generated: '2026-06-20'
method: searched
source: >-
  https://developers.facebook.com/docs/development/build-and-test/test-users/ and
  https://developers.facebook.com/docs/development/build-and-test/. Meta's
  sandbox model is "test users" + Development mode, not test card/key prefixes.
description: >-
  Meta's testing surface. Rather than test-vs-live API keys, Meta isolates
  testing through App "Development mode" and simulated test-user accounts that
  can only interact with each other and app admins/developers. Values below are
  the documented mechanisms, not invented credentials.
modes:
  development:
    description: An app in Development mode; test users can be granted any permission and access all features.
    note: Data generated by a test user is visible only to other test users and app admins/developers.
test_users:
  description: Simulated Facebook accounts for testing Facebook Login and Graph API without real users.
  creation:
    - method: dashboard
      path: App Dashboard > Roles > Test Users
      note: Create up to 4 at a time; optionally install the app and grant permissions.
    - method: graph-api
      endpoint: POST /{app-id}/accounts/test-users
      note: Programmatic bulk creation; can set permissions and installed state.
  tokens: Test users can generate valid User access tokens (via dashboard or Graph API) for auth testing.
  limits:
    - Apps are limited to a bounded number of test users (documented as up to 10; dashboard creates up to 4 at a time).
    - Test users cannot interact with real Facebook users.
    - Test users cannot be converted to real users.
  management: Credentials can be changed, permissions modified, and friend connections created between test users.
tools:
  - {name: Graph API Explorer, url: https://developers.facebook.com/tools/explorer/, note: Interactively build and run Graph API calls with a selected token/permissions.}
  - {name: Access Token Debugger, url: https://developers.facebook.com/tools/debug/accesstoken/, note: Inspect token app, user, scopes, and expiry.}
  - {name: Sharing/Webhook debuggers, url: https://developers.facebook.com/tools/, note: Additional developer tools.}
notes: >-
  There are no published test card numbers or magic test identifiers for the
  Graph API; isolation is achieved via Development mode + test users. Never
  invent test tokens — generate them per test user through the dashboard/API.