generated: '2026-08-13' method: searched source: https://developers.facebook.com/docs/permissions docs: https://developers.facebook.com/docs/permissions specification: API Commons OAuthScopes specificationVersion: '0.1' provider: Facebook Business Manager providerId: facebook-business-manager description: >- Meta calls OAuth scopes "permissions" and publishes them in a single Permissions Reference for Meta Technologies APIs. Permissions are app-user-granted and gated by App Review; Advanced Access to any permission additionally requires Business Verification. The list below was read from that reference page on 2026-08-13, plus the machine-readable scopes_supported arrays served by Meta's two MCP servers at /.well-known/oauth-protected-resource/{ads,devtools}. Note: derive-oauth-scopes.py produced nothing for this repo because the OpenAPI files in openapi/ declare a bearer http securityScheme rather than an oauth2 scheme with a scopes map — the scopes below are searched from the docs, not derived from a spec. access_tiers: - name: Standard Access description: Default tier. Applies to data the app owns or manages. No App Review required for most permissions. - name: Advanced Access description: >- Required to access data owned by other businesses/users. Requires App Review, Business Verification, and (for permissions touching user data) an annual Data Use Checkup and, for advanced permissions, a Data Protection Assessment. policies: - name: 90-day regrant description: If an app does not use a permission for 90 days, the app user must grant it again. - name: Granular consent description: App users may grant or deny any subset of the permissions an app requests. - name: Least privilege description: >- Meta names over-requesting as a common cause of App Review rejection ("Only select permissions that your app needs to function as intended"). mcp_scopes: - server: https://mcp.facebook.com/ads source: https://mcp.facebook.com/.well-known/oauth-protected-resource/ads method: probed scopes: - ads_management - ads_read - catalog_management - business_management - pages_show_list - instagram_basic - ads_mcp_management - server: https://mcp.facebook.com/devtools source: https://mcp.facebook.com/.well-known/oauth-protected-resource/devtools method: probed scopes: - developer_tools_mcp_app_read - developer_tools_mcp_app_management scopes: - name: public_profile group: default description: Default permission granted with every Facebook Login. Basic profile fields. - name: email group: default description: The app user's primary email address. - name: ads_management group: ads description: >- Read and manage the ad accounts the app owns or has been granted access to. Programmatically create campaigns, manage ads, fetch ad metrics. Dependencies: pages_read_engagement, pages_show_list. - name: ads_read group: ads description: Read-only access to ads performance data for owned or granted ad accounts. - name: ads_mcp_management group: ads description: >- Access the Meta ads Model Context Protocol (MCP) server and enable AI agents to interact with Meta Ads on behalf of advertisers — create and manage campaigns, retrieve insights and reporting, and manage business assets like catalogs, ad accounts and pixels. - name: attribution_read group: ads description: Read Meta attribution and measurement data. - name: read_insights group: insights description: Read Insights data for Pages, apps and web domains the app user owns. - name: read_audience_network_insights group: insights description: Read Audience Network insights for apps the app user administers. - name: business_management group: business description: Read and write Business Manager assets, users and asset assignments. - name: catalog_management group: commerce description: Create, read, update and delete product catalogs owned by a business. - name: commerce_manage_accounts group: commerce description: Manage commerce accounts for a business. - name: commerce_account_manage_orders group: commerce description: Manage orders on a commerce account. - name: commerce_account_read_orders group: commerce description: Read orders on a commerce account. - name: commerce_account_read_reports group: commerce description: Read commerce account reports. - name: commerce_account_read_settings group: commerce description: Read commerce account settings. - name: leads_retrieval group: ads description: Download lead data generated by Lead Ads forms on Pages the app user manages. - name: pages_show_list group: pages description: List the Pages the app user manages. - name: pages_read_engagement group: pages description: Read content, engagement and metadata on Pages the app user manages. - name: pages_read_user_content group: pages description: Read user-generated content (posts, comments, ratings) on managed Pages. - name: pages_manage_posts group: pages description: Create, edit and delete posts on managed Pages. - name: pages_manage_engagement group: pages description: Create, edit and delete comments and likes on managed Pages. - name: pages_manage_metadata group: pages description: Manage Page settings and subscribe/unsubscribe apps to Page webhooks. - name: pages_manage_ads group: pages description: Manage ads associated with a Page. - name: pages_manage_cta group: pages description: Manage the call-to-action button on a Page. - name: pages_manage_instant_articles group: pages description: Manage Instant Articles on behalf of Pages the app user administers. - name: pages_messaging group: messaging description: Send and receive messages through a Page (Messenger Platform). - name: pages_utility_messaging group: messaging description: Send utility (non-promotional) messages through a Page. - name: pages_events group: pages description: Log Page events for advertising and analytics. - name: pages_user_gender group: pages description: Read the gender of a user interacting with a managed Page. - name: pages_user_locale group: pages description: Read the locale of a user interacting with a managed Page. - name: pages_user_timezone group: pages description: Read the time zone of a user interacting with a managed Page. - name: publish_video group: media description: Publish live and on-demand video to a Page, group or user. - name: instagram_basic group: instagram description: Read basic metadata and media for an Instagram Business or Creator account. - name: instagram_business_basic group: instagram description: Basic access under Business Login for Instagram. - name: instagram_content_publish group: instagram description: Publish content to an Instagram Business account. - name: instagram_business_content_publish group: instagram description: Publish content under Business Login for Instagram. - name: instagram_manage_comments group: instagram description: Read and manage comments on Instagram media. - name: instagram_business_manage_comments group: instagram description: Manage comments under Business Login for Instagram. - name: instagram_manage_insights group: instagram description: Read insights for an Instagram Business account and its media. - name: instagram_manage_messages group: instagram description: Send and receive Instagram Direct messages. - name: instagram_business_manage_messages group: instagram description: Messaging under Business Login for Instagram. - name: instagram_manage_events group: instagram description: Log events for an Instagram Business account. - name: instagram_manage_upcoming_events group: instagram description: Manage upcoming events on an Instagram Business account. - name: instagram_manage_contents group: instagram description: Manage content on an Instagram Business account. - name: instagram_manage_engagement group: instagram description: Manage engagement on an Instagram Business account. - name: instagram_shopping_tag_products group: instagram description: Tag products from a catalog in Instagram media. - name: instagram_branded_content_brand group: instagram description: Branded content access on the brand side. - name: instagram_branded_content_ads_brand group: instagram description: Run partnership ads against creator branded content. - name: instagram_branded_content_creator group: instagram description: Branded content access on the creator side. - name: instagram_creator_marketplace_discovery group: instagram description: Discover creators in the Instagram Creator Marketplace. - name: instagram_creator_marketplace_messaging group: instagram description: Message creators in the Instagram Creator Marketplace. - name: whatsapp_business_management group: whatsapp description: Manage WhatsApp Business Accounts, phone numbers, templates and settings. - name: whatsapp_business_messaging group: whatsapp description: Send and receive messages through the WhatsApp Business Platform Cloud API. - name: whatsapp_business_manage_events group: whatsapp description: Log WhatsApp business events. - name: threads_basic group: threads description: Read basic profile and media data for a Threads account. - name: threads_business_basic group: threads description: Basic access for Threads business accounts. - name: threads_content_publish group: threads description: Publish posts to Threads. - name: threads_delete group: threads description: Delete Threads posts. - name: threads_read_replies group: threads description: Read replies to Threads posts. - name: threads_manage_replies group: threads description: Hide, unhide and reply to Threads replies. - name: threads_manage_mentions group: threads description: Read and respond to Threads mentions. - name: threads_manage_insights group: threads description: Read Threads media and account insights. - name: threads_keyword_search group: threads description: Search Threads by keyword. - name: threads_location_tagging group: threads description: Tag locations on Threads posts. - name: threads_profile_discovery group: threads description: Discover public Threads profiles. - name: threads_share_to_instagram group: threads description: Share Threads content to Instagram. - name: threads_user_id group: threads description: Access the Threads user id. - name: manage_app_solutions group: apps description: Manage app solutions on behalf of a business. - name: manage_fundraisers group: social description: Create and manage fundraisers on behalf of the app user. - name: user_age_range group: user description: The app user's age range bucket. - name: user_birthday group: user description: The app user's birthday. - name: user_friends group: user description: The app user's friends who also use the app. - name: user_gender group: user description: The app user's gender. - name: user_hometown group: user description: The app user's hometown. - name: user_likes group: user description: Pages the app user has liked. - name: user_link group: user description: The URL of the app user's Facebook profile. - name: user_location group: user description: The app user's current city. - name: user_messenger_contact group: user description: Contact the app user on Messenger following a defined interaction. - name: user_photos group: user description: Photos the app user has uploaded or is tagged in. - name: user_posts group: user description: Posts on the app user's timeline. - name: user_videos group: user description: Videos the app user has uploaded or is tagged in. - name: gaming_profile group: gaming description: Gaming-scoped profile access. - name: gaming_user_locale group: gaming description: Gaming-scoped locale access. - name: developer_tools_mcp_app_read group: mcp description: >- Read access for the Meta Devtools MCP server. Sourced from https://mcp.facebook.com/.well-known/oauth-protected-resource/devtools, not from the Permissions Reference page. - name: developer_tools_mcp_app_management group: mcp description: >- Management access for the Meta Devtools MCP server. Sourced from https://mcp.facebook.com/.well-known/oauth-protected-resource/devtools. scope_count: 82 completeness_note: >- Meta's Permissions Reference is paginated A-Z in a partly client-rendered layout. The list above is what was legible in the served markup on 2026-08-13 plus the two MCP servers' machine-readable scope arrays. It is a large and representative sample, not a guaranteed exhaustive enumeration; treat https://developers.facebook.com/docs/permissions as canonical. maintainers: - FN: Kin Lane email: kin@apievangelist.com