Skip to content

Facebook App Token

Service Name: Facebook (Meta)

Service Description: Facebook is a social media platform owned by Meta Platforms that allows users to connect, share content, and interact with friends, family, and businesses.

Service Address: https://facebook.com

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to Facebook Graph API resources based on the permissions associated with the app.

Secret Revokement URL: https://developers.facebook.com/apps/

Secret Example: 123456789012345|A1B2C3D4E5F6G7H8I9J0K1L2M3

Suspicious Activity Investigation Instructions:

  • Check Facebook Developer Portal for unusual API calls or permission changes
  • Review app activity logs for unauthorized access patterns
  • Monitor app analytics for unexpected spikes in usage
  • Check for changes in app settings or permissions

Mitigation Instructions:

  • Navigate to the Facebook Developer Portal (https://developers.facebook.com/apps/)
  • Select the affected application
  • Go to Settings > Basic
  • Reset or regenerate the app token
  • Review and update app permissions to limit access
  • Consider implementing IP restrictions if available for your app type