Skip to content

Meta App Creds Pair

Service Name: Meta (Facebook, Instagram, WhatsApp)

Service Description: Meta Platforms, Inc. (formerly Facebook, Inc.) provides various social networking and technology services including Facebook, Instagram, and WhatsApp. Meta App Credentials allow developers to integrate with Meta's platforms through their APIs.

Service Address: https://developers.facebook.com/

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to Meta Platform APIs (Facebook, Instagram, WhatsApp) with the permissions defined in the app configuration.

Secret Revokement URL: https://developers.facebook.com/apps/

Secret Example: 123456789012|AbCdEfGhIjKlMnOpQrStUvWxYz123456

Suspicious Activity Investigation Instructions:

  • Check the Facebook Developer Portal for unusual API calls or permission changes
  • Review app usage metrics for abnormal patterns
  • Examine app settings for unauthorized changes to redirect URLs or permissions
  • Check for unexpected user data access or API calls
  • Review Facebook Business Manager for any suspicious activities

Mitigation Instructions:

  • Log into the Facebook Developer Portal at https://developers.facebook.com/apps/
  • Select the affected application
  • Navigate to App Settings > Basic
  • Click "Reset Secret" to invalidate the current client secret
  • Update the secret in all legitimate application instances
  • Review and potentially restrict app permissions
  • Enable additional security features like IP restrictions if available