facebook-mcp

{
  "name": "io.github.IvanBBaev/facebook-mcp",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "version": "0.7.0",
  "packages": [
    {
      "version": "0.7.0",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@ivanbaev/facebook-mcp",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "FB_SYSTEM_TOKEN",
          "format": "string",
          "isSecret": true,
          "description": "System-user access token (Business Manager). Takes precedence over FB_ACCESS_TOKEN and FB_PAGE_TOKEN when several are set."
        },
        {
          "name": "FB_ACCESS_TOKEN",
          "format": "string",
          "isSecret": true,
          "description": "Primary user access token. At least one of FB_SYSTEM_TOKEN, FB_ACCESS_TOKEN or FB_PAGE_TOKEN must be set."
        },
        {
          "name": "FB_PAGE_TOKEN",
          "format": "string",
          "isSecret": true,
          "description": "Long-lived Page access token used as a fallback credential when no user or system-user token is configured."
        },
        {
          "name": "FB_APP_ID",
          "format": "string",
          "description": "Meta app ID; combined with FB_APP_SECRET it forms the app access token used to authorize /debug_token inspection."
        },
        {
          "name": "FB_APP_SECRET",
          "format": "string",
          "isSecret": true,
          "description": "Meta app secret. When set, appsecret_proof is attached to every call so a stolen bare token cannot be used on its own."
        },
        {
          "name": "FB_PAGE_ID",
          "format": "string",
          "description": "Default Facebook Page ID, used when a tool call omits an explicit profile argument."
        },
        {
          "name": "FB_API_VERSION",
          "format": "string",
          "default": "v23.0",
          "description": "Graph API version to target. Defaults to the tested pinned version; other values are accepted verbatim as an escape hatch but are not tested."
        },
        {
          "name": "FB_REQUEST_TIMEOUT_MS",
          "format": "number",
          "default": "60000",
          "description": "Per-request timeout in milliseconds; integer in [1, 600000]."
        },
        {
          "name": "FB_HOST_CONCURRENCY",
          "format": "number",
          "default": "4",
          "description": "Maximum number of in-flight requests per Graph host; integer in [1, 64]."
        },
        {
          "name": "FB_MAX_RESULT_CHARS",
          "format": "number",
          "default": "25000",
          "description": "Character budget applied by the result shaper before a tool result is truncated; integer in [500, 10000000]."
        },
        {
          "name": "FB_WRITE_MODE",
          "format": "string",
          "choices": [
            "plan",
            "apply"
          ],
          "default": "plan",
          "description": "Write gating mode: plan (validating dry-run preview, the default) or apply. It never covers the irreversible and spend tiers, which always need a per-call apply plus a plan_id."
        },
        {
          "name": "FB_CONFIRM_TOKEN",
          "format": "string",
          "isSecret": true,
          "description": "Operator confirmation token for out-of-band approval of irreversible or spend actions. The server prompts through MCP elicitation where the client supports it; otherwise the caller passes this value as the confirm_token tool argument."
        },
        {
          "name": "FB_MEDIA_DIR",
          "format": "filepath",
          "description": "Directory permitted for local media uploads. Unset means URL-only uploads and no local file access at all."
        },
        {
          "name": "FB_JOURNAL_PATH",
          "format": "filepath",
          "description": "Path to the append-only write journal. Defaults to the XDG/%APPDATA% state path; the file is created owner-only (0600) and rotates by size."
        },
        {
          "name": "FB_TOOL_PACKAGES",
          "format": "string",
          "description": "Comma-separated tool packages or profiles to expose (e.g. core,posts,reader, or the profiles core|all|reader|publisher|moderator|ads). Omit for the default profile, which excludes ads."
        },
        {
          "name": "FB_PACKAGES_DENY",
          "format": "string",
          "description": "Comma-separated packages to exclude even when FB_TOOL_PACKAGES enables them. Deny wins over allow."
        },
        {
          "name": "FB_PACKAGES_READONLY",
          "format": "string",
          "description": "Comma-separated packages whose write tools are not registered at all; the read tools of those packages stay available."
        },
        {
          "name": "FB_TRANSPORT",
          "format": "string",
          "choices": [
            "stdio",
            "http"
          ],
          "default": "stdio",
          "description": "Transport protocol: stdio (default) or http. The http transport binds 127.0.0.1 only and fails closed without FB_HTTP_TOKEN."
        },
        {
          "name": "FB_HTTP_TOKEN",
          "format": "string",
          "isSecret": true,
          "description": "Bearer token guarding the HTTP transport; required when FB_TRANSPORT=http (the server refuses to start without it)."
        },
        {
          "name": "FB_HTTP_PORT",
          "format": "number",
          "default": "3000",
          "description": "Port for the HTTP transport (loopback only); used when FB_TRANSPORT=http. Integer in [1, 65535]."
        },
        {
          "name": "FB_AD_ACCOUNT_ID",
          "format": "string",
          "description": "Default ad account ID (act_… or the bare numeric id) for the opt-in ads package."
        },
        {
          "name": "FB_ADS_BUDGET_CEILING",
          "format": "number",
          "description": "Hard ceiling for any ads budget write, in minor currency units (e.g. cents). Non-negative integer; a write above it is refused."
        },
        {
          "name": "FB_LOG_LEVEL",
          "format": "string",
          "choices": [
            "debug",
            "info",
            "warn",
            "error"
          ],
          "default": "info",
          "description": "Stderr log verbosity: debug, info, warn or error. Logs never go to stdout — that is the stdio protocol channel."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/IvanBBaev/facebook-mcp",
    "source": "github"
  },
  "websiteUrl": "https://ivanbbaev.github.io/facebook-mcp/",
  "description": "Facebook Pages MCP server for the Meta Graph API — publishing, insights, moderation, messaging"
}