API_VERSION=your-value --env FB_ADS_API_VERSION=your-value --env FB_REQUEST_TIMEOUT_MS=your-value --env FB_HOST_CONCURRENCY=your-value --env FB_MAX_RESULT_CHARS=your-value --env FB_WRITE_MODE=your-value --env FB_CONFIRM_TOKEN=your-value --env FB_MEDIA_DIR=your-value --env FB_JOURNAL_PATH=your-value --env FB_ACTIVITY_STATE_PATH=your-value --env FB_EXPORT_DIR=your-value --env FB_TOOL_PACKAGES=your-value --env FB_PACKAGES_DENY=your-value --env FB_PACKAGES_READONLY=your-value --env FB_TRANSPORT=your-value --env FB_HTTP_TOKEN=your-value --env FB_HTTP_PORT=your-value --env FB_AD_ACCOUNT_ID=your-value --env FB_ADS_BUDGET_CEILING=your-value --env FB_ADS_CAMPAIGN_SPEND_CAP_MAX=your-value --env FB_LOG_LEVEL=your-value -- npx -y @ivanbaev/facebook-mcpFill in the empty values before running it.
Or copy the settings yourself
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"facebook": {
"command": "npx",
"args": [
"-y",
"@ivanbaev/facebook-mcp"
],
"env": {
"FB_SYSTEM_TOKEN": "your-value",
"FB_ACCESS_TOKEN": "your-value",
"FB_PAGE_TOKEN": "your-value",
"FB_APP_ID": "your-value",
"FB_APP_SECRET": "your-value",
"FB_PAGE_ID": "your-value",
"FB_API_VERSION": "your-value",
"FB_ADS_API_VERSION": "your-value",
"FB_REQUEST_TIMEOUT_MS": "your-value",
"FB_HOST_CONCURRENCY": "your-value",
"FB_MAX_RESULT_CHARS": "your-value",
"FB_WRITE_MODE": "your-value",
"FB_CONFIRM_TOKEN": "your-value",
"FB_MEDIA_DIR": "your-value",
"FB_JOURNAL_PATH": "your-value",
"FB_ACTIVITY_STATE_PATH": "your-value",
"FB_EXPORT_DIR": "your-value",
"FB_TOOL_PACKAGES": "your-value",
"FB_PACKAGES_DENY": "your-value",
"FB_PACKAGES_READONLY": "your-value",
"FB_TRANSPORT": "your-value",
"FB_HTTP_TOKEN": "your-value",
"FB_HTTP_PORT": "your-value",
"FB_AD_ACCOUNT_ID": "your-value",
"FB_ADS_BUDGET_CEILING": "your-value",
"FB_ADS_CAMPAIGN_SPEND_CAP_MAX": "your-value",
"FB_LOG_LEVEL": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Or copy the settings yourself
Paste into .vscode/mcp.json in your project
{
"servers": {
"facebook": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@ivanbaev/facebook-mcp"
],
"env": {
"FB_SYSTEM_TOKEN": "your-value",
"FB_ACCESS_TOKEN": "your-value",
"FB_PAGE_TOKEN": "your-value",
"FB_APP_ID": "your-value",
"FB_APP_SECRET": "your-value",
"FB_PAGE_ID": "your-value",
"FB_API_VERSION": "your-value",
"FB_ADS_API_VERSION": "your-value",
"FB_REQUEST_TIMEOUT_MS": "your-value",
"FB_HOST_CONCURRENCY": "your-value",
"FB_MAX_RESULT_CHARS": "your-value",
"FB_WRITE_MODE": "your-value",
"FB_CONFIRM_TOKEN": "your-value",
"FB_MEDIA_DIR": "your-value",
"FB_JOURNAL_PATH": "your-value",
"FB_ACTIVITY_STATE_PATH": "your-value",
"FB_EXPORT_DIR": "your-value",
"FB_TOOL_PACKAGES": "your-value",
"FB_PACKAGES_DENY": "your-value",
"FB_PACKAGES_READONLY": "your-value",
"FB_TRANSPORT": "your-value",
"FB_HTTP_TOKEN": "your-value",
"FB_HTTP_PORT": "your-value",
"FB_AD_ACCOUNT_ID": "your-value",
"FB_ADS_BUDGET_CEILING": "your-value",
"FB_ADS_CAMPAIGN_SPEND_CAP_MAX": "your-value",
"FB_LOG_LEVEL": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.
Your choice stays on this device in a cookie; no account needed.
Values you fill in
- System-user access token (Business Manager). Takes precedence over FB_ACCESS_TOKEN and FB_PAGE_TOKEN when several are set.
- Primary user access token. At least one of FB_SYSTEM_TOKEN, FB_ACCESS_TOKEN or FB_PAGE_TOKEN must be set.
- Long-lived Page access token used as a fallback credential when no user or system-user token is configured. It belongs to exactly one Page, so set FB_PAGE_ID to that Page ID alongside it (the doctor…
FB_APP_IDenvMeta app ID; combined with FB_APP_SECRET it forms the app access token used to authorize /debug_token inspection.- Meta app secret. When set, appsecret_proof is attached to every call so a stolen bare token cannot be used on its own.
FB_PAGE_IDenvDefault Facebook Page ID, used when a tool call omits an explicit profile argument. Required when FB_PAGE_TOKEN is the only credential: it names the Page that token belongs to.FB_API_VERSIONenvGraph API version to target. Defaults to the tested pinned version; other values are accepted verbatim as an escape hatch but are not tested.FB_ADS_API_VERSIONenvMarketing API version the ads tools target (ad accounts, campaigns, ad sets, ads, insights, async reports). The Marketing API retires versions on its own, shorter schedule, so it is pinned separately…FB_REQUEST_TIMEOUT_MSenvPer-request timeout in milliseconds; integer in [1, 600000].FB_HOST_CONCURRENCYenvMaximum number of in-flight requests per Graph host; integer in [1, 64].FB_MAX_RESULT_CHARSenvCharacter budget applied by the result shaper before a tool result is truncated; integer in [500, 10000000].FB_WRITE_MODEenvWrite gating mode: plan (validating dry-run preview, the default) or apply. It never covers the irreversible and spend tiers, which always need a per-call apply plus a plan_id.- Operator confirmation token for out-of-band approval of irreversible or spend actions. The server prompts through MCP elicitation where the client supports it; otherwise the caller passes this value…
FB_MEDIA_DIRenvDirectory permitted for local media uploads. Unset means URL-only uploads and no local file access at all.FB_JOURNAL_PATHenvPath to the append-only write journal. Defaults to the XDG/%APPDATA% state path; the file is created owner-only (0600) and rotates by size.FB_ACTIVITY_STATE_PATHenvPath to the small JSON file where facebook_get_activity_since keeps, per Page, the horizon of the last complete read. Defaults to the XDG/%APPDATA% state path next to the journal; the file holds Page…FB_EXPORT_DIRenvDirectory where the insights tools write a CSV or JSON file when called with `output`. Defaults to `exports/` under the XDG/%APPDATA% state path. Files are written atomically and owner-only (0600) an…FB_TOOL_PACKAGESenvComma-separated tool packages or profiles to expose (e.g. core,posts,reader, or the profiles core|all|reader|publisher|moderator|ads). Omit for the default profile, which excludes ads.FB_PACKAGES_DENYenvComma-separated packages OR profiles to exclude even when FB_TOOL_PACKAGES enables them; deny wins over allow. Profile names expand here exactly as they do in FB_TOOL_PACKAGES, and a profile beats a…FB_PACKAGES_READONLYenvComma-separated packages OR profiles whose write tools are not registered at all; the read tools of those packages stay available. Profile names expand as they do in FB_TOOL_PACKAGES, so FB_PACKAGES_…FB_TRANSPORTenvTransport protocol: stdio (default) or http. The http transport binds 127.0.0.1 only and fails closed without FB_HTTP_TOKEN.- Bearer token guarding the HTTP transport; required when FB_TRANSPORT=http (the server refuses to start without it). At least 16 characters — a shorter value is refused (under stdio it is dropped with…
FB_HTTP_PORTenvPort for the HTTP transport (loopback only); used when FB_TRANSPORT=http. Integer in [1, 65535].FB_AD_ACCOUNT_IDenvDefault ad account ID (act_… or the bare numeric id) for the opt-in ads package.FB_ADS_BUDGET_CEILINGenvHard ceiling for any ads budget write, in minor units of the ad account's own currency (e.g. cents for USD). Non-negative integer; a write above it is refused. No currency conversion: size it for the…FB_ADS_CAMPAIGN_SPEND_CAP_MAXenvLargest campaign spend_cap (the lifetime total a campaign may spend) that an ads write may set, in minor units of the ad account's own currency. Non-negative integer; a cap above it is refused, never…FB_LOG_LEVELenvStderr log verbosity: debug, info, warn or error. Logs never go to stdout — that is the stdio protocol channel.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
What it can do
Runs on your computer; the tool list appears in your AI app after you install it.
Basic checksi
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 9, 2026
- ✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account IvanBBaev, which owns the repo
- … Not checked yet
Still maintained
We have not read this repo from GitHub yet
- … Not checked yet
Has a licence
We have not read this repo from GitHub yet
- – Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
- – Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
- … Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints
Compared with others in Marketing & social mediai
- More stars than 0% of the other 3615 servers in this category
- Published to the registry more recently than 75% of the other 3615 servers in this category
- Basic checks equal to or better than 100% of the other 3615 servers in this category
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
Common questions
Is Facebook MCP safe?
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
What keys or codes does it need?
You need to fill in: FB_SYSTEM_TOKEN, FB_ACCESS_TOKEN, FB_PAGE_TOKEN, FB_APP_SECRET, FB_CONFIRM_TOKEN, FB_HTTP_TOKEN
Does it run on my computer or in the cloud?
It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).
Is it still maintained?
The GitHub repo last changed –, and the latest version (0.8.0) reached the registry 11 days ago.
Which apps can use it?
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.
What can I use instead?
In the same category: MCP YouTube Transcript, Google Analytics MCP, BibiGPT YouTube Video Summarizer
Alternatives
Servers in the same category from other makers, sorted by stars.
Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Google Analytics MCP
GA4 MCP server for AI agents: schema discovery, server-side aggregation, analysis-ready defaults.
BibiGPT YouTube Video Summarizer
AI video summarizer: summarize and transcribe YouTube, Bilibili, TikTok and podcast videos.
README from the maker
Open the README
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
facebook-mcp — an MCP server for Facebook Pages
📖 [Documentation site →](https://ivanbbaev.github.io/facebook-mcp/)
A local-first, MIT-licensed TypeScript Model Context Protocol (MCP) server for developers who run their own Facebook Page(s) from an MCP client such as Claude Code, Claude Desktop, VS Code or Cursor. It talks to the Meta Graph API through your own Meta developer app and your own token: publishing, reading and insights, comment moderation and Messenger replies. Writes return a preview first by default (plan-and-apply), and the server sends no telemetry.
Things you could ask your agent once it is set up (the tools exist; see Status for what has been verified):
- _"Draft a post with this photo and schedule it for Friday 9:00 — show me the preview first."_
- _"Triage the unanswered comments on last week's posts."_
- _"Give me this week's Page report."_
Not for you if you do not want to create a Meta developer app and handle an App ID, an App Secret and a token yourself — hosted social-media connectors with a one-click login are a better fit for that. It is also not for personal profiles, Groups, Instagram (there is a sibling server) or a hosted service for other people's Pages — see Not in scope.
Status
🚧 Pre-1.0, and not yet verified against a live Page. The latest release is
0.8.0 on npm. This README describes
main, which can be ahead of that release;
unreleased changes are listed in
changes/unreleased/.
- Implemented, not live-verified. All 69 tools in the tool table are implemented. Every test in this repository runs against fakes and recorded fixtures behind a network fence that throws on a real
fetch, so "the tests pass" means "the code does what the fixtures say", not "Meta accepted it". A live smoke harness exists (scripts/smoke/) but has not been run against a real Page for any release. - No client verified by hand. CI starts the packed server with
npxon Linux, macOS and Windows, but no person has walked an install end-to-end in any MCP client yet — see Client compatibility. - Experimental tools. Some tools are marked experimental (list under Not in scope): they may change in any minor release, even after 1.0.
- Breaking changes are planned. 0.9 changes tool contracts (see Roadmap). Read Known limitations before you rely on anything.
Contents: Status · Features · Requirements · Setup · Client compatibility · Configure credentials · Permissions · Tools · How this compares · Known limitations · Not in scope · Your responsibilities · Roadmap · Security notes · Documentation · Support · Trademark · License
Features
Implementation status only — see Status for what "implemented" does and does not mean. "Experimental" follows the experimental tier.
| Area | Capability | Status |
|---|---|---|
| Core & diagnostics | Identity, Page listing, rate-limit usage, doctor pre-flight check, setup-token | ✅ Implemented, not live-verified |
| Reading | Page and post reads, Reels, reactions, Stories, albums and photos, cursor pagination | ✅ Implemented, not live-verified |
| Publishing | Text / link / photo / video / Reels posts, Stories, scheduling, edit and delete | ✅ Implemented, not live-verified |
| Insights | Page, post and Reel insights, a one-call Page report, a posts comparison table, metric-rename and retirement guidance | ✅ Implemented, not live-verified |
| Moderation | Comment reads and triage, replies, comment edits, hide, like, delete, private reply, block/unblock, moderation settings | ✅ Implemented, not live-verified |
| Messaging | Conversation reads, "what is new since", replies within the 24-hour window, saved replies; message reactions, attachments and labels | ✅ Implemented, not live-verified (some experimental) |
| Ads (opt-in) | Campaign / ad-set / ad reads, previews, insights, status, budget and spend-cap control; archive/delete, image upload, targeting edits, copies, boost | ✅ Implemented, not live-verified (some experimental) |
| Page profile (opt-in) | Edit the Page's about, description, website, phone, hours, temporary status | ✅ Implemented, not live-verified, experimental |
| Live verification | Every tool exercised against a real Page and a real ad account | ❌ Not done — see Status |
| npm / MCPB release | npx @ivanbaev/facebook-mcp, attested .mcpb bundle, MCP Registry listing | ✅ Published — 0.8.0 |
Each tool wraps one capability rather than mirroring every Graph edge. Six packages (53 tools) are on by default; ads and page_admin are opt-in.
- Local-first, no telemetry. Only three Meta hosts are ever reached (
graph,graph-video,rupload); nothing phones home. - Least-privilege credentials. Works with a never-expiring System User token (Business Manager) or a long-lived Page token — no App Review required for an admin operating their own assets.
- Safe writes. Tiered plan-and-apply gating; irreversible and spend actions require out-of-band confirmation and are never unlocked by an env flag alone.
- Secret hygiene. Value-based redaction of secrets at a single choke-point across logs, errors, tool results, and the write journal.
- Layered architecture. Lint-enforced
core ← api ← mcp ← tools ← cli ← serverlayering, tools-as-data with a central package registry.
Requirements
- Node.js ≥ 22 (enforced by
enginesand a runtime guard in the launcher; the project targets the version in.nvmrc). - A Meta (Facebook) developer app — a Business-type app at Standard Access is enough; no App Review is needed to operate your own assets.
- A Facebook Page (and, for the opt-in
adspackage, an ad account) you administer.
Setup
The first run is five steps, in this order. Most of the time goes into Meta's app UI. docs/runbooks/onboarding.md is the long form with troubleshooting.
- Meta app — create a Business-type app at https://developers.facebook.com/apps and note its App ID and App Secret (Settings → Basic).
setup-tokenneeds both. - Short-lived token — in the Graph API Explorer pick your app, User Token, tick the scopes you need (at least
pages_show_listandpages_read_engagement), and Generate Access Token. It lives 1–2 hours, so do step 3 right away. - Exchange it and write the env file —
setup-tokenswaps it for a ~60-day token, resolves your Page and writes the env file:
FB_APP_ID='<app id>' FB_APP_SECRET='<app secret>' \
FB_SETUP_TOKEN=' ' \ npx -y @ivanbaev/facebook-mcp setup-token
Success is status: completed in the Run block and status: written in the Env file block. The file lands at ~/.config/facebook-mcp/.env ($XDG_CONFIG_HOME if set) or %APPDATA%\facebook-mcp\.env on Windows, mode 0600. The server reads it on every start, so the client config below needs no env block. More than one Page? Re-run with --page= --force.
- Pre-flight — every package you plan to use should be
usable:
npx -y @ivanbaev/facebook-mcp doctor
- Register the server with your client and make the first call — see the next two subsections, then
Only the beginning is shown; read the rest in the repo