Facebook MCP server

by IvanBBaev·io.github.IvanBBaev/facebook-mcp·v0.7.0

No reviews yet

Facebook Pages MCP server for the Meta Graph API — publishing, insights, moderation, messaging

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

not scanned yet

Adoption

Not measured yet

Usage numbers are collected on the next scan

Reviews

Write one

Nobody has reviewed Facebook yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Facebook tools

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New registry listings are scanned within a day of import.

Install directly

Runs npx -y @ivanbaev/facebook-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add facebook-mcp -- npx -y @ivanbaev/facebook-mcp

Add to Cursor

Facebook: common questions

Is Facebook MCP server safe?: Not known yet: the safety scan has not run. New listings are scanned within a few days.
How do I install Facebook?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Facebook need an API key?: Yes. The registry entry asks for FB_SYSTEM_TOKEN, FB_ACCESS_TOKEN, FB_PAGE_TOKEN, FB_APP_SECRET and 2 more.
Is Facebook maintained?: The latest release is v0.7.0.

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: Pending
Stars: –
Downloads/wk: –
Price: Free
Licence: —
Transport: Local · npm
Version: 0.7.0
Category: Everything else
Last release: —

Credentials it needs

FB_SYSTEM_TOKENsecretSystem-user access token (Business Manager). Takes precedence over FB_ACCESS_TOKEN and FB_PAGE_TOKEN when several are set.
FB_ACCESS_TOKENsecretPrimary user access token. At least one of FB_SYSTEM_TOKEN, FB_ACCESS_TOKEN or FB_PAGE_TOKEN must be set.
FB_PAGE_TOKENsecretLong-lived Page access token used as a fallback credential when no user or system-user token is configured.
FB_APP_IDMeta app ID; combined with FB_APP_SECRET it forms the app access token used to authorize /debug_token inspection.
FB_APP_SECRETsecretMeta app secret. When set, appsecret_proof is attached to every call so a stolen bare token cannot be used on its own.
FB_PAGE_IDDefault Facebook Page ID, used when a tool call omits an explicit profile argument.
FB_API_VERSIONGraph API version to target. Defaults to the tested pinned version; other values are accepted verbatim as an escape hatch but are not tested.
FB_REQUEST_TIMEOUT_MSPer-request timeout in milliseconds; integer in [1, 600000].
FB_HOST_CONCURRENCYMaximum number of in-flight requests per Graph host; integer in [1, 64].
FB_MAX_RESULT_CHARSCharacter budget applied by the result shaper before a tool result is truncated; integer in [500, 10000000].
FB_WRITE_MODEWrite gating mode: plan (validating dry-run preview, the default) or apply. It never covers the irreversible and spend tiers, which always need a per-call apply plus a plan_id.
FB_CONFIRM_TOKENsecretOperator confirmation token for out-of-band approval of irreversible or spend actions. The server prompts through MCP elicitation where the client supports it; otherwise the caller passes this value as the confirm_token tool argument.
FB_MEDIA_DIRDirectory permitted for local media uploads. Unset means URL-only uploads and no local file access at all.
FB_JOURNAL_PATHPath to the append-only write journal. Defaults to the XDG/%APPDATA% state path; the file is created owner-only (0600) and rotates by size.
FB_TOOL_PACKAGESComma-separated tool packages or profiles to expose (e.g. core,posts,reader, or the profiles core|all|reader|publisher|moderator|ads). Omit for the default profile, which excludes ads.
FB_PACKAGES_DENYComma-separated packages to exclude even when FB_TOOL_PACKAGES enables them. Deny wins over allow.
FB_PACKAGES_READONLYComma-separated packages whose write tools are not registered at all; the read tools of those packages stay available.
FB_TRANSPORTTransport protocol: stdio (default) or http. The http transport binds 127.0.0.1 only and fails closed without FB_HTTP_TOKEN.
FB_HTTP_TOKENsecretBearer token guarding the HTTP transport; required when FB_TRANSPORT=http (the server refuses to start without it).
FB_HTTP_PORTPort for the HTTP transport (loopback only); used when FB_TRANSPORT=http. Integer in [1, 65535].
FB_AD_ACCOUNT_IDDefault ad account ID (act_… or the bare numeric id) for the opt-in ads package.
FB_ADS_BUDGET_CEILINGHard ceiling for any ads budget write, in minor currency units (e.g. cents). Non-negative integer; a write above it is refused.
FB_LOG_LEVELStderr log verbosity: debug, info, warn or error. Logs never go to stdout — that is the stdio protocol channel.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/ivanbbaev-facebook-mcp.svg)](https://mcp.market/server/ivanbbaev-facebook-mcp)

How the badge works